Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File:                     DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier:          UgVp6+oT9BC9eUajIo9lqv73693fvwrn16cWSJKVc4w=
Subject key identifier:   A9:41:FC:4A:E8:1E:E8:D5:7D:71:CC:C1:13:AE:1C:4D:A0:0D:6A:E9
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer:       /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial:       019EBEED095D63DC8A37701F3E0DF1C57D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number:          1899
Signing time:             Sat 13 Jun 2026 03:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:05 +0000
Files and hashes:         1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
                          2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: HcRfe9Q2EOk07P57oKG/Z8g90Rd5RbPMxR1SyRwLZ6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:09:5d:63:dc:8a:37:70:1f:3e:0d:f1:c5:7d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
        Validity
            Not Before: Jun 13 03:01:05 2026 GMT
            Not After : Jun 14 03:01:05 2026 GMT
        Subject: CN=a941fc4ae81ee8d57d71ccc113ae1c4da00d6ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:a2:e5:e3:cb:49:5d:fb:79:99:8b:63:d2:
                    cf:1f:15:e5:cc:7e:02:2c:b7:b3:d0:26:68:33:36:
                    9f:65:a1:c2:45:5e:75:d1:8b:37:2f:0d:bc:6d:a3:
                    df:dd:d2:c0:55:ee:fd:fe:60:a7:3f:df:11:1c:f5:
                    06:a5:8c:b4:e6:36:8d:01:1c:55:d6:82:fe:71:a1:
                    03:56:2a:85:1f:44:e9:39:05:36:0f:92:c6:4e:ec:
                    49:1a:a5:1e:68:2e:77:3c:cf:24:3b:ab:78:2a:c8:
                    c0:33:e0:68:0b:04:da:2f:e1:ef:a6:3a:96:19:d8:
                    ba:d5:fb:c6:30:b0:9c:62:0e:8a:08:1b:64:1e:2b:
                    d1:d4:67:fc:02:9f:59:77:e2:62:60:26:eb:85:6b:
                    95:25:6d:46:9e:39:56:c6:d6:bd:91:19:18:f9:e3:
                    36:9a:2a:2e:8e:80:a7:33:6e:1f:35:ff:98:34:36:
                    18:0d:05:68:79:af:64:98:26:39:3b:37:13:f4:8e:
                    d5:7b:ab:20:c7:7a:df:60:12:b6:ed:d0:10:d2:9a:
                    5e:3b:9a:1d:c8:24:9b:2b:6e:df:fd:80:99:cb:55:
                    f2:7d:97:1d:0d:67:bd:5b:a2:de:8b:51:e0:d8:78:
                    04:18:49:b9:b8:2b:47:4f:bf:d0:03:73:97:67:64:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:41:FC:4A:E8:1E:E8:D5:7D:71:CC:C1:13:AE:1C:4D:A0:0D:6A:E9
            X509v3 Authority Key Identifier:
                keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fc:b2:a6:40:a1:6f:8d:58:07:d0:db:d3:19:3d:77:dc:6f:
         f5:07:6d:e2:e0:af:5d:38:6f:dc:98:a3:77:95:d9:ba:38:7f:
         1e:70:01:ce:e9:5d:18:dc:8d:68:f0:81:d6:82:ce:96:54:fe:
         f8:66:5a:16:07:7e:c7:9b:b1:34:3b:b0:c4:80:0e:f9:89:7f:
         0a:2c:44:a8:94:00:8b:3e:cd:0f:ff:d3:96:c5:b7:19:5c:53:
         22:48:6d:16:75:c6:15:3a:64:3f:f0:1f:3a:de:51:6a:1a:2a:
         f6:8d:93:2d:af:79:e0:3b:e6:fd:c8:35:75:b1:6e:4d:dd:dc:
         2b:58:8d:fb:e4:94:69:85:b1:c8:67:cd:a1:cf:59:01:1a:36:
         b4:21:98:03:69:05:42:4b:db:31:ac:d4:b1:6a:10:80:25:8c:
         f1:da:e5:7c:86:62:89:a5:db:a4:e6:cb:3f:e5:3f:6a:87:ea:
         4e:37:cc:e6:ed:10:27:a8:c2:57:38:53:2d:0b:42:dc:0d:46:
         9c:dd:ed:95:bb:40:d3:4f:b5:df:48:68:61:9e:6e:de:e8:a8:
         8c:de:82:cb:80:12:c3:a9:0d:27:ae:23:25:00:a1:0d:2f:92:
         3e:4c:1f:bd:bb:5b:a1:3d:65:a2:9b:b4:29:58:1a:5f:38:81:
         e1:a4:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:59 2026 by rpki-client