Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File:                     RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier:          Bs2OUY9e0dvznFjnNem6FlceQIGME/tVe8HQVFBWbXM=
Subject key identifier:   8F:EA:ED:38:E9:CA:81:F9:9D:A0:15:33:AF:72:A8:57:F4:F9:7B:CD
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer:       /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial:       019EC1EDE8AB7CF308EF6A93ECB200C21CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number:          172A
Signing time:             Sat 13 Jun 2026 17:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:54 +0000
Files and hashes:         1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
                          2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: uA4UYgW1bNEAEq/tQ3KM7/Op35UODfbg0XzZ8ShpQbA=)
                          3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:e8:ab:7c:f3:08:ef:6a:93:ec:b2:00:c2:1c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
        Validity
            Not Before: Jun 13 17:00:54 2026 GMT
            Not After : Jun 14 17:00:54 2026 GMT
        Subject: CN=8feaed38e9ca81f99da01533af72a857f4f97bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:76:d6:d7:b1:3d:88:f0:f8:f9:b7:7b:ad:
                    41:45:fe:97:a2:14:9e:8e:61:db:59:35:a4:6d:75:
                    4b:d5:78:f8:fc:d2:7a:c1:5d:6a:9e:5e:75:03:8e:
                    9a:95:f0:f4:ce:04:08:2e:3c:98:2c:3b:56:8a:bc:
                    a1:50:fb:19:92:89:b4:69:a1:4f:ee:dd:17:a2:74:
                    8b:7a:e3:42:e1:8f:d8:57:09:08:ec:2f:c2:8d:32:
                    2b:82:c9:42:d4:f9:4a:0d:3d:72:be:29:a5:29:b1:
                    5c:ae:96:da:b3:db:45:da:2f:6e:34:40:96:9e:43:
                    b5:52:7f:cc:c1:d8:24:43:f6:d3:bc:28:b4:78:65:
                    4d:c7:e9:43:9e:78:e7:d3:96:7a:f9:05:c8:99:ad:
                    67:5e:e4:23:56:73:2d:79:73:62:8b:d4:77:f7:82:
                    f1:a5:5c:6f:a2:63:d3:da:7f:f5:3b:14:12:11:40:
                    3a:10:0d:b4:7a:be:63:f6:5a:3e:e6:93:b1:27:13:
                    fa:cc:21:57:a3:81:5c:5a:60:de:90:80:f3:bd:32:
                    f7:10:1e:e2:4f:cf:cc:0c:e6:f5:69:62:42:42:6d:
                    61:da:77:d8:62:b1:16:52:e4:ab:74:eb:23:e5:81:
                    73:b6:23:a5:d8:37:5f:a2:88:63:5c:74:e5:47:b2:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EA:ED:38:E9:CA:81:F9:9D:A0:15:33:AF:72:A8:57:F4:F9:7B:CD
            X509v3 Authority Key Identifier:
                keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:29:27:a8:e7:77:08:2a:6d:8c:b2:4a:d5:b7:96:ea:67:
         ab:a4:4f:4f:28:d1:fb:34:cb:7f:d7:be:60:84:eb:7c:91:29:
         0b:1e:f1:c2:30:b3:a1:ae:c5:14:43:04:3c:7c:0c:20:62:06:
         43:8f:6b:09:b6:c9:48:cb:1f:67:af:89:35:da:f2:fc:e2:42:
         e6:a0:4d:92:18:51:f7:28:11:88:0a:6c:26:9d:a8:b2:e2:94:
         11:f1:2c:bc:dd:aa:99:c7:c8:54:f0:bb:2d:5f:26:05:88:94:
         f0:52:fb:f4:a2:e4:df:42:ac:56:c2:b1:54:98:10:89:05:b3:
         60:b0:68:07:8d:40:c5:7f:ad:31:17:21:6f:ce:f6:24:75:38:
         47:25:15:b3:42:46:71:cc:de:b0:e9:e9:38:f9:62:97:22:29:
         38:96:be:c7:f6:b6:b1:c1:f0:bc:3f:44:34:55:de:27:f0:3f:
         22:61:34:59:18:3b:3d:01:1c:11:97:fe:92:b0:12:81:a2:5a:
         3d:de:1f:82:64:45:63:53:32:3b:26:de:71:78:73:4a:2d:7f:
         ea:e9:58:3b:14:17:70:04:6f:35:8c:b1:7c:b0:6e:57:16:3b:
         05:00:79:35:d1:d8:ad:c2:2e:d4:0e:4c:a4:9c:38:07:9d:d0:
         dd:6a:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:15:56 2026 by rpki-client