Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File:                     kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier:          TaGGK339V0b49WgKINhrYNxSBJLwCK8ufQgEOVvGQks=
Subject key identifier:   96:48:9A:CA:B0:5E:BD:D6:E6:50:4C:B7:44:9A:1E:D8:8E:C7:BE:F9
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer:       /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial:       019EBFFF507D55AF57C1E0959793C2E505BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number:          08D4
Signing time:             Sat 13 Jun 2026 08:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:40 +0000
Files and hashes:         1: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (hash: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE=)
                          2: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (hash: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc=)
                          3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: vyyWRPgAQoxVtVbU+kaavRO/W0EYit+p/7R5spkR6qk=)
                          4: nXsgPSU5eo-g-H5HVGkbUxzs-M0.roa (hash: bHUY+9ATlshHA4NGy9V8O1pXq9p6uilZoEQtRA9DmuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:50:7d:55:af:57:c1:e0:95:97:93:c2:e5:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
        Validity
            Not Before: Jun 13 08:00:40 2026 GMT
            Not After : Jun 14 08:00:40 2026 GMT
        Subject: CN=96489acab05ebdd6e6504cb7449a1ed88ec7bef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:e2:1d:ee:45:17:ad:1f:35:04:bf:1b:af:
                    a4:82:2f:fe:57:44:20:89:3e:76:05:ac:6e:fd:f7:
                    70:c1:6e:d6:e5:79:a4:ec:b6:92:87:87:f5:9c:e4:
                    43:bc:c4:7e:10:9a:12:8b:4b:33:12:ed:3d:1b:36:
                    9c:b0:74:9b:eb:76:79:f6:05:e7:60:ee:f0:bc:30:
                    64:e0:bf:e2:34:88:50:2e:6c:a0:9f:4a:85:d1:89:
                    9f:82:c7:a0:de:9a:ef:dc:b7:b0:47:6d:b4:cd:40:
                    00:73:a2:10:3d:ee:97:77:7d:c6:cf:c6:2d:c3:9f:
                    98:ba:9a:7f:72:89:f4:27:c4:85:ca:92:7a:1b:11:
                    04:a7:fb:8d:5e:1e:c5:a9:8f:e8:9a:40:f6:74:6b:
                    5d:2b:9f:47:c5:3b:ce:4b:eb:41:4b:71:64:15:3a:
                    2d:a7:08:7d:f8:34:44:dd:ef:ab:14:de:33:1f:e1:
                    a5:43:1c:2f:8f:94:a6:97:d6:86:4e:5f:c7:db:1a:
                    be:e2:78:a5:7d:75:66:7d:a7:ab:fc:f2:c0:11:11:
                    ac:87:a3:0b:52:75:18:95:af:59:13:9a:94:3b:87:
                    bf:01:65:0c:ca:ce:49:45:07:74:b7:63:9f:4c:b2:
                    d3:dd:34:96:e8:5e:ca:7c:6b:58:7e:8e:c4:95:aa:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:48:9A:CA:B0:5E:BD:D6:E6:50:4C:B7:44:9A:1E:D8:8E:C7:BE:F9
            X509v3 Authority Key Identifier:
                keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:65:79:52:d9:27:11:3b:c5:a1:4a:a9:25:78:d8:cd:f2:
         c8:b8:bb:57:63:7a:3b:17:52:8c:f4:5b:7f:8b:41:93:3b:1c:
         ee:21:06:a0:ac:83:3a:54:f1:5a:90:4d:f4:45:ba:09:9c:4a:
         5f:73:a7:bb:ff:07:00:3c:21:2c:5b:62:2e:37:09:4a:06:9f:
         01:f6:c3:84:a7:76:e0:11:9f:33:8b:14:de:23:46:1b:d5:18:
         38:e1:a8:9e:25:d3:f0:0e:f1:84:b1:ba:18:78:a1:a6:1e:d4:
         b6:1f:e3:d1:89:c9:c2:1f:50:a6:64:d6:45:fd:71:c3:7d:fc:
         cd:3f:19:f8:98:9e:a2:f7:09:ce:99:6e:24:16:72:5e:b8:01:
         38:66:18:29:4d:3e:37:cb:53:90:5a:d5:2b:88:23:7b:0c:71:
         9a:f3:1c:9f:7d:f8:70:cc:99:3b:70:fc:d5:00:bf:ab:b5:bd:
         1a:cc:e0:bd:bb:d0:05:b6:fb:93:72:1d:78:e3:43:da:4f:61:
         a1:67:84:fe:8a:77:51:02:66:a6:a1:f6:5e:49:95:c6:09:82:
         c3:57:44:aa:40:f3:d5:88:d6:6c:5f:b5:b0:f9:f6:c7:93:f6:
         2a:fb:4a:f3:55:22:0f:cd:33:b7:18:2b:7e:ac:15:be:31:15:
         52:76:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:32 2026 by rpki-client