Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File:                     XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier:          g/YZS8L9xUu9Va3BTHuOI2A/zKRw6uV7b7RntUO92xY=
Subject key identifier:   F1:D0:C0:15:B7:36:43:B6:44:28:C5:04:14:3B:67:F7:BF:01:9E:E0
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer:       /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial:       019EC36E00F95943AFE9D5963125A8C23965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number:          0D44
Signing time:             Sun 14 Jun 2026 00:00:26 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:26 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:26 +0000
Files and hashes:         1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: laC8vScuUyyOuLmbIJNC1jocW299GfFGYtkzdm/4MYw=)
                          2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:00:f9:59:43:af:e9:d5:96:31:25:a8:c2:39:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
        Validity
            Not Before: Jun 14 00:00:26 2026 GMT
            Not After : Jun 15 00:00:26 2026 GMT
        Subject: CN=f1d0c015b73643b64428c504143b67f7bf019ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:c5:6e:15:55:c9:16:d5:8b:75:30:74:b9:
                    c9:5c:cb:e7:3e:6a:38:f7:27:33:50:ba:7a:29:dc:
                    73:d6:11:9d:69:76:55:c7:7f:26:13:04:8d:fa:6b:
                    54:e2:ff:03:fa:70:71:64:e1:17:3b:29:14:86:66:
                    a5:6f:5e:d8:ed:aa:4d:39:d0:37:b7:26:f7:b5:a6:
                    ba:c1:bb:6a:25:89:73:bf:43:0d:e1:23:c8:2b:a8:
                    12:48:5d:f2:7c:e9:d9:8e:8a:c2:d6:8b:0d:27:00:
                    d4:e6:fa:b6:84:76:c5:0e:e3:dc:ad:b4:13:6f:bc:
                    8d:22:8a:19:0b:43:21:80:ea:29:10:89:3e:80:3b:
                    00:f6:fa:85:f4:b2:56:51:f3:1d:07:26:f8:c8:c3:
                    b2:9d:f9:98:3a:ae:39:8d:77:bf:40:10:28:47:a0:
                    2b:98:2f:45:d6:f3:0b:36:8a:10:57:15:2f:a1:c9:
                    d5:ee:3a:39:ad:a8:08:81:b0:0f:d5:d2:8b:21:51:
                    9d:04:a9:8f:5f:2e:a1:34:00:be:96:db:8f:f7:7c:
                    e8:14:49:17:00:bc:8f:1e:19:76:d6:45:21:12:e2:
                    1b:c0:bf:a3:84:75:e6:b8:14:56:34:57:1e:e8:24:
                    41:d2:84:d0:ff:6e:dd:f5:a1:5a:57:0c:73:54:73:
                    c2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:C0:15:B7:36:43:B6:44:28:C5:04:14:3B:67:F7:BF:01:9E:E0
            X509v3 Authority Key Identifier:
                keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:98:ae:2a:64:a1:46:ba:55:a3:fd:72:96:e3:14:44:4c:1c:
         99:80:d7:9c:a0:5f:b8:e9:ff:68:4c:2c:07:29:0b:84:ed:28:
         9a:c5:8f:25:ab:2f:66:28:23:1f:11:2a:19:6d:a0:e5:21:72:
         4b:e1:ee:9a:69:42:81:0f:d0:b9:0d:ea:24:2a:7a:4b:fd:d6:
         47:aa:72:6d:b9:ac:fd:d6:40:9b:a1:eb:c0:97:15:f3:28:57:
         a2:37:16:e4:90:93:62:3a:dc:cb:21:87:d6:a3:08:5e:2c:f9:
         e0:56:56:7f:a1:fe:b8:85:ae:64:3c:d7:35:be:f7:db:bd:39:
         4b:54:c0:b7:4c:1b:af:ce:53:87:b3:c6:32:6c:6e:75:75:71:
         13:d8:fe:a0:21:08:02:e5:51:ee:de:46:a3:77:8e:f2:59:d8:
         c4:93:8a:21:3a:51:c5:91:2e:bc:ff:10:8a:fb:f0:22:e8:0d:
         bd:8f:96:8e:25:12:87:1a:a3:86:ff:c4:c4:8b:f7:03:fc:b9:
         23:32:c2:b4:fa:b4:9d:70:96:3a:e7:9d:29:69:3a:32:33:5c:
         50:5c:32:a0:c0:26:99:be:a4:86:b4:1d:1b:b8:f4:26:06:3e:
         c8:a8:2a:87:a1:67:17:57:7c:75:28:29:e0:e6:0a:9a:8f:19:
         96:92:66:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:14 2026 by rpki-client