Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File:                     aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier:          2SDhBf8p1vJDG7f0ue9gM38i7hgnuYf5Txcsh1VtPkQ=
Subject key identifier:   7D:0A:F3:5B:C0:58:E0:9C:8B:F2:15:F1:85:18:A7:3E:14:72:AE:12
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer:       /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial:       019EC3DC6DDD9E322A6792AD86E7C07C252C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number:          04EF
Signing time:             Sun 14 Jun 2026 02:01:03 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:03 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:03 +0000
Files and hashes:         1: 3v8uxq2dDLoou0h6jnM1belnYnw.roa (hash: 38ECnv2jC0KqnoPMxr80PYZzlX1OrWkaQN4cTlpMEJw=)
                          2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: 82dc5aJYVr/UQqEOTX32uTmx84VOcROM0sUWiv3xI4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:6d:dd:9e:32:2a:67:92:ad:86:e7:c0:7c:25:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
        Validity
            Not Before: Jun 14 02:01:03 2026 GMT
            Not After : Jun 15 02:01:03 2026 GMT
        Subject: CN=7d0af35bc058e09c8bf215f18518a73e1472ae12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:33:43:d7:8d:e2:67:97:82:32:be:a5:36:
                    84:73:4d:47:55:18:20:dd:1b:8d:b7:a2:a8:f7:9e:
                    af:ee:5f:92:8e:07:77:33:9b:36:43:d0:63:1d:42:
                    08:cd:24:c7:51:b0:f4:b6:6d:ec:62:db:1e:c1:6a:
                    f0:22:f6:7b:dd:66:bd:fc:63:ae:16:15:ea:fc:7e:
                    6d:42:5c:f2:97:c8:42:6e:84:f7:f3:c4:d5:b8:0e:
                    3a:60:66:64:14:51:f8:77:11:37:36:7e:05:fb:52:
                    52:66:a1:ba:99:5b:b0:f6:cc:51:8f:15:28:52:e2:
                    d8:bc:6d:19:7f:93:5f:9c:e5:74:0b:b6:48:60:35:
                    72:27:e7:da:53:32:13:06:d9:1f:73:a8:61:10:d4:
                    52:c8:6b:43:ec:45:ae:ef:0d:6a:71:fa:a1:94:60:
                    ca:2e:2a:ee:f9:3b:c0:df:71:c0:7f:a3:60:4f:eb:
                    fd:52:38:2f:a3:da:37:2c:8f:80:8a:a5:14:4e:8e:
                    9b:a1:01:fa:b7:36:fe:e6:3e:f4:6e:b1:b0:42:54:
                    81:a6:b3:43:b1:59:c5:d2:ac:d5:8b:7f:12:84:85:
                    3c:12:75:b2:94:a7:ce:03:c1:07:4d:20:b3:58:53:
                    d0:48:6b:af:2e:94:12:d9:10:78:42:2e:c9:3a:16:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:F3:5B:C0:58:E0:9C:8B:F2:15:F1:85:18:A7:3E:14:72:AE:12
            X509v3 Authority Key Identifier:
                keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:04:99:b1:3a:c1:38:9e:8f:4c:23:92:ff:be:53:5c:75:
         58:d3:7c:e6:af:99:3b:36:7d:3b:51:a1:b9:7b:d0:44:3d:37:
         cf:4c:8c:6b:2a:38:b9:df:7a:c6:a3:bc:12:28:76:79:1f:62:
         0d:8d:84:55:68:32:ea:4d:af:96:97:d4:d1:0c:14:23:61:cd:
         72:2c:d3:d5:84:e8:95:98:40:9d:e0:0c:29:0c:5a:ab:9f:63:
         d2:fd:07:d7:60:e2:70:8b:e5:ee:36:ea:66:8c:e9:f7:10:2e:
         cc:17:4e:52:4a:90:64:08:88:88:07:b9:6f:70:75:9b:64:21:
         79:04:fb:23:55:a2:87:c6:66:ae:81:3d:8e:86:19:8f:21:f6:
         c6:a2:8e:06:54:e1:38:07:30:5a:9f:98:ac:3f:4c:19:fd:8f:
         79:9a:54:81:89:ec:31:b4:40:f5:be:6a:68:92:e9:0f:e0:c8:
         56:9e:e3:45:f7:e2:4b:99:4d:72:4f:98:23:31:1f:26:47:66:
         6b:4f:b3:3a:91:d8:e1:51:c6:a7:11:15:fe:96:49:1a:0b:3f:
         f1:f3:e1:77:d0:9d:b7:67:35:06:6c:fc:66:65:ac:1d:d2:8b:
         42:19:a7:a3:c3:fa:f4:c8:e8:91:a9:7f:f8:aa:f4:22:0a:1c:
         d6:0c:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:36 2026 by rpki-client