Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
File:                     lzDCc6-etVZkMIjkO-86ahgch8I.mft (raw, json)
Hash identifier:          IkxUnyV8E+k1o+IdSvki8fTr/DeHvnHzAgYWRlierFU=
Subject key identifier:   9A:05:71:80:B3:F1:1E:16:F8:4F:CD:91:C6:57:3E:B4:D4:4C:CD:2D
Authority key identifier: 97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2
Certificate issuer:       /CN=9730c273af9eb556643088e43bef3a6a181c87c2
Certificate serial:       019EBE47ED35531234173D11BF8F5ACB0D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
Manifest number:          014B
Signing time:             Sat 13 Jun 2026 00:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:45 +0000
Files and hashes:         1: LftAIu9k2wnzZP9QfqBNpPsB7GA.asa (hash: oB3unSja7fyioWETroS2ws+p/jX5s1fLimygzH+96YE=)
                          2: lzDCc6-etVZkMIjkO-86ahgch8I.crl (hash: 0/j8zvIFx3twS8BziGL9+5bE9qtiZm3M5PgvVhIlV1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:ed:35:53:12:34:17:3d:11:bf:8f:5a:cb:0d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730c273af9eb556643088e43bef3a6a181c87c2
        Validity
            Not Before: Jun 13 00:00:45 2026 GMT
            Not After : Jun 14 00:00:45 2026 GMT
        Subject: CN=9a057180b3f11e16f84fcd91c6573eb4d44ccd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:72:8b:a8:db:8e:9c:a1:1e:d5:9d:bd:f8:81:
                    05:93:e9:34:44:80:00:bd:ce:b2:33:e0:96:09:c5:
                    b1:96:5e:3e:d0:81:20:2a:34:b5:76:1e:17:6e:ae:
                    e1:22:4f:17:3f:5d:d7:b9:2a:d4:18:d3:2e:21:7c:
                    62:73:51:bb:0d:ad:82:55:52:de:87:6c:82:9e:db:
                    a8:7c:de:bf:97:2b:af:8d:cf:c1:62:c7:e4:54:dd:
                    af:ef:6d:fe:b8:27:3d:7f:a4:2d:7a:cc:bb:91:45:
                    bd:f6:05:dc:90:5b:da:80:2f:e6:16:e5:bd:14:66:
                    ab:1f:18:6a:cd:8e:c4:c6:04:04:cd:24:68:3b:2a:
                    23:2c:1a:f4:e0:74:3c:ab:42:f9:e6:08:4e:02:9f:
                    b5:02:2d:8e:72:cf:c9:d1:fb:ff:ea:d7:09:a4:6f:
                    d8:61:be:32:83:a2:7c:db:ae:3a:55:fc:e1:05:6f:
                    da:2a:e8:5e:78:ed:f1:5f:77:e3:e0:a5:1b:d4:3c:
                    bf:8a:bf:fb:a9:d9:a4:75:ca:71:96:86:18:cb:b0:
                    1f:f6:cd:f0:69:fa:2a:cb:ca:01:08:93:96:71:97:
                    93:79:ba:46:a0:83:15:ef:28:dc:aa:e2:2e:3e:2c:
                    7f:da:18:09:d1:14:76:02:90:45:ee:d1:c0:b0:f6:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:71:80:B3:F1:1E:16:F8:4F:CD:91:C6:57:3E:B4:D4:4C:CD:2D
            X509v3 Authority Key Identifier:
                keyid:97:30:C2:73:AF:9E:B5:56:64:30:88:E4:3B:EF:3A:6A:18:1C:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzDCc6-etVZkMIjkO-86ahgch8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9f6db4-d2ef-44a4-baa0-f2d40ade3b9b/1/lzDCc6-etVZkMIjkO-86ahgch8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:19:78:9a:2c:4b:cb:3f:c3:ff:fe:25:89:1d:f0:4e:f6:
         eb:c3:13:6d:d2:46:f6:75:a8:0c:a5:3c:b1:f8:f6:30:e2:b9:
         d5:80:88:2c:cb:08:81:b6:d3:d5:08:b7:92:2a:7f:5d:be:dc:
         e7:e0:86:86:1b:90:c8:5e:bd:73:82:57:30:97:33:d3:02:fc:
         bb:ad:54:90:14:47:67:4e:2e:25:9e:87:a7:95:1f:a1:cf:7a:
         3e:fd:6d:3c:c6:ec:56:31:a3:38:f6:99:9d:dc:42:64:4e:01:
         eb:b4:96:46:dd:db:bd:7d:04:9c:25:03:54:92:2b:48:e4:d0:
         7a:f7:87:0d:7f:db:06:a9:a9:c2:43:67:db:11:3c:95:4b:48:
         16:e9:b0:cd:7e:67:82:1b:89:8f:58:46:9b:e8:98:4b:aa:61:
         87:35:10:55:8d:cf:9a:0d:1c:1c:14:ae:f1:db:6e:f3:b7:ad:
         0e:62:cc:9b:58:fa:d6:71:5c:c4:25:19:70:89:36:30:53:c6:
         80:b2:74:3c:41:3b:bc:dd:ad:3f:f2:fc:9e:97:bf:f5:ff:7c:
         89:c1:80:59:67:f9:2e:cc:c3:79:fd:80:7f:b4:66:dc:65:8d:
         d1:5e:76:49:e7:4d:c4:05:18:84:b5:fb:b6:28:af:58:91:34:
         c6:b6:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:23 2026 by rpki-client