Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft
File:                     c_K938o-FjgkhsCfq0RJDRaizjQ.mft (raw, json)
Hash identifier:          oLgUcKMFmAzY2l16wJ8IsViC1m0THSG8LZe5dvIlT4g=
Subject key identifier:   46:15:EB:CD:B2:25:FB:05:B3:36:E5:00:C9:69:C4:AD:DF:37:A3:C4
Authority key identifier: 73:F2:BD:DF:CA:3E:16:38:24:86:C0:9F:AB:44:49:0D:16:A2:CE:34
Certificate issuer:       /CN=73f2bddfca3e16382486c09fab44490d16a2ce34
Certificate serial:       019EC0DB6E2D0C7DC8EF7826665895F7AE33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft
Manifest number:          22
Signing time:             Sat 13 Jun 2026 12:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:06 +0000
Files and hashes:         1: CH28uOspk_mHzp5DTavyhjJKwuY.roa (hash: I+DwlQqKyy5mVdOOcr8qt2Y9GKTDu8zUjqzs2Jm0zb8=)
                          2: c_K938o-FjgkhsCfq0RJDRaizjQ.crl (hash: QT9zAYhgqIYmNOeOhKF1DykGEhKEz+djss3dyeBBx8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:6e:2d:0c:7d:c8:ef:78:26:66:58:95:f7:ae:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2bddfca3e16382486c09fab44490d16a2ce34
        Validity
            Not Before: Jun 13 12:01:06 2026 GMT
            Not After : Jun 14 12:01:06 2026 GMT
        Subject: CN=4615ebcdb225fb05b336e500c969c4addf37a3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:85:1c:0a:14:5f:8f:be:74:d4:47:e3:64:
                    f5:ca:bf:01:13:30:ad:af:bf:6b:44:99:8e:71:3b:
                    78:93:f2:c7:0e:89:89:1f:c8:03:c1:71:bb:b8:a1:
                    54:90:c1:b9:12:1c:f5:70:4c:a5:17:43:5a:ea:1e:
                    83:cc:41:60:0e:93:b5:24:23:f5:f9:65:47:f9:89:
                    af:a3:c9:dd:30:63:27:d8:e1:08:1c:07:9b:81:2e:
                    46:c9:f0:7f:95:13:a0:50:c9:1c:28:72:98:00:9f:
                    c9:8d:72:99:d1:28:20:e3:ad:e1:a3:c6:e5:c2:7b:
                    b9:16:79:5e:5f:b4:54:0f:8c:94:cb:da:df:8c:be:
                    06:e3:8d:6e:2f:88:7f:a7:1a:c0:4b:7a:46:ed:05:
                    8c:11:5b:42:33:65:2c:46:e4:fb:e3:fc:b7:93:8c:
                    24:c5:04:79:fc:ab:f1:94:72:e1:ad:b2:e4:4d:11:
                    2b:ce:f4:2a:2f:d2:ba:72:7f:6f:2a:fb:b1:93:f3:
                    16:c4:0c:3a:24:e3:6e:e9:80:81:6c:88:32:3e:18:
                    4c:1e:99:ad:67:48:ff:48:25:00:08:b9:95:14:75:
                    d3:7b:fd:6e:e9:eb:19:5b:31:7d:93:92:90:08:7f:
                    87:0c:34:5a:bd:0a:e5:fa:1d:ca:b6:90:ed:81:0c:
                    db:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:EB:CD:B2:25:FB:05:B3:36:E5:00:C9:69:C4:AD:DF:37:A3:C4
            X509v3 Authority Key Identifier:
                keyid:73:F2:BD:DF:CA:3E:16:38:24:86:C0:9F:AB:44:49:0D:16:A2:CE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:00:3f:48:ea:81:0e:27:b8:7b:f1:6f:0c:33:09:cc:92:92:
         59:9e:da:06:4f:e3:e3:92:19:8e:c5:00:04:f8:00:ee:36:76:
         34:e5:8c:7b:91:21:de:ca:ff:21:c0:1d:2d:29:ed:00:7c:16:
         af:6e:24:56:5d:9c:03:dd:47:98:cd:87:eb:45:3c:49:2e:fa:
         a4:67:60:00:44:36:00:85:ff:25:bb:d7:27:68:0b:60:d4:6a:
         35:b9:1b:c7:86:b5:2a:75:ca:5d:ff:3b:c7:2f:23:28:34:f6:
         2a:65:ae:6e:5e:c9:e6:4e:6d:cb:f9:82:78:36:c1:6e:c9:ea:
         b8:c2:dd:cd:b9:fa:2d:7d:61:14:79:2c:57:cd:f4:65:d0:05:
         44:51:e6:be:47:eb:9b:10:57:66:a2:0c:b5:10:09:3b:2b:57:
         e4:c8:e6:23:07:86:ee:64:7a:7f:f1:d7:62:b1:0d:b8:25:84:
         08:2d:ee:5a:22:25:d0:16:ab:4a:e3:e7:35:78:ae:0c:5e:1e:
         53:87:2e:58:39:0e:84:f2:83:3f:ac:70:43:02:cb:dc:26:c6:
         e1:27:f0:95:b6:a8:4f:fa:63:87:ff:b0:42:12:ba:f1:0a:9c:
         62:77:b0:05:ca:75:05:fd:55:f8:3d:87:b8:4f:5b:b0:8f:e2:
         ee:76:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:02 2026 by rpki-client