Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
File:                     ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json)
Hash identifier:          QiX3dGmC96M7LArEv4MKqePdBDRtpgyH2KdhYxk+/fA=
Subject key identifier:   E7:B6:61:FA:26:86:AD:5E:88:5A:21:F2:FF:92:83:83:48:A0:66:62
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Certificate issuer:       /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial:       019EBE47731105AB813A1EC9410E6705D46F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
Manifest number:          06A9
Signing time:             Sat 13 Jun 2026 00:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:14 +0000
Files and hashes:         1: MJrdYHCsZgMfYBMJVTnmxc53njI.asa (hash: H3Ey9R2JIBNqGwm3p0xsZzzVThBkAhh3KRtlXIWTkco=)
                          2: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: UTzeZzjTyNmc/Tr3dUtB2p9T2NlFykej1JxpjJ8z33k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:73:11:05:ab:81:3a:1e:c9:41:0e:67:05:d4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
        Validity
            Not Before: Jun 13 00:00:14 2026 GMT
            Not After : Jun 14 00:00:14 2026 GMT
        Subject: CN=e7b661fa2686ad5e885a21f2ff92838348a06662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:5a:d6:4b:56:ac:9c:df:4b:22:c2:10:09:
                    14:c1:da:68:f1:7e:f8:8c:78:05:a1:16:f3:c8:8d:
                    30:04:b3:a7:01:ab:d9:d0:69:2e:7e:9c:0a:de:25:
                    82:55:6b:1a:be:22:8b:4e:6e:34:af:05:af:71:e6:
                    ec:cc:15:6e:25:34:97:ad:37:86:88:33:3c:1e:96:
                    5d:ba:2e:17:01:09:7f:44:69:22:25:c4:ac:5f:4d:
                    a3:23:c9:13:78:2f:14:69:98:93:71:be:94:14:73:
                    4a:db:00:e2:4b:5d:75:50:eb:98:1e:a5:46:47:58:
                    21:65:29:cd:91:17:bf:32:e9:76:ff:82:7a:21:07:
                    a8:ef:11:9e:f7:27:eb:c5:69:eb:2d:ee:57:c6:ad:
                    c6:f1:56:7d:7e:5e:38:ef:77:42:67:14:27:c9:3b:
                    f2:bf:84:94:16:df:26:0b:71:da:91:37:b5:b2:8e:
                    cb:29:48:de:76:9f:17:40:a6:b7:12:e8:11:49:a0:
                    62:50:1c:8e:95:ef:3a:8b:e3:fd:af:b4:cf:52:27:
                    dd:bf:37:67:e9:53:4b:5f:ba:3d:5d:6f:75:44:32:
                    20:54:91:40:03:d8:17:1b:07:6c:d5:92:28:3f:00:
                    2a:4b:ce:45:38:89:fc:34:93:f5:94:fd:11:5f:c3:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:61:FA:26:86:AD:5E:88:5A:21:F2:FF:92:83:83:48:A0:66:62
            X509v3 Authority Key Identifier:
                keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:b2:ae:4c:e7:bf:a3:d4:d8:9e:b0:28:be:e7:31:db:07:
         7e:3d:44:ca:0c:df:e6:db:14:8b:e5:a1:ff:b9:86:e7:f7:dc:
         b6:5b:4e:41:ea:b7:3c:99:b8:6b:4e:68:fb:19:cf:aa:02:68:
         6d:91:4c:dc:88:ef:8e:c6:68:d4:4a:60:47:9e:14:21:6f:df:
         39:44:6c:54:7b:e4:ae:22:53:9d:74:21:ee:e2:b9:eb:aa:94:
         4f:7f:3f:84:6f:71:cb:3e:54:94:ba:73:ce:47:3d:7e:f8:ed:
         09:9f:4d:fd:5e:74:a8:40:e2:e6:fd:cb:91:7c:ce:4f:5e:83:
         7d:2a:24:e9:d5:fb:b8:79:3c:36:b2:3b:5a:f9:a9:39:a1:a4:
         66:ef:e2:3f:dd:52:14:d8:9c:8b:ea:bc:2c:c3:47:0f:a0:4d:
         d0:5c:f0:50:53:15:75:29:d5:80:75:9f:00:77:7a:35:e5:99:
         5c:30:4e:ee:b5:8e:64:0f:55:30:61:38:7c:c0:62:e5:fa:3b:
         c1:34:3f:46:c8:29:9b:47:53:45:4b:91:6b:a1:ee:66:45:77:
         d8:7e:d6:ea:23:82:4e:14:71:82:c3:44:66:96:31:0b:36:e3:
         43:68:50:5a:54:af:67:55:d2:93:b5:b1:75:fe:c0:4b:92:32:
         19:18:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:49 2026 by rpki-client