Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File:                     kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier:          S7VEaZ6+T9Ziq9JwQOpNoIl6Bp2jslf4byXYnLWyqi4=
Subject key identifier:   6B:4F:C7:7A:70:44:22:A3:8A:C9:C9:81:D5:02:E2:60:A1:19:DE:A5
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer:       /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial:       019EC3A593359F6C6488E9E9110199495A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number:          03EB
Signing time:             Sun 14 Jun 2026 01:01:08 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:08 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:08 +0000
Files and hashes:         1: 2gUkVkvBn7Q1vmsW6vZYesIru3E.roa (hash: 3mugJDdnEmraVaKho4WrwncKKVb68YhcTwc6RXDfj/k=)
                          2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: +HMgYNeL85KqNXkw72k5oFXSUBmSsdQvN+t7ST1q5jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:93:35:9f:6c:64:88:e9:e9:11:01:99:49:5a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
        Validity
            Not Before: Jun 14 01:01:08 2026 GMT
            Not After : Jun 15 01:01:08 2026 GMT
        Subject: CN=6b4fc77a704422a38ac9c981d502e260a119dea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:25:c4:74:d2:18:1a:0f:ed:7d:fc:7d:eb:
                    c3:5b:b0:cc:07:62:5d:e3:b7:df:b0:f3:ae:10:5f:
                    bc:b8:19:29:07:e5:3f:60:4e:f6:76:73:fd:b4:72:
                    ad:f6:22:da:14:fa:ac:28:37:96:f1:96:30:73:0b:
                    a5:a8:e9:0a:e4:a2:c4:1c:3f:03:bc:1d:bb:bf:1a:
                    a6:2f:72:e8:e1:28:7a:8f:3e:77:e9:5d:c7:20:1f:
                    ca:77:8e:b8:54:c8:2b:78:4c:97:7c:03:6c:7f:78:
                    5a:51:23:c8:19:b1:da:18:e4:d4:5d:dc:c7:b8:f1:
                    fe:73:8e:0c:5f:46:9d:8b:83:2a:45:e0:5a:85:b4:
                    72:14:f2:01:1f:54:dd:8d:d9:4a:38:a0:22:14:17:
                    1e:ad:c9:26:01:4d:1b:94:61:49:21:5a:4c:51:89:
                    a0:ee:89:1e:b9:4e:0d:8a:9f:f3:ad:97:5e:09:cc:
                    5e:11:a6:ca:13:00:f2:7d:26:f0:fe:eb:aa:48:6b:
                    3e:db:40:cd:43:8a:d1:6d:95:70:ce:04:be:14:dc:
                    f5:23:8a:5c:99:cd:7a:d0:29:dd:04:c3:14:cf:73:
                    23:47:07:dd:af:6c:a0:db:9a:f7:30:6a:92:ba:04:
                    f1:0b:5b:a4:59:a9:a8:be:4f:82:6c:12:72:62:cb:
                    cf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:C7:7A:70:44:22:A3:8A:C9:C9:81:D5:02:E2:60:A1:19:DE:A5
            X509v3 Authority Key Identifier:
                keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:fd:e7:32:19:a3:63:c4:9d:ca:ea:b9:67:73:21:e0:17:
         4a:b8:53:34:60:b6:1e:9f:1a:17:66:cb:59:f4:9f:f2:02:24:
         75:38:e4:c8:71:8c:fd:3a:1a:93:cf:ba:d7:1b:62:2d:c7:36:
         12:a0:62:e8:93:4f:c9:15:e7:f1:42:db:8b:07:b1:03:4e:6e:
         da:38:b6:20:c0:89:aa:1c:ee:6c:08:ad:e6:98:e4:3d:77:0c:
         be:33:b9:2c:69:5c:ee:57:22:56:0d:a1:4f:b7:57:cf:92:16:
         21:fc:10:d7:6e:b5:1c:85:eb:94:0f:01:80:0e:26:7f:58:e0:
         af:52:72:59:56:23:90:52:0b:e6:de:ef:be:49:d0:03:fb:d5:
         8f:16:33:6d:e0:2a:eb:9e:6f:8f:f8:19:c7:e7:42:45:7d:10:
         66:4f:22:56:fc:d7:ee:d3:a3:cd:0f:03:ed:dc:08:d9:ba:ad:
         3e:62:af:48:33:fd:4b:a1:49:c8:2d:d9:8c:d3:ef:d9:f6:3c:
         0f:86:61:2d:be:de:36:0a:6c:c9:d3:4b:ae:bf:89:79:1f:a7:
         7a:88:43:a3:00:fb:27:5c:0a:ba:4c:53:ce:13:93:aa:4d:a9:
         ca:bf:40:a4:62:5e:14:58:b1:5d:32:11:e3:d9:f2:9c:0b:0c:
         e9:6d:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:24 2026 by rpki-client