Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File:                     k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier:          yiAunPaxhgvR3cJTxmHRXhFewMl+tEdCPuWiGw8jKJs=
Subject key identifier:   00:CF:B8:F6:11:39:8C:33:E2:85:E5:8F:EA:39:3D:9E:71:9C:4A:7B
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer:       /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial:       019EC1B783A87FB160F5C746783FFB6AF2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number:          130E
Signing time:             Sat 13 Jun 2026 16:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:29 +0000
Files and hashes:         1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
                          2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: 6aGxAlDIyhlOXBYYmKAu6m5B7KIqh46yceIefczMh9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:83:a8:7f:b1:60:f5:c7:46:78:3f:fb:6a:f2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
        Validity
            Not Before: Jun 13 16:01:29 2026 GMT
            Not After : Jun 14 16:01:29 2026 GMT
        Subject: CN=00cfb8f611398c33e285e58fea393d9e719c4a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:58:13:40:e1:e7:3a:48:d7:3a:df:a6:5a:
                    10:4e:32:fa:8b:b0:52:e9:82:26:4d:54:92:b1:a2:
                    21:92:ab:8e:d2:ac:5f:8d:12:0e:02:8c:26:cd:63:
                    77:68:cc:79:e8:ac:24:42:42:18:5b:a2:d6:0e:99:
                    29:aa:38:f1:38:a7:e7:04:73:c0:86:db:05:87:cb:
                    14:65:61:1a:8b:e8:29:2a:a1:e1:17:32:58:b0:ae:
                    2f:33:c9:87:56:47:2b:a6:9c:3d:45:da:69:9f:ea:
                    86:cf:db:58:b4:e6:55:9d:f7:da:d4:cd:bd:e0:40:
                    25:77:44:68:b4:7f:58:b3:8b:8a:c5:c5:37:ba:95:
                    db:d2:7f:02:1c:1d:da:d9:b6:23:d6:c4:3e:d5:2a:
                    95:4c:ec:ac:39:33:5f:2a:37:10:56:e0:16:3f:4e:
                    fe:9f:d5:f4:1b:e4:0e:7f:3a:17:78:c1:e1:a9:60:
                    70:b2:b5:77:dd:83:a5:28:05:31:ad:55:6f:bf:28:
                    d8:54:65:0c:34:21:1e:ca:09:de:5e:cb:83:b9:1f:
                    79:11:87:74:76:2c:df:f2:33:c0:fc:84:45:2e:77:
                    83:2a:56:98:ea:a5:47:39:3e:09:fa:46:9c:89:de:
                    1a:a4:dc:67:74:91:af:29:65:79:9b:2f:bd:95:9b:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CF:B8:F6:11:39:8C:33:E2:85:E5:8F:EA:39:3D:9E:71:9C:4A:7B
            X509v3 Authority Key Identifier:
                keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:87:1a:67:70:ac:c5:df:61:04:0a:c0:03:63:6d:20:86:ec:
         12:8c:f3:5c:2e:b1:b3:d4:64:1f:4a:b1:ef:04:6e:14:a3:06:
         17:3e:5b:76:89:49:fa:91:e9:5d:d4:8e:08:46:0f:98:94:0c:
         a7:dd:c8:6f:79:9a:0b:5b:97:c8:2d:ea:ba:d4:e1:b2:ec:3c:
         f8:fe:27:41:00:70:33:0b:a3:8f:ea:62:a6:da:db:ad:84:b6:
         14:af:da:ef:ff:ea:e9:04:23:95:46:08:99:95:f6:22:30:b7:
         76:6f:5a:6c:3b:2b:c5:dc:d4:82:c4:5b:18:73:26:8d:dc:97:
         76:d6:4c:6e:2e:8f:bc:7c:9d:69:8f:ab:c8:7c:b2:17:36:93:
         6a:47:b1:c2:58:d0:b7:aa:f6:80:c9:2e:fe:dd:4f:73:03:81:
         1a:8e:52:c4:51:9b:22:7c:ef:43:8a:25:3b:53:47:39:fe:c1:
         13:29:88:c6:27:7c:00:b4:d3:eb:17:7f:dc:2f:1b:86:ae:2b:
         32:ee:6e:7f:49:84:6c:9c:2a:7f:8e:cf:af:2d:83:23:38:25:
         40:7a:62:71:b3:27:81:57:d4:90:25:57:5a:37:c3:60:9d:4e:
         2f:79:e6:f8:68:1c:4f:a4:61:99:47:1c:4c:da:a9:7b:03:d0:
         97:58:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:01 2026 by rpki-client