Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File:                     k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier:          vw6nSikhRnhbpaS2mY8GiB+0r5Gh0MwcLkzNpa3tbjU=
Subject key identifier:   20:C2:F9:31:CB:AB:08:01:93:C6:EB:5E:B4:77:07:88:F7:49:DF:BF
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer:       /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial:       019EC1123E0C5C433C852CCCC4B2865A5F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number:          1965
Signing time:             Sat 13 Jun 2026 13:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:58 +0000
Files and hashes:         1: dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa (hash: 1GDsLoNQgKVVMmHWMkg7eDdC4aDMTFzDQuH8RxzRAzI=)
                          2: fvgdNczr4M_4pWxmtSLFtHnleNY.roa (hash: vDg1sEfgl1xvGf7K1sN7xF9KHQzjqDQJi3bxKY/Dycc=)
                          3: jJpFWGMCm4EtolT2V_sgSPvdGy0.roa (hash: gfw9A3lWtCEl62csOhatgPWSLBSIBf5LaMxwHjU6nrE=)
                          4: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: FSVYVDq5ubRuNYEKpMxixQYOiNCw8RbCZ/nfeQjsjIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:3e:0c:5c:43:3c:85:2c:cc:c4:b2:86:5a:5f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
        Validity
            Not Before: Jun 13 13:00:58 2026 GMT
            Not After : Jun 14 13:00:58 2026 GMT
        Subject: CN=20c2f931cbab080193c6eb5eb4770788f749dfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:d3:cd:af:48:13:20:2f:a3:f5:f1:de:b1:
                    0f:a0:40:9f:26:22:5e:67:d8:40:9c:e1:5b:02:5e:
                    5d:76:57:83:ab:41:d6:4d:51:42:5f:66:0c:cf:7b:
                    00:3e:4d:b9:c7:e8:cd:f2:25:35:b3:49:ea:f9:10:
                    2f:1d:33:64:23:2b:f5:be:05:8d:65:bd:97:96:4b:
                    77:0c:cb:70:1c:d3:dd:13:ea:22:12:f1:39:8f:6b:
                    04:e8:8a:48:b3:1d:b3:05:12:24:20:67:aa:98:14:
                    30:96:34:6c:e2:bc:62:9d:85:d9:de:7d:c4:00:71:
                    7a:18:6f:80:c0:3f:05:a4:3d:5b:4f:29:93:6e:93:
                    3c:d3:8c:27:6f:7e:3c:c3:10:db:70:e9:36:aa:4f:
                    f6:ba:ba:82:d7:eb:f4:ec:7e:47:5b:db:f9:66:cd:
                    f6:fb:9a:bc:40:d8:ed:1a:ee:cd:ce:6a:cc:8c:85:
                    4f:53:e5:6a:96:91:51:51:8f:10:8e:4c:c8:97:ee:
                    78:51:67:19:ff:d8:fd:e7:e9:db:63:4c:c7:97:19:
                    6a:e1:9f:17:37:4c:6e:2f:11:e8:da:3b:4e:4d:b4:
                    e2:c4:ae:2d:ed:99:7b:ac:5f:5d:82:50:e4:98:1b:
                    e8:d0:4e:03:92:cc:cc:34:54:5c:85:64:42:81:76:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C2:F9:31:CB:AB:08:01:93:C6:EB:5E:B4:77:07:88:F7:49:DF:BF
            X509v3 Authority Key Identifier:
                keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:ca:36:e5:cf:e4:59:14:68:65:63:f7:c9:ca:06:e9:91:
         e1:d1:37:69:87:7c:ac:b0:53:0e:68:5f:e1:17:29:c7:dd:a9:
         8e:6a:17:55:22:1e:bc:be:e2:f0:b9:33:56:a6:70:5a:17:b3:
         05:96:93:95:0c:6c:5b:56:c2:8d:fa:4e:14:2d:cb:e5:09:7c:
         07:b0:b2:9c:e1:17:3f:0f:f2:82:28:29:ea:4a:2f:a2:ef:a1:
         00:aa:e4:c4:3d:1f:59:16:56:11:83:9d:e2:0a:e6:bb:86:cc:
         0c:80:ee:73:2f:fb:e0:54:29:25:c5:51:46:50:3d:69:2b:cf:
         44:ec:8e:61:32:c9:cc:c4:6a:c6:a3:fb:38:b0:df:8a:17:d0:
         5e:bc:34:57:1e:31:d2:7f:34:2b:a8:af:51:36:85:ba:6e:96:
         88:f0:ed:b9:a6:40:a3:34:23:62:c5:28:49:68:e7:54:42:d5:
         7f:50:e7:58:47:e1:88:da:49:f4:4d:43:1b:81:01:40:7e:bb:
         5d:23:ac:60:c4:19:df:0c:4d:df:39:ee:1d:cd:93:54:46:f6:
         48:47:0b:38:7c:ce:f2:d3:1a:ec:b9:78:ff:c3:5a:10:95:dc:
         5c:25:8a:7c:a3:3e:89:cb:30:d4:ce:80:ca:29:df:f2:93:83:
         c2:80:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:08:20 2026 by rpki-client