Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File:                     KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier:          VbnMCGnN0QKjOlyTd+QCaCABCIt6GplTt1G0v+yzz1M=
Subject key identifier:   0B:92:CA:59:F7:DB:B4:63:2D:21:EE:50:79:2F:0F:7B:D0:E8:D2:57
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer:       /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial:       019EC0A46C6CCA83356DC8447AFE77F9F674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number:          12D8
Signing time:             Sat 13 Jun 2026 11:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 11:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 11:01:01 +0000
Files and hashes:         1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: ovdRs7nF52Y/tcIPoWKAAMoAfKh4lf/P9J1rBCKkZuI=)
                          2: NNW9fBL9fFAJGVwGGKC0u4xaMBk.roa (hash: QeuasZLkGWjhmBmI2lmaeg2T0aIzvZFSj+N457z3Xik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:6c:6c:ca:83:35:6d:c8:44:7a:fe:77:f9:f6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
        Validity
            Not Before: Jun 13 11:01:01 2026 GMT
            Not After : Jun 14 11:01:01 2026 GMT
        Subject: CN=0b92ca59f7dbb4632d21ee50792f0f7bd0e8d257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ee:3c:34:24:e3:00:6e:d1:09:b9:86:05:b8:
                    99:bc:81:f3:5b:dd:75:13:4c:92:c5:63:29:ef:39:
                    c6:63:48:64:d2:ac:1a:d1:da:0d:bb:34:49:50:6e:
                    23:95:6c:76:39:c4:a0:c1:da:2c:19:07:37:ac:9f:
                    48:dc:94:c2:83:75:fd:f2:de:79:49:f5:4d:ba:e4:
                    ed:93:cf:d5:21:2b:ad:5b:83:27:f4:e3:6f:59:cf:
                    55:ef:bb:bf:f4:bb:24:45:d6:9c:e0:fc:27:55:cc:
                    60:f6:1e:15:f4:6f:0a:eb:34:1b:15:c5:4b:d7:e7:
                    52:b1:bd:10:83:c0:20:04:29:53:68:42:23:31:01:
                    a6:76:21:ba:74:f1:dd:2b:ab:61:31:5c:e5:81:07:
                    63:70:ba:58:95:45:07:61:f4:b8:a9:ce:cc:51:dc:
                    56:47:fb:9d:87:97:f1:75:45:9f:38:c0:f8:59:00:
                    17:c9:67:87:5c:f7:d5:40:01:d2:ca:32:33:ea:a6:
                    b1:a0:62:c6:0b:a5:86:a5:07:ae:fe:c0:0b:9e:c3:
                    ae:63:36:f9:e2:e0:e3:af:be:13:55:15:c9:03:1b:
                    8c:24:1c:5c:bb:2b:ed:5c:d1:1e:0c:26:cd:de:2e:
                    68:42:a1:62:a4:46:56:58:cd:f4:18:7d:48:58:80:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:92:CA:59:F7:DB:B4:63:2D:21:EE:50:79:2F:0F:7B:D0:E8:D2:57
            X509v3 Authority Key Identifier:
                keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:31:e5:5d:18:e1:5e:63:da:49:eb:98:75:a4:df:33:ec:b7:
         07:d0:6d:ec:88:18:eb:7d:06:b5:dc:6f:11:c3:6a:bd:c7:a3:
         c9:79:3a:85:e9:b1:6a:15:0a:96:38:6b:45:d4:be:63:a9:78:
         74:07:c6:6b:80:f2:dc:72:55:3c:51:c0:75:f1:8e:fc:0d:7a:
         66:e4:ca:2a:1a:40:ac:5a:ec:45:9a:12:4b:53:60:41:70:4c:
         f0:47:5f:89:85:a7:11:f8:08:d2:bc:47:da:27:10:a9:6e:7b:
         ef:2e:8b:ee:0e:53:ca:40:98:94:81:d6:f9:13:42:90:1b:c6:
         58:4c:f2:35:96:90:fb:a7:7d:6e:60:da:37:29:6a:b5:9f:d4:
         6e:58:08:be:63:29:48:fd:d9:8f:5b:71:d1:54:98:78:98:3d:
         f5:d8:ee:55:95:9c:c3:e8:d6:09:9c:a4:ad:4d:89:64:9b:b1:
         47:8a:b0:e4:d8:91:c3:93:0e:ed:c6:2a:dc:dc:c2:d0:b0:3a:
         ba:8b:94:ac:c0:c2:a7:46:dd:ea:1c:72:10:40:d9:94:3a:01:
         ee:b2:d2:ce:4f:38:7d:b7:e2:62:c7:da:e4:e9:aa:63:b9:68:
         e5:0d:75:28:66:a9:8d:19:99:e6:c3:cc:6b:eb:53:95:a4:8f:
         77:93:92:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:01 2026 by rpki-client