Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File:                     KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier:          MppnRzySaXL1bbnnOmdMl7HuFHlYE6kXrGdYyPY2gXk=
Subject key identifier:   6C:92:90:0B:D2:2A:E3:D6:57:C0:71:A5:95:B2:09:9B:80:A7:76:94
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       019EBF919E69CACFBC33C8879ED6E637A07B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number:          0AFB
Signing time:             Sat 13 Jun 2026 06:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:51 +0000
Files and hashes:         1: 1-3-DY60yPSCu-gGKysRC3swXx_8.roa (hash: UlzeFAwkz1/eAC6acg1mI44oqAC1xGW8wLlCXELgn1c=)
                          2: C8cw5nbghQi4OUuGqLlmhBWbh3s.roa (hash: ukinZ9+XO0kbm22VodGuo/P5hn91OEClJ3feFpq9ZTY=)
                          3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: L0TsUkyKLEl8S94ROU9NJDM3jP1vVO4mIs9RI9f3WWE=)
                          4: RSPqJer2GxHPRRgn7mg4dhkHOBw.roa (hash: 7i2L3D7sVlNeXVt8GqQE+rm6gyBVSmDTLbXKjTKH2nY=)
                          5: SYlj0A7ENxSNVjYsMjznaXGLRb0.roa (hash: gSHMxEMobAWDQd7qISttpazhHFBCMdL/2XU1+z3hHPw=)
                          6: cc4XWIaKUX4G7Q_GjtBRl5l9JZE.roa (hash: EeYAGmv4ft4PsUT0/IzIQT/a4vqcFcE3Yy8BWdbkgXk=)
                          7: fEfL45_nElxBXhUCYxx1XsHuo5c.roa (hash: 4sHhygZisXsBQlSu9JyHHESLzAOFL7W3RM1k1ywaXgU=)
                          8: v_rtQKnxRRcDJjO2DbHhjK4pGwI.roa (hash: dNVSKhl9/MJthY4QH+PbCcLHkp0+SHaGKi4AwlYRixQ=)
                          9: vzN3nV9iPcz_PFptK8Xgm9B69kU.roa (hash: ePugewva4SdPAswHM9Dz4qq6ORFFWmGGZvhBBAVOF6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:9e:69:ca:cf:bc:33:c8:87:9e:d6:e6:37:a0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Jun 13 06:00:51 2026 GMT
            Not After : Jun 14 06:00:51 2026 GMT
        Subject: CN=6c92900bd22ae3d657c071a595b2099b80a77694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:e1:0d:89:60:18:1d:c1:21:8f:67:70:45:
                    94:e0:27:4d:1a:94:66:72:d6:2a:1c:3a:5b:8a:6a:
                    78:c6:51:3e:0c:7a:83:37:da:61:20:99:e8:b1:16:
                    80:ee:4d:35:19:12:be:32:ca:44:d9:4f:7a:e1:20:
                    20:47:67:8b:44:84:e4:45:9e:f2:7e:6e:1a:39:16:
                    50:34:d7:ec:c2:fe:2f:06:54:2b:cd:58:6d:47:7b:
                    09:2d:e5:0b:5a:d3:22:a7:f0:79:53:9f:72:86:20:
                    4b:da:7a:da:10:db:a1:63:6b:38:0c:9a:7f:2e:e5:
                    ca:68:53:f6:a1:4e:81:19:fd:53:0c:40:15:80:66:
                    ce:ce:21:69:80:24:21:35:ed:7d:99:e5:fa:c9:b4:
                    0d:fe:72:6e:0e:08:c3:fd:7a:5a:f8:6a:ce:bc:63:
                    01:92:3c:c9:c8:a2:29:f8:b8:b0:d8:89:bb:de:c5:
                    da:e0:77:5d:eb:62:36:da:3d:f3:19:25:cc:f0:02:
                    ed:75:0d:fa:a7:7b:36:70:0b:08:fa:6e:c5:3c:c9:
                    d7:b4:8b:bd:21:14:20:91:a4:91:78:95:4e:fa:0d:
                    40:dd:fa:76:02:d5:64:b5:90:18:03:b6:88:6e:f4:
                    63:e0:cb:98:d3:ae:d3:26:05:31:ac:95:68:f5:d4:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:90:0B:D2:2A:E3:D6:57:C0:71:A5:95:B2:09:9B:80:A7:76:94
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5f:4b:8a:0f:78:a4:b9:e7:54:80:8e:cd:f2:b4:2c:47:e7:
         70:ab:dc:74:fb:0d:ec:34:24:74:ae:48:c0:13:68:6a:81:b8:
         c6:9f:f7:c4:e2:36:3d:83:b9:5b:6d:8c:80:86:e2:5d:51:2b:
         5a:62:b7:55:3e:0b:e2:76:9b:42:1f:e7:20:b0:17:7b:6f:e1:
         ad:bc:71:0f:43:a6:7c:fe:45:62:50:03:ce:25:f1:1c:b0:4d:
         4e:2e:4e:9f:6a:ef:65:f3:70:75:eb:de:0a:04:35:4d:91:9a:
         32:ed:74:8e:0e:f4:4c:1b:e3:04:08:4a:8b:44:cb:77:bc:87:
         c7:4f:31:e6:7b:ae:73:8d:ee:7a:64:f3:d6:99:e3:b5:84:b5:
         11:7d:24:5e:18:09:41:fa:0a:d6:16:52:78:0d:85:d8:97:20:
         bc:01:e6:16:f2:e2:4d:06:45:06:4c:d5:53:6d:f3:71:3d:5e:
         88:93:d3:87:09:fb:d7:37:0d:8a:5a:48:5f:b7:e1:7d:d3:bc:
         d1:52:1a:eb:50:64:5c:c8:d9:3c:89:4f:52:ab:66:a7:44:cb:
         a6:4f:8a:c7:c3:38:09:02:49:45:1e:82:1a:96:f9:aa:56:8f:
         9b:d8:46:14:5e:6b:74:fc:e6:d1:1a:a2:1f:ce:70:ba:9e:7f:
         eb:6c:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:57 2026 by rpki-client