Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
File:                     g6PKzqjF0dmJsH6m4JdKANoDako.mft (raw, json)
Hash identifier:          UgMkw5RgY3MUh+PxnJabEPWxJxW+nredXkTJAvpb+V8=
Subject key identifier:   7F:62:67:31:53:A3:B2:DD:AE:9E:48:E4:16:65:C7:28:76:67:1E:D5
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Certificate issuer:       /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial:       019EC0A4206F9E181BDBB10ABDAA0856718A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
Manifest number:          020F
Signing time:             Sat 13 Jun 2026 11:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:41 +0000
Files and hashes:         1: eTK6_P37nQZzruBHzeHGcO4T3zY.asa (hash: tOEzSunzuWj37U3B09PX4r97OTZ1nR4yyZSVGcYBXmU=)
                          2: g6PKzqjF0dmJsH6m4JdKANoDako.crl (hash: orpiyGYF6vHRWTSVlC9JpnUdJL6z4oNZC+mKWXHd8+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:20:6f:9e:18:1b:db:b1:0a:bd:aa:08:56:71:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
        Validity
            Not Before: Jun 13 11:00:41 2026 GMT
            Not After : Jun 14 11:00:41 2026 GMT
        Subject: CN=7f62673153a3b2ddae9e48e41665c72876671ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:a5:83:e0:43:79:18:bf:29:99:25:9b:9c:
                    8c:17:98:24:60:6b:89:03:f2:7b:b5:c5:71:84:99:
                    4d:9b:85:00:30:ec:6c:46:f0:13:25:9e:c9:44:a2:
                    88:2c:3f:36:c8:e4:e0:d3:87:59:96:98:2a:cf:68:
                    26:0c:6c:17:e5:8b:d1:4b:1b:7d:89:0a:ff:b2:1e:
                    d4:c9:f8:5e:b3:23:8b:44:78:37:6b:60:32:7c:f5:
                    f0:c5:7c:0b:f0:1f:9b:db:bd:c4:17:57:a0:a8:c8:
                    a2:97:2a:0d:02:9b:45:85:68:eb:22:d3:2a:4c:61:
                    cc:a9:ec:f2:32:96:3b:93:1f:cb:30:22:f7:56:bb:
                    9e:e5:3c:05:c0:2f:8c:ba:b5:51:70:19:7a:e5:8f:
                    19:12:e7:d3:12:e2:08:2f:a4:5d:fb:64:a3:f5:d2:
                    7f:f3:f6:17:fd:b8:7b:2e:0c:de:55:40:23:4b:19:
                    f4:dc:d8:af:98:6b:19:bb:9f:88:13:8f:48:6c:fa:
                    e0:33:bc:72:b5:25:5e:b5:81:ea:98:28:49:9e:52:
                    4e:ae:75:87:fe:cf:18:03:7d:3d:e6:11:9f:83:11:
                    30:b3:6b:83:1e:fd:8e:0f:67:e0:dc:3e:92:a7:cb:
                    44:e8:9d:79:31:46:fb:fa:e3:28:b3:b4:ed:25:f8:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:62:67:31:53:A3:B2:DD:AE:9E:48:E4:16:65:C7:28:76:67:1E:D5
            X509v3 Authority Key Identifier:
                keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7f:7b:ee:de:73:74:a0:2a:55:02:9f:b9:39:cc:64:f3:db:
         65:e2:40:25:1e:d6:a2:a1:c8:b4:d0:cf:21:42:16:0a:a9:ec:
         a3:a3:70:57:93:70:58:84:08:0f:28:69:5f:00:17:3e:14:46:
         2f:0a:62:69:25:c9:13:60:02:13:14:ef:29:05:31:8b:6e:09:
         5e:e7:5c:a9:cb:64:f3:c7:da:25:39:c4:68:30:25:c8:28:5b:
         b8:a6:12:8c:fd:1c:72:06:36:5b:27:7f:ee:40:ae:63:b1:de:
         6c:a4:6f:76:d3:b4:33:c8:de:4e:16:17:83:8f:fc:d4:e4:f5:
         36:3e:ad:c9:38:9f:22:d8:85:04:d3:f3:17:9e:a9:0b:8f:bb:
         4f:01:86:38:0b:02:0b:c8:8e:e0:11:6c:09:89:e6:dc:61:68:
         7f:b8:09:7a:3f:98:2f:87:d2:d0:d5:bc:c7:2f:c7:c6:0b:bd:
         4b:de:b8:17:f8:06:58:f7:56:7c:a5:00:6b:58:37:9a:3c:61:
         ba:61:4f:51:b2:6b:62:6b:cc:59:db:b6:a5:16:0f:1f:8a:ec:
         dd:d4:59:55:e7:1c:01:80:a2:1d:30:98:de:91:40:12:d0:f7:
         2a:25:9d:f5:15:8a:52:c7:2b:e7:db:18:7b:bb:b5:81:49:19:
         27:5f:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:14:55 2026 by rpki-client