Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          1D6x5KzOeZZraoHhN6JxxDiUo1IyJIN1/kbhfzR4CS4=
Subject key identifier:   67:7C:32:72:7E:79:16:3F:C9:61:59:39:91:F3:59:25:BF:9A:94:91
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       019EC0DB23364C99D6BB72A7F84E5DCF486C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          12CF
Signing time:             Sat 13 Jun 2026 12:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:47 +0000
Files and hashes:         1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
                          2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: vU3j7EjPCKTZ05g+3zPiVcL4sngHL399TY2gJfrgKXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:23:36:4c:99:d6:bb:72:a7:f8:4e:5d:cf:48:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Jun 13 12:00:47 2026 GMT
            Not After : Jun 14 12:00:47 2026 GMT
        Subject: CN=677c32727e79163fc961593991f35925bf9a9491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:91:41:a3:50:10:07:89:c0:74:2d:6a:73:
                    43:bd:13:da:f2:6c:54:52:55:fe:fc:89:2c:2a:cc:
                    4c:03:e1:53:54:f9:ae:7a:41:c0:35:7e:f5:e9:44:
                    a3:92:c9:d7:9a:c4:ca:f4:a3:e7:18:5a:c0:6b:9b:
                    60:99:93:81:22:51:e4:bb:9c:db:84:37:12:03:7b:
                    47:ef:16:41:f9:c4:c1:9b:cb:dd:8e:3b:60:dc:d6:
                    d1:7d:b7:b5:79:15:cd:4b:6b:97:20:61:1c:fd:ae:
                    1c:08:77:38:d8:97:4d:27:1f:15:47:1c:da:a0:71:
                    db:9f:81:90:e4:a4:46:4d:53:c9:8b:29:16:66:4e:
                    6a:b7:30:4d:05:04:ef:61:d9:b7:f3:b6:20:da:53:
                    9d:f0:6f:02:1d:3f:7a:29:17:52:70:2e:98:12:60:
                    e7:fa:c0:e8:43:cd:41:c6:7a:e6:0d:2a:42:1c:e0:
                    e7:c1:81:26:56:ff:cb:5b:dc:92:71:79:c5:bb:b3:
                    4c:71:80:54:d8:bf:dd:01:72:fa:b3:c8:b9:34:f1:
                    b3:0d:9c:67:22:6e:1d:3c:c8:3d:f5:c8:7e:0b:55:
                    d7:94:7b:29:e8:e1:d3:44:79:e6:f7:60:fe:e4:a5:
                    94:4c:13:ff:40:b3:7f:b4:d6:f4:d5:b3:08:ed:f8:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7C:32:72:7E:79:16:3F:C9:61:59:39:91:F3:59:25:BF:9A:94:91
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e4:71:bf:7e:39:d7:b7:32:46:f9:c2:35:2b:26:a8:04:4b:
         57:29:4a:28:54:4b:8d:6f:a0:dc:24:68:d5:3d:f2:4c:1d:58:
         56:47:e4:25:5a:a1:bf:4b:9f:68:c0:d9:85:4c:5d:f9:18:e9:
         93:53:00:b1:d2:e3:b5:d2:93:a6:dd:ba:0e:49:ca:0a:c6:16:
         22:8f:eb:e8:fc:43:f8:13:80:8e:ac:3a:62:26:bb:a1:4e:e8:
         3f:22:a9:4a:4a:01:6e:61:46:be:ce:48:cc:01:0d:42:75:ab:
         36:5b:0e:27:d2:fd:86:dd:03:ca:41:a6:e4:8f:5a:d9:d2:65:
         f4:c6:92:2a:e5:01:a2:91:24:0a:1e:2e:a1:f5:76:d0:f9:84:
         6b:4b:96:60:ba:22:e4:71:29:26:d9:0a:1c:00:91:e6:89:be:
         5a:7e:58:8e:91:f1:46:55:4d:6f:39:01:cb:72:d6:16:97:22:
         72:6b:b3:4e:14:95:43:f8:51:76:45:0c:65:83:7e:b6:8f:05:
         ce:e6:39:7e:23:d1:4a:9e:93:dc:ec:b2:a0:2d:76:15:80:45:
         44:a2:45:1f:d5:4d:99:a6:c8:94:74:76:65:ab:45:a8:b3:1b:
         d7:cd:bf:4f:eb:5f:1a:13:d3:e2:05:fa:35:37:cf:78:b3:d9:
         0c:4e:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:00 2026 by rpki-client