Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File:                     kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier:          fmfDmZffRFrCYxPq8ki8/tPUl4jKwBdk5CCKq2+NGpQ=
Subject key identifier:   D0:73:F8:1A:65:84:B0:41:59:6D:F7:F7:B2:5E:9C:42:A1:17:FA:18
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer:       /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial:       019EBEB617E2C4ADC283FC64DE46EB9D7E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number:          0C76
Signing time:             Sat 13 Jun 2026 02:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:05 +0000
Files and hashes:         1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
                          2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
                          3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: wHNMI9UmGZbkjjb/aguoI56363f9JPB42DlJYkqisbE=)
                          4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:17:e2:c4:ad:c2:83:fc:64:de:46:eb:9d:7e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
        Validity
            Not Before: Jun 13 02:01:05 2026 GMT
            Not After : Jun 14 02:01:05 2026 GMT
        Subject: CN=d073f81a6584b041596df7f7b25e9c42a117fa18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:18:e3:de:8e:d5:95:30:e9:13:d6:b8:d9:
                    be:3d:83:b9:0c:ad:68:7c:44:56:37:9f:99:4d:73:
                    ac:29:2d:f3:62:e1:7f:a8:0a:93:d4:f2:80:0d:dc:
                    9d:a8:e7:8b:91:3f:d1:7e:3e:34:23:a5:8b:90:61:
                    56:83:65:6d:c0:fb:07:0c:6d:9f:43:f6:5c:8c:ce:
                    e8:99:46:32:ea:e9:81:2e:e3:49:8e:99:0c:3f:70:
                    cf:0c:7c:f7:0d:5c:4f:a3:72:e6:39:27:7a:de:2a:
                    e4:e6:42:68:f5:38:54:58:ff:84:4e:61:cb:ac:e0:
                    71:8f:9c:03:56:85:27:fd:3d:b8:8f:ea:2a:9d:21:
                    8b:8c:04:4d:90:33:35:a2:fa:e3:04:c0:5c:8a:57:
                    43:c1:c0:15:70:8a:b0:23:64:39:57:6f:54:9b:5b:
                    61:e3:4c:a0:61:0f:5d:f7:45:cd:96:e2:1c:1d:55:
                    6b:fe:62:fb:f6:ea:d7:0c:56:83:cb:7a:6e:8e:64:
                    43:8c:63:83:33:1f:9a:65:85:c1:c5:19:42:e6:a5:
                    5e:40:04:cc:9c:23:cd:68:da:fd:d7:95:00:16:51:
                    d2:45:ca:4e:73:89:5a:6e:81:7a:31:e2:67:c6:4c:
                    7b:97:cd:31:1f:0b:8c:9c:03:0e:d2:9a:ea:d4:a9:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:73:F8:1A:65:84:B0:41:59:6D:F7:F7:B2:5E:9C:42:A1:17:FA:18
            X509v3 Authority Key Identifier:
                keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:43:64:97:48:b3:4f:a6:8b:25:f8:0a:a6:13:00:19:7f:2e:
         3e:26:19:98:7b:46:d6:05:36:b4:ff:81:4b:88:aa:00:11:b0:
         b6:62:ad:6c:56:c2:b9:87:f5:74:e7:48:62:21:84:d6:0f:1c:
         81:13:f9:79:03:8e:a2:4f:98:1a:7d:2f:8d:3b:a2:c7:70:9b:
         3c:34:2a:4b:e2:3f:0b:43:45:4a:c4:62:8b:9e:c9:1d:78:27:
         2e:30:06:e8:0f:9f:e2:96:f6:e5:13:8b:d6:c3:bb:bb:ba:89:
         01:8b:3a:f4:bb:4d:98:7f:ed:4f:2f:db:3b:84:66:c2:3c:63:
         fb:be:71:80:dd:92:d5:7a:b6:9f:3c:81:04:14:d9:45:f7:0c:
         39:43:61:d1:ac:6d:4e:95:c4:59:f0:31:06:c3:61:bb:0d:87:
         55:bb:87:de:b8:eb:3c:c7:72:4e:db:4f:e1:83:a7:bd:0e:ae:
         f0:76:71:e7:40:70:d5:9b:46:76:75:08:3f:73:a9:12:75:29:
         4a:9f:ac:25:54:8d:82:8d:ea:5e:c9:b9:69:5a:5a:9a:2d:4c:
         63:0b:7d:a3:5b:3b:96:ed:0f:b4:e9:dd:d7:6e:a7:0b:92:45:
         70:96:09:09:0a:5d:e7:18:d0:40:dd:b3:6a:de:e9:81:87:12:
         e0:69:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:15 2026 by rpki-client