Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          EfAHNbn7A8ayHVt/6O62yY8YfQb1vH8EjBDzuWPclLA=
Subject key identifier:   93:DA:19:62:55:0F:F0:67:C2:99:62:82:BE:01:E7:32:82:B4:BF:A3
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       019EC148A8C417B306D36179343DE3590793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          0845
Signing time:             Sat 13 Jun 2026 14:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:24 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: iFPlfKgoMh7g5Cls0cKG9XtoZyPXVlxOJPlz21YJG7g=)
                          2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:a8:c4:17:b3:06:d3:61:79:34:3d:e3:59:07:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: Jun 13 14:00:24 2026 GMT
            Not After : Jun 14 14:00:24 2026 GMT
        Subject: CN=93da1962550ff067c2996282be01e73282b4bfa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:9f:3a:62:87:30:6f:92:a1:9d:70:e4:98:
                    0c:65:35:f9:d3:61:a1:78:e5:1b:e1:fb:98:6e:87:
                    e6:b8:fb:bb:2e:aa:19:49:59:80:96:af:87:74:84:
                    f1:d6:86:bc:41:be:54:c6:42:e2:80:1b:55:ec:fe:
                    5d:f0:fc:22:d0:d6:25:93:4f:57:b7:79:d3:d2:dd:
                    17:ad:bc:8b:b2:75:0f:cd:09:f1:51:24:a4:f0:e2:
                    d8:be:a5:ae:b8:2b:17:6c:13:e0:e0:0f:8b:65:5f:
                    9f:1d:0f:38:e9:4e:a2:01:f0:f2:6f:87:2e:fe:58:
                    9a:6e:fd:d4:35:f7:bc:69:c2:01:0b:08:01:07:f5:
                    3a:49:55:cc:ba:3b:f5:6c:1e:40:4e:d4:5d:52:3f:
                    d3:1f:ba:57:3f:82:2b:cb:30:b3:6a:88:73:ea:17:
                    ac:a6:6b:a9:eb:c9:c3:65:25:5d:6b:be:97:91:3e:
                    83:6a:08:c3:bb:c4:22:36:5b:5b:68:b6:36:6a:66:
                    be:2c:6e:73:6c:45:eb:3d:1a:7e:e3:d9:00:fb:8a:
                    25:8c:2f:17:69:54:3b:21:94:6a:df:f1:8c:98:5f:
                    d5:c9:29:ac:fc:53:33:f4:89:3e:b9:4c:7c:63:ca:
                    bd:f7:c0:f8:a5:ed:9c:2b:da:14:f5:3b:5c:71:94:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:19:62:55:0F:F0:67:C2:99:62:82:BE:01:E7:32:82:B4:BF:A3
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:2d:17:73:50:a4:d5:84:3a:ff:a3:2c:d7:4c:e2:a1:2b:
         18:71:ec:52:42:c5:70:e9:e9:92:64:b7:17:e4:79:86:7d:0a:
         b1:a8:8b:df:cf:0b:d6:82:7b:12:2d:65:7e:70:7b:b1:9a:45:
         82:61:1d:f7:37:f5:33:c3:cc:c7:dd:93:25:6f:f3:16:ef:0c:
         c7:cb:ba:48:f9:97:d8:bf:83:8d:6e:c2:8d:1b:36:e1:79:e2:
         21:e6:a4:c4:ba:aa:ad:ed:cb:a7:ee:87:fd:36:cf:0a:96:4a:
         f5:1b:4a:19:7f:bd:4a:b0:40:c5:4b:c6:cd:41:1b:2f:5d:66:
         2f:b0:53:a0:c2:a6:c9:5c:6d:f8:3e:b3:86:61:3c:77:ef:a2:
         bc:6e:9a:c9:0f:9a:ab:06:0d:1b:c3:97:f9:aa:9a:5d:f5:9a:
         18:f3:b2:bc:43:4b:f0:d0:49:46:a9:eb:1b:16:0f:ec:07:97:
         85:6f:4e:1f:15:34:ef:f9:12:07:d1:c7:81:eb:a9:44:df:b0:
         ca:7e:6b:a8:94:cd:dd:57:0b:db:a2:f1:9c:3d:9f:2b:b8:37:
         17:ce:33:49:7d:fc:22:c7:40:d4:f5:2b:3d:9c:88:a3:8e:b2:
         d0:6a:05:11:66:06:20:ac:5d:25:a9:1a:3b:3a:92:0a:2b:1b:
         fc:aa:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:28:48 2026 by rpki-client