Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File:                     KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier:          CDrEHFz2JCgg5RfL3XUU2ilfrsOtuwrN6HZGr/AWeOQ=
Subject key identifier:   7D:61:F0:EB:56:5F:DD:93:53:74:7F:A3:9C:BA:08:1B:F8:66:01:47
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer:       /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial:       019ED3BD336D2E6A40A1034AC676DC796840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number:          1270
Signing time:             Wed 17 Jun 2026 04:00:52 +0000
Manifest this update:     Wed 17 Jun 2026 04:00:52 +0000
Manifest next update:     Thu 18 Jun 2026 04:00:52 +0000
Files and hashes:         1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: djWT9eIPg82FBIwPS3AS7wWp58hElsOLL0z1zdtC5RE=)
                          2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:33:6d:2e:6a:40:a1:03:4a:c6:76:dc:79:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
        Validity
            Not Before: Jun 17 04:00:52 2026 GMT
            Not After : Jun 18 04:00:52 2026 GMT
        Subject: CN=7d61f0eb565fdd9353747fa39cba081bf8660147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:dc:b5:79:7e:e6:cd:21:b4:4a:c6:7a:23:
                    3f:01:cf:45:71:15:fe:88:d6:a7:ae:cd:40:79:ca:
                    b0:22:99:20:5f:1a:88:43:e2:99:48:d3:e0:f5:37:
                    24:dc:1e:d3:c3:38:6a:61:f9:44:f8:21:0b:74:40:
                    29:ea:f3:95:7b:94:38:03:ea:10:4e:ac:df:5b:08:
                    c0:3d:49:7a:29:f2:af:5f:95:c7:32:32:39:5c:87:
                    8d:9b:e9:38:b7:5f:61:25:29:5a:a0:3f:16:67:84:
                    e0:e6:9a:1b:21:8b:b3:78:a7:05:d4:8b:e2:97:72:
                    75:ba:d7:ae:de:c2:4f:b1:f7:56:7d:01:15:95:a1:
                    5c:20:cf:5d:37:e1:c8:52:c0:c0:e1:24:0e:fe:1b:
                    a0:a6:4b:08:e5:b5:0a:7b:2b:5c:fb:54:67:83:35:
                    c6:cf:e8:ad:66:e0:96:fd:60:e7:e1:f5:36:c8:34:
                    c0:d1:94:be:a5:61:5e:21:ca:71:50:7b:72:1a:2f:
                    32:de:a9:b1:41:ef:db:f1:eb:60:ac:04:0f:ce:69:
                    52:8b:59:76:db:9e:ea:6f:3c:30:30:35:b3:57:2b:
                    75:5a:55:04:78:d8:f0:8e:ca:42:c0:f3:ac:ea:89:
                    7c:87:93:3b:a2:7f:2d:5d:fc:18:c0:5d:8a:14:9a:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:61:F0:EB:56:5F:DD:93:53:74:7F:A3:9C:BA:08:1B:F8:66:01:47
            X509v3 Authority Key Identifier:
                keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b6:7b:79:da:03:0a:4c:08:78:ba:95:2e:33:16:5f:53:5a:
         04:1d:b7:26:22:8b:78:30:99:04:27:92:ee:4e:b1:7b:1d:1c:
         a2:bf:0b:28:79:14:1a:5b:76:8f:fd:00:2d:b1:c1:dd:07:58:
         7e:c1:c8:52:d4:32:18:11:fa:ef:58:bb:23:d4:7e:b9:28:69:
         6f:cb:38:8a:1a:b9:d5:5e:cc:de:bc:49:5e:09:3d:6b:11:45:
         e5:cb:72:55:44:46:5f:91:0e:c2:a2:c7:36:3f:70:c5:3f:c1:
         c9:62:ac:d6:7e:2f:ac:94:eb:df:89:66:71:91:b6:0a:48:2f:
         1c:3a:d3:e4:60:3e:db:91:b9:40:2f:fd:51:93:50:80:68:b9:
         ba:fd:b3:60:b4:82:12:99:1e:73:41:31:ed:2e:94:7b:32:8e:
         4f:64:6c:60:8f:3c:97:f0:70:28:b9:32:f7:ac:33:39:5a:f6:
         fb:bc:55:30:d1:7b:5f:33:68:bc:13:d1:7c:50:cb:43:41:b1:
         a0:1c:03:84:1e:e1:ee:b2:66:1d:96:f8:ea:e8:7b:84:9c:34:
         02:aa:3b:55:83:50:77:ea:9e:b8:5e:18:f4:af:c8:1c:e4:62:
         e8:1e:92:3b:ed:28:c1:10:49:88:cf:a0:5c:0e:fe:66:cf:d6:
         a0:c9:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:06:24 2026 by rpki-client