Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          H+Cq7j+JJHp8tNhjiF47317NX1dh+2RlNUAidHPZKfA=
Subject key identifier:   CD:E3:66:3D:5F:47:37:D3:F0:F0:37:10:84:A8:90:D9:A5:69:5D:64
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       019EBF91B0614B4EAEC0167E46699306CD8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 06:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:56 +0000
Files and hashes:         1: 6Cn0LMHPDBsm4Nm8hFcsKS6tY94.roa (hash: z/9ptBlDF2qlVnefOn71sNsKDdTGuybESRF5sZ2Klfw=)
                          2: 8k1WvdzAQ1Go-lpgTPWDZAKZfQE.roa (hash: us5ahjVDdrm7/ofacEwTdXV/iwMapsRRug2V01x/llc=)
                          3: KRCT9B4RVN7i0VNkrAXq_wp-rRE.roa (hash: qRSzgiwPczkOjtugbEXqYuJbcG64mRS3bSrnTP92V5I=)
                          4: Q4csJB5v_eWRRqgvzEAeaFQPUmM.roa (hash: 6rtcBWZHj5iKfuxNemjzbQDA3WB3EhCTz3MwF017Ko8=)
                          5: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: UIJ1RxpwLrOtSYEJ5DEfRRYrD6L3RwcV6QvCfqZ9ddc=)
                          6: q_--4kminZxQx-8CqaEaNqwj4jE.roa (hash: ryH9qdfaBeMvb/1G2KPwMdilt+m41DaYZGZeqOGsiAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:b0:61:4b:4e:ae:c0:16:7e:46:69:93:06:cd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Jun 13 06:00:56 2026 GMT
            Not After : Jun 14 06:00:56 2026 GMT
        Subject: CN=cde3663d5f4737d3f0f0371084a890d9a5695d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:71:1b:e1:3a:70:5e:6e:5b:62:99:17:2a:
                    53:32:5d:15:d7:13:83:00:b5:6f:9e:83:9b:5c:52:
                    6b:45:41:96:dd:17:9d:d7:b9:ce:a0:69:93:6f:fe:
                    cd:b3:96:7b:80:4b:e5:ee:23:c9:e8:7d:34:4d:d1:
                    21:78:2d:db:5a:42:35:c6:4b:01:4b:32:9b:3c:1b:
                    1d:29:1c:f7:11:5c:71:03:d1:f4:df:bf:2d:b4:6e:
                    c7:25:1f:8c:b6:a1:13:28:16:d5:11:67:05:84:92:
                    4c:58:e1:94:38:e8:32:a2:53:f2:3b:d3:7a:ce:14:
                    d2:8b:81:00:7d:1b:87:f6:ea:37:20:d5:4c:4d:9a:
                    13:b2:e1:74:60:c5:43:e5:3e:1e:fa:ad:ff:54:1b:
                    64:2f:be:1b:b4:e5:c1:37:38:28:7c:d5:75:f9:b9:
                    21:de:58:b0:6a:ba:cc:f7:bc:f8:20:ba:19:db:2f:
                    8d:77:79:38:5f:0c:10:35:66:3a:5e:39:81:2e:9e:
                    f2:21:a6:80:c3:3f:18:28:6b:54:3a:bf:80:c1:89:
                    e5:4e:92:a4:69:74:8a:1d:5f:1b:9a:36:b3:0d:4f:
                    bc:96:2d:ea:2d:94:72:27:49:58:be:e8:5d:90:8a:
                    43:4d:af:a6:0b:d0:1a:e8:67:5c:f7:61:ac:1b:ec:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:66:3D:5F:47:37:D3:F0:F0:37:10:84:A8:90:D9:A5:69:5D:64
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:51:75:54:5a:d1:1d:be:fe:b3:b9:76:ac:56:38:31:e3:36:
         89:a5:03:b7:af:fe:2f:bd:9c:1c:06:f4:0b:0f:f7:d4:00:90:
         88:89:17:21:3b:d6:00:7a:b9:66:60:e7:05:ff:a9:98:d0:11:
         04:a7:f5:5f:c6:68:60:74:03:f5:c0:c1:98:fb:6c:a7:ce:98:
         0d:f0:b0:a2:0b:3a:91:0d:2a:06:d0:27:de:41:7e:d6:40:39:
         dd:ff:e4:65:26:b7:5b:92:49:52:73:24:f1:9f:dd:89:56:46:
         1d:7d:2c:13:ca:07:80:9f:fa:af:87:d8:fe:17:f6:07:05:a6:
         d8:a8:9c:fc:f1:8a:f9:1b:26:ef:1c:0f:f9:8a:18:2e:19:df:
         a7:b3:d1:86:7f:b6:3a:b8:ec:05:67:8d:5f:42:a6:fe:47:64:
         2c:c2:e8:3b:a1:b3:db:9e:ad:cc:23:09:58:5c:7d:3e:c1:2d:
         70:c0:bc:57:8d:0c:be:d0:f3:5a:71:5c:c4:47:bd:3c:a0:56:
         e4:a0:bf:a7:65:71:72:1b:de:d2:2a:43:c6:a5:1a:d6:e5:84:
         c1:e6:ea:46:4a:c2:a0:2b:9b:30:27:bd:4e:25:70:9c:cf:30:
         71:4c:bd:fb:72:a1:26:11:2f:ca:8f:10:a5:b7:df:a2:a2:57:
         1d:80:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:46 2026 by rpki-client