Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
File:                     mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft (raw, json)
Hash identifier:          jnt8Gj1Lq6S4BPv9uDLMEtJLxBhtNiRIZmWu+Vdu5k4=
Subject key identifier:   A9:D1:7E:9A:87:C2:9E:F0:BD:7D:AF:75:8E:15:BD:A4:0A:38:02:E9
Authority key identifier: 9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61
Certificate issuer:       /CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
Certificate serial:       019EBF9122E00EC8468C152A0ADBFD7290A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
Manifest number:          FF
Signing time:             Sat 13 Jun 2026 06:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:20 +0000
Files and hashes:         1: JyTESIdOgph3y-dNo69n06dnxiQ.roa (hash: z0vBFIiJp2zryNwoycSWHJwZXhD/448hyrliXoW+Ax8=)
                          2: mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl (hash: 38G2Fom2xTKZz53VLcKCUdQjRTciU5ntZ2eOJNSxNLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:22:e0:0e:c8:46:8c:15:2a:0a:db:fd:72:90:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19a33e6ec1bf77ed574700ae468dcc23530161
        Validity
            Not Before: Jun 13 06:00:20 2026 GMT
            Not After : Jun 14 06:00:20 2026 GMT
        Subject: CN=a9d17e9a87c29ef0bd7daf758e15bda40a3802e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:a8:00:99:a3:b7:64:ed:2e:65:00:87:d2:
                    c4:00:37:eb:a5:7c:21:7c:50:3b:95:c9:21:57:ec:
                    d2:0c:98:4c:fd:fc:e4:bf:09:12:cc:f1:d1:0c:ff:
                    da:b5:76:f5:0d:aa:6c:42:e6:f2:95:42:82:30:b5:
                    16:3e:82:fd:17:5a:94:6a:6b:bf:02:ed:a4:7a:00:
                    03:98:e5:76:3c:b7:74:73:ef:b9:f3:71:ac:26:0a:
                    a4:b5:9c:b5:b1:52:82:d4:24:8c:ae:cc:3a:91:4a:
                    aa:21:7a:4a:4f:09:ec:f1:79:73:e0:2e:50:f2:9e:
                    be:03:aa:72:f3:83:8f:a9:c3:a5:f3:66:ba:89:56:
                    9a:04:d7:34:ce:4c:29:d6:74:d3:e8:c6:72:be:fe:
                    7b:eb:80:a0:20:20:0f:b3:e7:f4:3a:23:e0:a3:0e:
                    41:49:d9:bf:d0:ff:df:21:fd:8d:3b:70:13:9b:44:
                    20:82:e0:62:c5:84:65:6f:6b:37:2f:1f:2a:f9:b4:
                    8b:cf:41:51:c3:d2:7e:8b:12:3b:31:21:11:95:52:
                    5e:52:7c:a0:65:80:99:a5:e9:68:fa:eb:91:a2:0e:
                    d6:88:0e:56:1e:f9:b6:33:4f:79:cf:2c:81:6f:15:
                    6d:d5:9a:cc:11:16:2e:7a:0c:b6:50:91:db:55:c9:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D1:7E:9A:87:C2:9E:F0:BD:7D:AF:75:8E:15:BD:A4:0A:38:02:E9
            X509v3 Authority Key Identifier:
                keyid:9B:19:A3:3E:6E:C1:BF:77:ED:57:47:00:AE:46:8D:CC:23:53:01:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxmjPm7Bv3ftV0cArkaNzCNTAWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7c32f6-6de7-4831-bfd2-2d3d1333bdab/1/mxmjPm7Bv3ftV0cArkaNzCNTAWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:23:35:13:a1:69:d9:4a:98:3e:6a:e2:4c:e3:70:c0:e1:
         d1:8c:1e:0b:4a:2f:4e:9c:93:0c:92:ac:23:95:5a:58:ce:e0:
         e4:aa:49:cb:22:57:be:4d:20:6f:68:e2:c2:df:6f:01:0c:fc:
         43:82:d6:eb:b3:75:1a:76:ac:0d:24:c3:79:8e:d5:a0:27:44:
         3f:2a:87:8d:40:12:14:be:04:f4:6c:bc:73:9d:a4:a6:9d:78:
         2b:7b:16:3a:7d:aa:21:4f:04:a3:de:e0:b5:c8:f8:e2:b9:fd:
         65:df:f2:8c:8c:76:33:fe:58:5f:83:3d:6e:6e:99:f3:cd:6f:
         15:a7:1b:c3:59:9e:7d:29:2f:9a:72:d4:03:26:4d:83:10:c4:
         47:f4:84:8e:91:f3:aa:95:47:16:89:82:1e:37:e3:62:8c:70:
         01:6f:ff:30:64:55:27:54:88:9e:85:18:70:fc:6d:83:18:74:
         48:47:6e:6a:02:5f:0f:e8:4c:e0:55:92:b0:06:30:f7:53:12:
         d8:3d:3b:40:0b:b5:51:70:ef:6a:b7:44:00:9e:6f:8b:83:fc:
         5c:bd:11:93:9e:9b:45:67:2b:4f:36:53:c3:29:9f:f7:e2:0b:
         9a:bd:a0:87:2c:1b:4e:83:1d:70:6f:4d:09:9a:7e:da:38:e3:
         a9:4b:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:24 2026 by rpki-client