Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          WbkfHzM4bHz1KOw1g6ArcLREXhtb7/hiaYqu4Vp0OfE=
Subject key identifier:   34:82:C7:1C:40:95:3C:F0:FD:99:DC:10:A8:69:C5:8F:73:C3:39:48
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019EC03678D5943D4BA79D70020FC98CBBDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          0796
Signing time:             Sat 13 Jun 2026 09:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:55 +0000
Files and hashes:         1: 8vgRQVd50Rm3giCvTHM9dYeprUI.roa (hash: ZqKjZ1U3B0KeN2GviCp+mRJZ8NNTVw+srqTGM9NBsTk=)
                          2: GOVhumxEPoL4neQZjjckJeN-KNI.roa (hash: z0Kl7cRQ4EqgIEyAr3hQ9onG9NvsLkz7qIrC+ywOwnQ=)
                          3: JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa (hash: mtH7HEjcUoSWBPqGTrN+mDrgbsMUT6MnlsAyD0vzcjQ=)
                          4: MvgVDAqPSE3okj5m3PcFfzXBk1w.roa (hash: WTJgxLOGGaH3LR8ATwMwf+dORKDlRpVth28vAu1Woxg=)
                          5: epSW8Zh20G3Tyl52-dTL3yz-KVs.roa (hash: q6R7O5ajy86FRw9ExVqpE0uX2CxkIe39LhaQU39GNTs=)
                          6: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: cjK7Zr2zjDK8bpvaESTJVGGNiv7GZ/GHXTEHwmG+Ss4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:78:d5:94:3d:4b:a7:9d:70:02:0f:c9:8c:bb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Jun 13 09:00:55 2026 GMT
            Not After : Jun 14 09:00:55 2026 GMT
        Subject: CN=3482c71c40953cf0fd99dc10a869c58f73c33948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:de:92:2e:37:c2:40:bb:37:7e:25:0f:4d:
                    72:59:7a:d7:01:9f:a7:5c:df:86:33:68:ce:43:aa:
                    66:2a:aa:26:ab:06:66:aa:50:c4:5c:96:1a:77:cc:
                    35:94:af:10:4b:ad:81:25:8a:c0:2a:ef:ff:f7:34:
                    95:ea:e1:56:66:64:9a:0f:e2:f7:68:c9:34:b8:de:
                    1d:a5:e0:c6:b1:0b:fa:3a:07:75:03:82:01:e1:07:
                    f6:9c:82:3d:5b:44:a0:e3:ff:85:ce:a6:ab:f7:aa:
                    48:25:61:15:39:f4:b5:ee:f2:a5:f5:30:09:a6:f6:
                    1c:28:57:88:dc:06:07:dd:9f:22:a8:10:e4:1d:a3:
                    1c:0c:52:4e:f2:34:0a:8e:81:ee:a5:89:42:da:59:
                    b5:5a:2c:88:58:57:e9:58:d1:e2:b9:9b:fb:13:d2:
                    6f:ce:cd:31:be:44:49:5e:b1:3d:18:e8:8c:e5:4f:
                    13:e7:b8:f7:21:c2:e9:24:ae:97:ba:e2:2c:98:6e:
                    88:a1:ca:4c:78:15:24:f9:ea:de:57:12:66:e9:81:
                    02:1e:7e:82:86:f0:e4:2d:3d:94:83:e4:ae:78:2f:
                    a1:9d:a2:f9:06:1e:f5:59:ae:68:b3:c3:3b:cc:8e:
                    85:d7:34:16:36:ef:37:37:92:f4:da:81:12:1e:c9:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:C7:1C:40:95:3C:F0:FD:99:DC:10:A8:69:C5:8F:73:C3:39:48
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d8:f3:b5:19:f7:16:08:8e:86:cb:fb:71:e2:77:32:d3:50:
         91:55:c2:3c:6c:6f:08:90:8c:a4:b4:c5:23:56:b5:18:2a:16:
         49:d2:80:1c:27:b6:35:1b:00:ef:ae:1a:f8:d7:00:b6:d7:03:
         35:6e:59:6c:a4:a1:e7:f8:82:80:52:d6:2e:88:c1:73:dc:58:
         eb:10:d9:0b:a0:07:01:5e:b9:1f:99:91:02:2e:72:e5:3e:48:
         14:62:82:56:c2:f5:77:d2:60:76:e8:85:e5:63:7a:9b:9d:90:
         ba:1a:e5:6f:08:6c:9b:c2:c0:76:24:f2:cc:a6:db:af:21:71:
         07:66:c5:4e:24:4d:02:db:b1:b1:ef:c4:80:42:7e:c6:99:0f:
         5c:b5:96:9a:0e:45:d1:52:20:8c:e0:04:76:ee:18:a0:f2:b1:
         d2:d5:1c:7e:a9:e5:ac:a2:4c:1a:19:ef:06:03:7e:21:0b:8a:
         51:2d:b2:44:86:5b:7a:99:9a:4a:16:b2:65:4f:4a:f8:c2:c8:
         0b:53:04:d6:93:34:d9:db:da:b5:8c:62:e0:71:55:b6:08:73:
         62:d2:ea:a8:fc:c2:ec:31:ec:71:23:c2:2a:07:56:c6:d1:b4:
         e4:c9:76:b9:0c:95:6d:fd:a2:60:dc:a2:a3:71:df:1f:4a:9f:
         ef:1f:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:15 2026 by rpki-client