Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
File:                     9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json)
Hash identifier:          3gScrdTv8MNP5kB1WOI97o4ldwQRGziIrMCNakAHiCY=
Subject key identifier:   CE:F2:16:A8:74:22:69:43:61:9A:B7:56:AC:4E:CF:92:EC:4E:3E:28
Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1
Certificate issuer:       /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
Certificate serial:       019EBE109533F7BDBE51D98A259557490169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
Manifest number:          02CB
Signing time:             Fri 12 Jun 2026 23:00:18 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:18 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:18 +0000
Files and hashes:         1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: cJnRbuqUgcEQfiE3m2dYD0hEWOAWDUKYuYGdr1Uhh3E=)
                          2: jO3T1-EOvm7phVXV6edT90rIeh0.asa (hash: 6/Ul++o9f4AGDv6T10uaHtnXB8UK/eOuxrUr++EWOSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:95:33:f7:bd:be:51:d9:8a:25:95:57:49:01:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1
        Validity
            Not Before: Jun 12 23:00:18 2026 GMT
            Not After : Jun 13 23:00:18 2026 GMT
        Subject: CN=cef216a874226943619ab756ac4ecf92ec4e3e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:89:fb:6c:9a:f4:89:62:af:d0:8c:fd:11:
                    ca:a4:62:54:0c:c0:52:4d:d8:fb:fa:af:97:26:d7:
                    c2:50:8b:38:a8:9e:50:3b:e9:e9:f5:77:4b:78:30:
                    77:1b:b3:d8:b5:22:bb:bd:14:26:da:72:70:3b:51:
                    25:51:ef:cb:58:29:a9:70:9f:45:e5:0d:5c:e7:7c:
                    77:27:1b:33:62:75:6e:a4:7f:f1:bf:d0:02:62:5f:
                    9f:85:af:ea:6c:de:ca:51:9f:5a:f7:14:5e:f1:16:
                    83:e9:1c:43:ef:85:5d:f7:52:68:fc:11:fc:60:8c:
                    59:ab:9b:34:2f:86:de:88:68:4a:02:11:3d:d1:8a:
                    0c:54:0e:80:77:84:ac:7c:68:92:17:a7:cc:f5:8e:
                    2c:9e:d4:15:3e:be:d7:87:0b:d8:cf:08:16:df:00:
                    91:41:b1:1c:26:6b:bc:00:1c:e5:5f:97:19:42:3d:
                    14:a5:e5:05:8f:f9:3f:1d:25:e1:4f:d5:90:51:b3:
                    78:1a:32:9b:c8:31:ff:93:86:d4:04:fb:04:de:88:
                    b8:9c:f6:b8:75:be:b2:88:a0:13:5b:58:71:62:64:
                    9b:36:8a:01:9a:eb:e0:d7:ad:34:e9:5a:29:f8:f0:
                    52:2d:88:fb:0b:77:dd:7c:f4:da:1b:97:ec:6a:a5:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F2:16:A8:74:22:69:43:61:9A:B7:56:AC:4E:CF:92:EC:4E:3E:28
            X509v3 Authority Key Identifier:
                keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6c:9a:a3:eb:d7:13:57:96:60:8d:95:49:8c:7a:8a:7b:11:
         ab:87:6c:34:b4:76:1c:92:58:e8:61:c2:b3:05:74:96:44:67:
         95:ef:89:c3:aa:5d:02:c7:b1:45:5a:43:5a:2e:0f:dd:82:a1:
         99:9e:1c:d5:6a:be:d7:65:f1:30:1d:3b:c5:21:af:19:f5:6b:
         87:ee:32:9c:e4:a1:d9:fd:02:a6:e2:fd:63:ee:ea:2f:e1:b7:
         c1:81:20:14:70:8b:23:eb:c3:3e:f6:bd:96:2d:8f:e7:4e:82:
         39:0c:f9:09:10:0f:56:a0:83:fb:7c:e4:92:1d:38:d9:0f:d3:
         be:23:98:33:f1:f8:29:fe:e6:3f:b2:db:be:03:90:71:ec:36:
         f8:73:f5:65:7f:05:9a:8c:be:b6:a4:aa:02:3f:5c:d4:b7:78:
         52:4f:ee:e6:c7:e3:ac:f1:c2:d7:3d:19:a9:24:46:f5:95:48:
         83:18:60:1e:cb:b3:18:5c:58:a7:3f:cc:b0:59:ba:81:f5:c6:
         94:44:04:f1:d4:09:9b:fa:56:66:7a:9e:eb:33:ac:f0:88:45:
         27:f6:e4:65:9e:95:bc:63:7f:ee:37:74:5a:2f:3e:a3:5e:17:
         cf:5f:51:70:f5:c4:b3:70:81:07:17:ff:ea:84:3f:ab:5d:95:
         aa:95:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:28:37 2026 by rpki-client