Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
File:                     mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json)
Hash identifier:          /vsw/C04Z4hmf2Vzr2E8Wq2bjwGfdvUOk9feX48IgY0=
Subject key identifier:   6E:89:62:38:B2:F1:AC:71:E1:80:BF:2F:AB:92:89:A2:CB:D5:98:ED
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Certificate issuer:       /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial:       019EC1B757A01B421273DABB18169556B059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
Manifest number:          14CE
Signing time:             Sat 13 Jun 2026 16:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:18 +0000
Files and hashes:         1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=)
                          2: RNEy2dNMXx3XlEamTmUhqi44jO8.roa (hash: P+axBDbVK5KvN+RHt0OXNG1w00kEnz/ND4dT/9fk2eY=)
                          3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: b8WW4eXNHECXaL9hMyxKKYzZ0nYBRGmDAmBUxGXTzn0=)
                          4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:57:a0:1b:42:12:73:da:bb:18:16:95:56:b0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
        Validity
            Not Before: Jun 13 16:01:18 2026 GMT
            Not After : Jun 14 16:01:18 2026 GMT
        Subject: CN=6e896238b2f1ac71e180bf2fab9289a2cbd598ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:35:e6:1a:b3:33:74:cd:26:bd:25:f1:66:
                    ae:80:13:02:65:e9:9a:4d:c1:c6:52:84:07:ea:07:
                    19:10:91:62:59:49:09:ef:ff:57:e5:e6:09:69:99:
                    a2:c5:d7:16:d5:49:07:01:da:11:f5:f2:f5:0a:4e:
                    9d:54:b9:ae:52:54:93:ce:13:4d:d9:55:3d:a3:c2:
                    12:4b:f1:4a:95:25:e9:bc:71:c6:d0:d8:43:47:4b:
                    21:42:6d:8c:a5:a8:de:3d:2e:3d:b2:f5:6f:82:1c:
                    2e:91:c2:be:26:90:bf:31:6a:e1:f5:20:91:58:f6:
                    41:76:22:bb:c5:b2:29:e0:3a:f7:ac:b7:d2:5b:e3:
                    e6:c4:a9:64:34:a9:87:7e:17:aa:a6:1a:10:55:52:
                    2f:6e:74:bc:bd:85:72:f3:e3:35:ee:00:5b:d4:8f:
                    70:59:0c:e8:3e:cd:bf:72:77:b5:ae:16:4d:df:bd:
                    c3:d0:44:e1:55:bd:2d:77:e1:ed:eb:c4:fb:69:e9:
                    4c:bc:85:11:1e:ee:ac:e3:d3:c2:0b:0d:87:ba:51:
                    14:d9:c1:a1:c7:fb:cc:e4:78:3d:ac:95:5e:36:52:
                    32:c9:a9:e4:d7:f5:d2:fb:d3:d8:29:f3:ae:8e:c5:
                    69:1b:8d:5d:1f:56:66:ae:9a:b9:04:92:d8:9b:ae:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:89:62:38:B2:F1:AC:71:E1:80:BF:2F:AB:92:89:A2:CB:D5:98:ED
            X509v3 Authority Key Identifier:
                keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:66:69:ba:bd:96:92:dc:81:bf:64:a5:65:3e:34:c8:4c:55:
         83:9c:30:76:f7:12:b5:fa:49:48:f8:0a:48:fb:87:61:82:00:
         a3:f4:c4:25:92:84:64:c0:91:d0:50:90:fb:e6:93:04:66:02:
         0b:19:27:0e:ef:29:8c:bf:f3:c8:a5:61:9f:f0:00:27:8a:88:
         ac:b7:2b:44:47:8a:26:f2:0e:d6:d3:95:82:0b:d0:48:17:c9:
         e1:48:6f:71:f8:eb:53:92:4c:74:2a:76:23:f6:91:ba:ad:4e:
         ca:27:06:58:f6:ef:a3:c8:fc:60:67:88:f4:24:62:9f:15:60:
         7f:ef:90:dd:cd:4b:ff:31:94:8a:fa:c8:b2:75:5a:d2:e9:b8:
         fc:cd:ae:be:7d:f1:2c:00:e9:4e:9d:5d:19:fa:7c:4e:9a:bf:
         5b:e4:9c:bd:c3:d1:b7:82:88:c9:69:3c:00:7f:0a:7f:35:30:
         62:aa:43:3e:fe:05:55:1b:5d:f2:83:61:90:e9:0d:27:31:42:
         00:e5:34:f8:f7:01:97:80:ab:30:76:a5:93:9f:b0:05:ad:86:
         75:d1:33:c2:f4:c6:d5:b3:25:6a:c3:3c:06:f6:2a:46:ec:a9:
         10:67:80:9f:a4:59:ca:b5:10:39:02:f3:70:21:02:e9:ba:a2:
         15:65:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:28:45 2026 by rpki-client