Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File:                     9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier:          hyJrwenc9Ww1Az3t1TsCfgVVVPoHsgaY82bxL/EmWGQ=
Subject key identifier:   45:B9:93:B0:BE:61:74:A7:A1:1D:D1:91:11:E5:FC:E3:C0:B3:B7:FD
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer:       /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial:       019EBEEC406BC6473B338837B8DE060834D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number:          1039
Signing time:             Sat 13 Jun 2026 03:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:14 +0000
Files and hashes:         1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: DympS2J1a/ghOY80oSGSj5jxUFN0/IQFJ3aTd4lrbO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:40:6b:c6:47:3b:33:88:37:b8:de:06:08:34:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
        Validity
            Not Before: Jun 13 03:00:14 2026 GMT
            Not After : Jun 14 03:00:14 2026 GMT
        Subject: CN=45b993b0be6174a7a11dd19111e5fce3c0b3b7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:24:fc:3d:c4:96:89:d4:9a:00:d8:c2:8f:
                    06:a9:18:2d:7b:68:3c:93:d7:fd:56:49:82:47:87:
                    5d:86:55:1d:c7:0f:76:2e:71:63:63:ba:63:28:f4:
                    b9:29:f2:63:76:e3:dc:6b:9c:80:e3:5b:26:f8:dc:
                    b9:f3:c8:09:85:86:11:6f:67:54:5a:3f:3b:8b:96:
                    37:ad:2a:87:07:e3:ad:7a:8c:fa:e7:9d:be:0c:8f:
                    aa:59:f8:ed:22:2f:3e:42:78:aa:94:3a:af:ab:ec:
                    19:b3:25:d5:a5:95:05:fc:af:76:bd:79:62:7b:fe:
                    70:ac:57:c3:3e:86:9d:77:f8:11:7a:e7:bd:30:55:
                    5d:07:e0:58:2f:45:0c:42:d8:f4:be:bc:fc:84:f4:
                    a2:2b:8c:c5:31:17:f6:aa:27:95:e6:f2:22:33:e8:
                    05:8d:7a:ad:ce:c5:51:e0:fd:50:42:84:2f:cb:5b:
                    66:9d:8b:c2:16:cf:79:7d:30:df:d8:3a:37:60:b9:
                    3a:fd:29:6f:64:0d:f9:6b:3f:5e:2d:9c:89:a1:a0:
                    7c:ad:e0:2e:72:fa:34:b6:86:59:e0:22:4a:82:9e:
                    94:9b:c7:4a:a8:52:98:23:85:a7:6a:48:f2:fd:e8:
                    3a:28:4f:1c:1e:71:d0:7e:0c:8c:91:1b:f0:d5:f7:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:93:B0:BE:61:74:A7:A1:1D:D1:91:11:E5:FC:E3:C0:B3:B7:FD
            X509v3 Authority Key Identifier:
                keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7e:5d:fe:23:83:64:13:4b:ad:12:42:a4:f7:46:b7:50:85:
         14:4b:20:20:3d:fd:ef:f8:f6:88:18:12:75:8e:97:bb:62:f6:
         b5:f5:f9:7c:2d:55:bf:8a:bd:4b:1f:97:d0:2f:32:4a:60:fb:
         28:65:d9:85:08:eb:e4:fa:97:fe:ca:55:bb:cf:af:d3:17:1e:
         bf:5a:7e:fd:12:af:f0:4b:ff:b7:6a:12:00:61:73:31:1f:5c:
         fb:bf:52:a5:1b:4f:a1:b5:28:6a:82:84:db:04:eb:3d:51:16:
         0d:53:78:92:d7:1a:c2:2f:bc:c8:88:ba:61:ab:d8:c2:bb:c1:
         54:ca:a5:3a:6c:08:41:57:51:23:40:53:20:a7:32:74:15:9b:
         93:33:89:8e:21:8e:73:44:06:93:b1:86:b5:37:d2:90:9e:64:
         6d:fd:e0:a9:e8:f6:39:c3:31:d3:46:29:21:10:2b:d7:cc:86:
         94:90:60:f4:d2:97:ba:bb:38:34:f0:e0:38:ba:63:83:d6:46:
         01:fd:5f:d2:c2:87:e3:95:8f:ec:ed:3e:2a:90:6b:95:e5:27:
         d8:7d:68:48:a5:a8:a4:56:91:c1:62:72:7f:8a:1f:68:55:58:
         69:f1:cb:46:db:94:48:e7:17:90:f3:2d:1f:7e:25:2e:79:a8:
         fe:56:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:52 2026 by rpki-client