Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File:                     kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier:          /NzMoZEEVrTcMbMJ5CnTWDvNC5jgCDqjmb5RYDb8ILU=
Subject key identifier:   70:DE:7E:45:45:D4:36:A2:40:02:52:92:20:1E:32:EF:F8:DD:6F:CB
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer:       /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial:       019EBFC8F1770317E5F8F07320D164DD0E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number:          0E7C
Signing time:             Sat 13 Jun 2026 07:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:17 +0000
Files and hashes:         1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
                          2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
                          3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: uA+7jmiKHs/HcYr3ogzOq7hgR/9i5PFiyqsZELAmIzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:f1:77:03:17:e5:f8:f0:73:20:d1:64:dd:0e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
        Validity
            Not Before: Jun 13 07:01:17 2026 GMT
            Not After : Jun 14 07:01:17 2026 GMT
        Subject: CN=70de7e4545d436a240025292201e32eff8dd6fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:b2:20:ab:88:94:3d:a3:ad:fa:f3:3a:a2:
                    be:a1:32:b5:7b:3c:fc:6a:d6:03:87:17:30:85:7c:
                    b9:12:90:5a:8e:0b:92:79:56:6c:5a:55:4d:3c:f7:
                    2b:54:6b:c1:ab:43:33:ea:fc:54:e3:75:74:98:99:
                    ec:ca:20:65:4e:98:41:15:fa:92:8b:f1:99:17:e2:
                    f0:62:3c:be:02:09:9c:df:4f:75:f5:c0:61:7d:b3:
                    3d:de:5d:67:29:d6:80:c4:73:1c:52:62:ed:9f:f6:
                    c5:83:c8:56:2d:03:7b:26:ef:d3:43:02:94:3d:89:
                    65:bd:91:69:83:9f:96:1c:37:3e:53:a3:08:0c:18:
                    12:e9:0c:2b:1d:1f:a8:3f:d1:fd:e4:9b:e1:cb:c2:
                    1f:df:a0:4f:8f:9a:86:d0:96:32:00:30:af:c9:06:
                    12:98:58:78:4f:7f:ce:f3:88:7d:f3:7b:cf:59:66:
                    b0:9a:51:dd:54:06:01:2c:59:14:7d:8b:e0:a9:22:
                    7b:1a:76:38:34:50:0c:8f:82:f0:dc:a6:54:1c:de:
                    50:b3:86:19:07:e4:34:7d:20:7b:1f:b8:2b:bd:b8:
                    12:d6:79:34:ca:5b:43:eb:8c:a4:9d:8c:f2:34:42:
                    da:76:7a:8f:93:36:d2:d2:70:93:f8:ae:c5:5d:75:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DE:7E:45:45:D4:36:A2:40:02:52:92:20:1E:32:EF:F8:DD:6F:CB
            X509v3 Authority Key Identifier:
                keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a5:33:df:b4:f6:8b:f3:31:ab:5d:0d:3f:9c:80:ef:25:6b:
         d0:47:0a:89:f4:13:ac:7a:09:9c:49:dc:47:96:7f:7c:91:20:
         3e:52:c3:a4:75:74:c4:9e:23:75:bd:e4:0d:27:0a:70:e0:ea:
         bb:26:03:e3:50:58:06:8b:13:3e:fd:91:30:80:20:3f:57:66:
         cf:ce:6d:d5:14:f8:7c:6d:e5:9e:75:dc:8d:99:3c:ea:04:4c:
         89:4e:32:fb:41:15:05:01:e4:e2:33:63:dd:36:33:18:bf:29:
         ad:c3:d8:8f:e8:44:bd:9f:b3:89:88:4d:6e:da:e7:4d:f4:34:
         78:3e:2d:7e:d5:d8:6b:d6:59:8e:76:ec:54:10:48:d0:50:a8:
         33:74:9b:c3:a9:dd:84:38:bc:94:41:ea:34:dc:c6:9b:1b:fd:
         93:c7:77:e9:90:14:40:02:95:fc:67:c1:30:75:12:54:04:74:
         21:74:db:07:bb:e7:1d:e3:63:81:cf:71:26:97:0f:c9:f1:9f:
         27:bd:13:92:78:4d:64:21:2e:28:30:c5:fa:8d:8c:a6:3d:2f:
         47:12:98:5a:3b:a9:cc:c5:ff:54:5c:82:9a:1f:1a:c7:2c:e8:
         02:48:a5:6b:57:bb:dc:b7:8b:2d:f5:0f:cf:e3:f5:fa:92:47:
         2b:3a:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:03 2026 by rpki-client