Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
File:                     kT_tJHxm0ELnOUDStHEvO-2UUe4.mft (raw, json)
Hash identifier:          i7wYC/0VdNkWEZe7KLMiqC/jJ77LXBAONUV/Dejw7t0=
Subject key identifier:   A2:60:4E:51:24:CE:16:7D:FD:A2:E6:3A:BF:A7:D0:46:07:3F:3E:1A
Authority key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Certificate issuer:       /CN=913fed247c66d042e73940d2b4712f3bed9451ee
Certificate serial:       019EC112829946F1081B141B529C77BAB3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
Manifest number:          90
Signing time:             Sat 13 Jun 2026 13:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:16 +0000
Files and hashes:         1: GoKLvdRqpzhQ5LjAkf1CdFno6ZA.roa (hash: CO8aNhlB1Y64wW1MQUT5+bJ7ilSYr6RPdzylnCF/3KY=)
                          2: kT_tJHxm0ELnOUDStHEvO-2UUe4.crl (hash: nI8QIPPxAdJEhggC5bHsipGPFs5MPKhN/0JHDpxak8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:82:99:46:f1:08:1b:14:1b:52:9c:77:ba:b3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913fed247c66d042e73940d2b4712f3bed9451ee
        Validity
            Not Before: Jun 13 13:01:16 2026 GMT
            Not After : Jun 14 13:01:16 2026 GMT
        Subject: CN=a2604e5124ce167dfda2e63abfa7d046073f3e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:7a:c2:a5:87:e7:72:d3:1e:66:ae:13:d2:
                    a4:ce:09:1e:d2:83:d8:62:d1:34:8a:c9:9a:0d:6c:
                    39:d1:c1:f5:c8:95:4c:4f:ea:e2:0f:5d:a1:88:fc:
                    5e:46:47:ad:61:0a:c0:36:3e:06:5b:84:59:45:97:
                    93:5d:ef:54:8e:95:e6:2d:31:4d:df:1c:c9:9d:e3:
                    a8:d8:f8:05:41:d8:53:08:fd:e8:1d:c1:d1:9a:1e:
                    22:5f:0a:1e:8d:34:37:bb:0f:7a:4c:03:96:6a:7e:
                    3b:e1:c0:c2:b5:3e:12:b6:43:8e:ae:1e:17:78:a6:
                    ff:a3:00:f1:ad:56:10:58:f7:47:7a:f6:5d:11:53:
                    16:7f:e8:bd:8f:4e:d0:67:6c:85:2f:89:9f:ad:e1:
                    cc:4b:20:23:52:4d:a2:c6:52:d3:58:d0:dd:f8:b9:
                    61:d7:6d:45:d6:4c:cc:25:8d:31:8f:05:f8:66:3e:
                    d5:6c:85:b3:1d:03:5c:5e:5d:73:6a:bf:c7:27:1b:
                    d6:4f:03:e4:65:16:7d:fc:39:e3:8c:ec:b8:6b:0a:
                    2f:dd:a5:dc:5e:23:37:80:12:bd:37:30:bd:5b:14:
                    79:16:8d:b7:21:6c:c4:10:2c:b2:82:96:4a:a9:93:
                    85:7d:f6:aa:a5:34:80:9d:24:fa:19:6a:79:6e:55:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:60:4E:51:24:CE:16:7D:FD:A2:E6:3A:BF:A7:D0:46:07:3F:3E:1A
            X509v3 Authority Key Identifier:
                keyid:91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d5:59:c2:2d:1c:d9:9f:75:6a:40:97:f7:1c:68:f5:dc:59:
         2f:a1:a7:1c:74:fb:15:f9:bc:ec:c9:70:52:91:9b:68:f9:11:
         64:38:f0:f6:df:ec:4b:d9:bb:d4:30:81:42:62:f3:4c:69:ba:
         ba:94:6c:f4:f0:a6:63:e4:3b:23:af:26:dc:d6:d1:1d:83:c4:
         0e:5c:df:1b:1f:6e:39:7a:b6:6a:af:ae:8f:5d:9a:17:7a:17:
         de:bc:b5:bd:2d:96:3a:97:8b:d1:94:38:c8:fe:f5:30:8e:fd:
         70:69:5e:4e:ed:f7:d7:4d:1b:31:b9:ee:0c:b4:bb:94:bb:29:
         8f:e1:1d:01:92:34:0c:b0:d6:87:36:06:b1:b5:1b:0e:ee:93:
         09:81:23:85:1b:61:55:48:94:37:e9:79:3d:08:47:e5:b2:cb:
         e9:e8:4e:6f:7f:63:f0:c6:65:df:6a:ad:00:8b:cd:0c:70:a3:
         55:5e:75:f3:f5:8f:eb:a4:b3:c2:ae:2c:57:e9:99:1b:67:8c:
         87:33:23:6f:fa:ac:d7:9d:56:80:c8:ae:04:30:a9:a3:a7:7f:
         49:be:cc:d2:78:02:d5:b8:2f:7f:ac:0a:5f:62:67:c2:ab:66:
         0e:d0:a1:a1:49:c1:5a:6c:79:12:63:58:22:31:f0:77:33:bc:
         6d:1b:13:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:29 2026 by rpki-client