Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File:                     kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier:          GYdLhWncRjpX9K7s1IuRAnJNCdPesA7QNTe+QPOXNfk=
Subject key identifier:   B4:E5:57:2A:82:D0:46:96:6A:D2:55:66:85:FF:B7:E3:22:B0:34:41
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer:       /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial:       019EC0367A38CB5D3C90D74469677E12BE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number:          0B30
Signing time:             Sat 13 Jun 2026 09:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:56 +0000
Files and hashes:         1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
                          2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: SmfHxhxQmgz8J4StGAfBqe951+A6wMU6EbQ1BW48JCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:7a:38:cb:5d:3c:90:d7:44:69:67:7e:12:be:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
        Validity
            Not Before: Jun 13 09:00:56 2026 GMT
            Not After : Jun 14 09:00:56 2026 GMT
        Subject: CN=b4e5572a82d046966ad2556685ffb7e322b03441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:5b:11:73:1e:cd:e7:da:fe:5a:5c:d1:15:
                    8a:a7:38:cc:d3:e1:44:31:25:08:09:23:10:4e:61:
                    54:46:9e:57:1a:da:93:c8:f8:a2:21:3b:6a:89:c3:
                    8f:6d:d7:fe:f9:16:97:9f:b5:f7:71:e9:16:6c:a6:
                    0b:99:8b:34:7b:3d:a7:e1:9c:88:0f:3b:a0:f2:4e:
                    7a:e3:8b:a5:d7:22:42:96:f0:5a:a6:dc:c6:ee:25:
                    13:98:6d:15:5a:cd:f5:ff:ed:a9:5b:a9:7e:f5:95:
                    ff:14:08:91:aa:ea:92:db:66:d3:2e:a8:cd:14:93:
                    6b:ce:14:76:99:5d:28:53:e5:46:6d:50:15:14:53:
                    72:9e:8b:01:aa:05:82:e9:21:30:90:84:fd:fd:37:
                    4a:37:3e:c5:20:10:ad:d1:b4:22:2e:19:ab:dd:cb:
                    24:3b:45:b0:f4:7b:6c:83:ff:81:ce:bb:58:1c:be:
                    7b:39:dd:e4:bc:c7:15:d2:fd:2e:fb:22:4e:d5:ce:
                    d5:58:b9:06:2f:a9:85:da:f4:92:8b:06:5d:9e:12:
                    af:a7:7d:14:08:fd:ed:0c:f0:fe:b8:8b:78:ce:2b:
                    19:90:7b:ac:ad:a8:5c:59:e2:8e:02:11:6a:5e:e6:
                    8d:c6:55:2c:c8:7c:59:ef:d0:01:f3:2f:aa:a1:14:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E5:57:2A:82:D0:46:96:6A:D2:55:66:85:FF:B7:E3:22:B0:34:41
            X509v3 Authority Key Identifier:
                keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:05:49:39:5d:c1:d9:32:b7:40:bc:45:e3:bf:cd:7f:e4:
         b4:f6:21:f8:9b:5d:d9:a1:82:1f:b8:e4:3b:63:d3:7b:ea:e9:
         4f:da:01:ee:c9:8a:71:f0:ce:96:8b:15:1c:99:b1:fe:8a:92:
         6d:ec:6d:49:63:f7:7b:56:73:89:7b:95:e5:2b:aa:5e:41:43:
         ea:a0:0d:21:26:6f:60:b0:8b:b4:21:7f:e1:ec:23:fb:0a:1e:
         49:0c:91:e5:fd:7a:3e:19:87:22:00:21:57:93:1f:1d:e2:50:
         a0:1f:81:2f:c8:d5:98:3c:f2:8c:85:e0:00:97:fe:f7:3f:43:
         08:0f:93:b3:80:e4:8a:1f:54:9b:0d:5b:e0:f7:a3:4f:c9:cf:
         58:a1:65:fb:98:f1:1b:d6:0c:c4:9e:8f:ff:fd:2f:dc:ae:59:
         6c:e0:a6:10:2c:f4:8b:0d:57:bf:d2:78:e8:b8:b2:55:9e:ea:
         96:58:cb:6d:fb:66:54:20:1e:10:88:c8:4d:4c:fe:cc:b3:f2:
         d9:b2:de:96:f2:70:71:dc:38:b5:fc:b9:a1:a2:1c:29:25:45:
         b8:7b:38:a0:47:3d:78:86:47:9a:d8:3b:c8:cd:10:07:91:d5:
         6a:82:4e:bb:42:b8:50:cd:09:0f:2c:7e:21:43:db:08:fe:76:
         5e:b7:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:19:53 2026 by rpki-client