Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File:                     9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier:          2aCAiS1j5r+GqTsTQZN+BBBV1qwiUQv/kdtsWX3B/kw=
Subject key identifier:   EF:89:BC:61:C4:C4:75:18:72:C3:51:C6:E2:71:57:FD:B0:83:EB:38
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer:       /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial:       019EBFC8E114C71200504CB4E2F1F8A8CF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 07:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:13 +0000
Files and hashes:         1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: REyeIZA71SyNWzJZhhe0PivI+45yL/r5zoRRmM8ye5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:e1:14:c7:12:00:50:4c:b4:e2:f1:f8:a8:cf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
        Validity
            Not Before: Jun 13 07:01:13 2026 GMT
            Not After : Jun 14 07:01:13 2026 GMT
        Subject: CN=ef89bc61c4c4751872c351c6e27157fdb083eb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:6d:66:b8:0b:7d:e9:d7:b4:12:14:79:ea:
                    f8:18:b5:aa:08:da:af:21:a5:80:9e:1a:ab:a5:08:
                    49:ee:66:56:83:e7:75:e2:e9:47:80:6e:92:35:27:
                    8b:ff:e1:64:84:05:11:11:1f:0f:f9:81:23:2f:d6:
                    e3:0d:4f:db:97:a7:3c:c2:45:9b:bd:de:32:36:38:
                    69:20:db:64:2d:e3:31:43:1e:b3:5e:8a:0c:18:09:
                    5f:bf:26:4e:fa:d6:61:6b:43:16:8e:6f:72:a2:0c:
                    ad:0d:8f:a4:9a:d9:9e:79:a1:69:d6:66:b9:33:93:
                    ff:33:d8:c8:5f:6b:2b:1d:ff:14:90:9d:7d:fd:7b:
                    7a:dc:9a:da:ae:07:d0:3b:4b:c6:86:24:91:ad:4b:
                    50:1d:06:af:e4:11:33:d0:94:d2:04:33:31:d0:d1:
                    8e:da:79:55:74:3e:40:83:cc:cb:10:c5:27:6c:65:
                    8c:35:bd:63:45:9e:62:3c:b3:49:ac:67:b9:2f:e0:
                    ae:ec:a1:bc:e7:88:1c:99:d3:c9:7f:75:0f:d8:6c:
                    87:4a:75:36:be:96:a9:78:3e:5e:ac:7b:ac:fe:fe:
                    a3:be:d6:a6:a5:5f:07:46:ff:65:4b:e2:4c:d3:ab:
                    35:29:40:99:d3:2c:ff:f1:a2:31:3c:83:f8:74:9a:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:BC:61:C4:C4:75:18:72:C3:51:C6:E2:71:57:FD:B0:83:EB:38
            X509v3 Authority Key Identifier:
                keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:63:cf:32:8c:a3:d3:a3:29:1d:87:cd:fe:b4:30:38:22:18:
         3d:05:42:5e:ab:9e:ac:ec:a0:fc:47:f3:e2:1f:e4:e7:64:36:
         98:a2:dc:e7:b4:52:80:e1:76:c7:1b:a4:1d:10:36:5f:c6:52:
         bc:09:d9:28:d0:d5:38:5c:6f:bd:05:43:49:61:8e:e5:ab:aa:
         d9:da:d0:26:40:2f:81:f1:c1:be:f4:c4:fd:50:e9:ab:42:cd:
         72:77:77:3d:d3:8d:c1:ab:15:69:50:25:a2:4a:0a:83:e7:67:
         a9:2b:27:ba:a5:9f:25:08:dc:8f:ab:d6:1f:22:f1:e4:fa:11:
         f7:0f:7d:d9:6f:02:42:5f:19:c8:79:da:22:5f:88:92:a8:3d:
         ad:34:d8:0c:7b:98:b4:25:24:c5:29:34:91:b5:6b:0d:40:33:
         0e:e6:7a:96:b6:7a:68:73:01:d5:a0:52:3f:1e:4f:b9:3d:c1:
         80:fa:76:cd:9a:e9:4f:89:22:be:3d:4f:c0:77:0a:40:0d:34:
         52:20:80:3e:d4:f6:8f:fc:31:f8:3b:36:b5:c8:d5:a6:c2:28:
         67:96:f9:d2:40:38:fc:9c:b7:93:4c:81:1e:7a:da:91:ca:67:
         54:51:7a:4a:b7:08:25:8b:f1:0d:a1:1a:05:b3:c4:c0:f1:64:
         98:81:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:55 2026 by rpki-client