Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File:                     KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier:          PSU8EBCnEdnUjoTqx3D3k7sy9G2bhQXJe+FPyLC1i0I=
Subject key identifier:   C5:D0:2C:25:8E:A1:C3:F8:2C:2C:E8:3B:46:42:D7:20:25:1D:2A:DA
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer:       /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial:       019EC449EF4AB98A656DBD7E6C8D3B327D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number:          195D
Signing time:             Sun 14 Jun 2026 04:00:40 +0000
Manifest this update:     Sun 14 Jun 2026 04:00:40 +0000
Manifest next update:     Mon 15 Jun 2026 04:00:40 +0000
Files and hashes:         1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: ITs5nPNKa//coq22YbJWW8dDL+grF2qw1Ej4oEnHdVg=)
                          2: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
                          3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:49:ef:4a:b9:8a:65:6d:bd:7e:6c:8d:3b:32:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
        Validity
            Not Before: Jun 14 04:00:40 2026 GMT
            Not After : Jun 15 04:00:40 2026 GMT
        Subject: CN=c5d02c258ea1c3f82c2ce83b4642d720251d2ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:71:35:9c:9e:3e:c6:08:66:91:09:64:c5:
                    52:c8:e6:cf:ef:a8:76:f9:01:41:03:a1:a6:0f:ec:
                    17:40:84:90:13:71:f8:5d:b5:a8:d3:3c:1a:f0:ed:
                    07:4a:0e:63:6e:4d:f3:bd:7b:e4:70:42:f0:a9:99:
                    d7:8e:06:b4:8d:58:12:99:08:e4:31:ed:57:1a:e7:
                    1d:40:04:86:f5:7c:d9:6f:49:67:75:4e:e6:84:8e:
                    98:ba:ff:27:9c:73:8e:be:b7:bc:b3:9e:e7:94:66:
                    37:bb:41:f5:64:85:04:e6:cb:ec:c3:ae:e5:15:fb:
                    1b:7e:ba:c4:8e:d4:79:8c:a3:4e:cc:d0:a5:07:cb:
                    cd:84:bc:eb:64:08:51:4d:4d:82:c3:9e:60:0c:7f:
                    7d:19:aa:da:a9:c0:e6:79:de:79:01:4e:8d:f9:ef:
                    90:6d:96:76:70:52:b3:ac:38:39:ba:39:bc:7d:d1:
                    6b:85:de:cf:b0:cc:88:3f:bc:c4:c9:48:af:f4:d8:
                    d5:bb:0b:7a:68:ce:70:11:b8:96:64:52:41:35:35:
                    61:c8:64:c9:6d:23:06:29:5d:9d:d9:0d:9f:56:bb:
                    fc:37:a9:ee:ec:29:a0:6b:52:b9:de:aa:2a:94:22:
                    0e:38:94:4a:3c:8f:a8:fa:54:72:75:e3:24:05:97:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D0:2C:25:8E:A1:C3:F8:2C:2C:E8:3B:46:42:D7:20:25:1D:2A:DA
            X509v3 Authority Key Identifier:
                keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:28:9f:de:1f:5a:ba:da:b6:cb:52:d3:4b:ed:9e:4c:ac:cd:
         e0:bb:20:c4:53:b5:e1:99:08:75:a0:38:df:7d:5c:e6:fa:ae:
         8e:f8:5b:2d:5e:a7:13:52:b6:0c:17:45:43:75:62:9a:9f:67:
         59:b4:4c:ce:23:44:d3:c6:30:74:47:4c:5e:dc:83:04:d9:dc:
         c6:f6:bd:5e:fb:ca:0f:7b:93:f6:c1:ea:12:e3:db:f5:54:06:
         4d:b8:4e:3c:7d:95:68:4e:dc:2c:6b:22:37:17:f0:f4:40:60:
         e6:07:f0:f3:2c:a7:5c:77:e3:7b:5d:29:bd:36:e5:d8:ad:cc:
         c5:8a:14:ed:6c:53:d2:6e:4d:db:54:5a:bb:42:10:39:ad:24:
         96:04:7f:ce:66:88:a1:8c:b6:f2:1b:df:bc:8a:49:65:2f:c4:
         6c:14:e3:35:34:5a:91:5d:12:ce:32:65:da:ac:7f:4c:8a:f3:
         3e:e0:53:3f:95:61:f3:78:f0:3e:29:e2:bd:51:2d:5c:40:12:
         1a:27:ca:b4:70:3c:52:54:d2:22:5e:68:97:b4:48:65:8b:02:
         28:ac:41:eb:1a:d6:78:e4:a4:df:b1:69:7c:28:94:c3:86:42:
         23:04:4e:49:41:18:9e:c0:f4:fa:f1:07:d8:df:66:5f:d0:97:
         64:0c:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:18 2026 by rpki-client