Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File:                     9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier:          BSbVHOKlk92uWVSXhBLtonwb5wKGagHrREvWZFbrcJA=
Subject key identifier:   D5:6F:43:E4:8C:81:0E:B3:98:C4:B4:59:51:93:60:A9:C7:B3:3E:CD
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer:       /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial:       019EBD6C158AD1811E268E88F3AD569EE9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 20:00:37 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:37 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:37 +0000
Files and hashes:         1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: huAaW7emyhH4HVI/QvcOV7a4BhDAL9oUYeIv6TqVYhY=)
                          2: HZePOmsjkPsg7dlktNrDrbvkEoQ.roa (hash: EMtZKX87wa385GEwMyBcWWCzgkUjroenf3wknZ0qOr8=)
                          3: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (hash: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY=)
                          4: jbQbuOumCNgoddvSeNQ0EqiLIvk.roa (hash: r2PNx4QtBVQh/b8nKhzHQVcKqAGoHRGsycMInrQsQyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:15:8a:d1:81:1e:26:8e:88:f3:ad:56:9e:e9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
        Validity
            Not Before: Jun 12 20:00:37 2026 GMT
            Not After : Jun 13 20:00:37 2026 GMT
        Subject: CN=d56f43e48c810eb398c4b459519360a9c7b33ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:51:1e:7f:37:98:79:6f:e6:64:d1:be:68:
                    fc:9a:09:86:90:61:20:7a:88:0b:8d:3b:4d:95:77:
                    b5:d5:a6:75:0c:bd:17:e6:2b:f5:2d:b9:77:c0:0b:
                    6a:09:f3:eb:8b:dc:a1:1a:a0:38:57:f4:15:e1:0e:
                    70:d4:a9:0e:ea:a5:4e:2e:c4:2f:fb:5d:5b:12:d1:
                    5c:af:c6:4b:13:1c:76:fc:92:9d:30:91:59:77:fb:
                    8d:57:3a:86:6b:8f:42:57:56:6e:ed:fb:ea:5a:30:
                    37:86:8e:ef:6a:35:2a:0b:66:d0:7f:c2:82:ba:8d:
                    39:e4:05:37:d8:42:9f:fb:9a:47:c2:2c:ae:09:d4:
                    d6:f0:48:67:90:80:90:92:49:0f:70:db:f4:4d:f6:
                    cd:97:37:0b:80:cf:12:ba:23:67:59:7d:90:bb:cd:
                    f5:12:a7:db:32:55:13:9f:74:eb:ed:13:98:6e:36:
                    88:74:b8:26:1e:39:99:3c:d4:05:7c:3e:43:38:39:
                    fc:f1:b7:85:b3:44:a1:50:c2:90:51:7b:f5:53:94:
                    60:76:1a:37:4d:e8:e9:9d:32:63:d4:eb:23:db:12:
                    df:a4:53:d9:50:15:a5:68:ec:18:0c:76:32:56:7b:
                    77:91:75:36:fd:58:e2:2a:ef:b3:31:0e:98:cf:a4:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6F:43:E4:8C:81:0E:B3:98:C4:B4:59:51:93:60:A9:C7:B3:3E:CD
            X509v3 Authority Key Identifier:
                keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:ac:c2:e0:6c:3c:09:e9:42:6e:ec:64:bc:b8:51:02:36:
         5e:12:17:ba:50:ad:37:5f:5c:cd:9f:0d:63:5d:fa:7b:a7:49:
         94:db:f5:67:63:7f:20:67:0f:78:0d:a7:a6:90:e1:fe:56:db:
         88:15:f7:a5:9d:5b:fd:05:73:d9:b4:87:66:8d:be:4e:39:24:
         18:0d:64:c3:5a:a4:dd:86:63:8c:8f:55:fc:71:c3:3c:de:77:
         7d:f1:a4:38:72:2f:45:60:41:55:9e:28:6b:3d:2f:be:fd:47:
         6c:18:36:87:37:db:1c:92:9c:63:34:6d:43:d0:e3:e1:ff:18:
         ac:93:9d:a5:b8:5a:3f:70:fc:94:dd:a0:4d:98:fc:65:30:ae:
         5b:b5:c9:4b:51:06:5f:47:b4:24:7c:3d:0d:47:f9:02:e2:b9:
         ae:14:0e:7f:cb:1f:60:0a:74:a2:3c:97:34:ae:00:27:71:07:
         03:a7:dc:8d:c6:e5:f7:c0:5c:24:2c:94:84:41:09:c2:61:91:
         03:ca:29:34:40:ed:e9:1d:ac:99:70:8e:e9:df:a2:25:e4:84:
         74:6b:55:3c:d5:83:28:9c:39:28:94:2b:db:02:43:6d:06:2b:
         ea:1f:91:1b:38:37:ca:5b:9a:26:f2:f0:54:7a:60:d6:f0:fb:
         53:ac:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:45 2026 by rpki-client