Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File:                     9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier:          1hFj0+wzGmEFLja2gmmaxLaRUvgAqpdNvhWRw1PIBWE=
Subject key identifier:   F2:E6:F7:5E:CC:91:3F:84:95:96:02:C0:C5:32:2C:A8:0D:D4:CF:C0
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer:       /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial:       019EBE7EB4C308D88BFBEFB97D86B8FE3E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number:          1460
Signing time:             Sat 13 Jun 2026 01:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:35 +0000
Files and hashes:         1: 0mgkR8Oatppf6KwkGwCdocguoA0.roa (hash: xBRpWZu5TH9MlFJBVgXYiAXfSpweoxy68K+P+8afR20=)
                          2: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: k4Xp6XfYjFD0tkL8wnIsyHr14IwUyXLiwOcETjWE+V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:b4:c3:08:d8:8b:fb:ef:b9:7d:86:b8:fe:3e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
        Validity
            Not Before: Jun 13 01:00:35 2026 GMT
            Not After : Jun 14 01:00:35 2026 GMT
        Subject: CN=f2e6f75ecc913f84959602c0c5322ca80dd4cfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:1f:fa:4d:3a:35:b9:69:8b:d9:44:46:66:
                    87:a3:16:f5:78:7c:a2:6e:11:1e:0e:f1:f9:e7:62:
                    4b:82:a0:52:b5:9e:e7:55:44:3e:2b:6a:85:e9:4d:
                    9a:29:aa:c0:37:d8:a4:0d:fb:6d:bf:e1:91:7a:06:
                    8d:ed:fe:7f:ca:55:95:01:77:97:d9:a6:91:6c:6c:
                    b3:bc:f9:12:3b:0a:42:5e:69:2c:14:ab:9d:f9:68:
                    db:dc:ce:8f:29:a0:da:f4:9d:0f:c6:5c:d7:d0:a5:
                    36:68:91:20:91:cb:66:6d:b5:5a:99:22:0d:f6:15:
                    10:ff:dc:79:c2:fb:00:51:bc:52:28:e1:39:af:ba:
                    80:e0:34:91:d1:3f:90:78:2b:94:ef:e7:a4:95:4c:
                    74:21:e5:84:b2:ce:4a:dd:14:4a:06:03:1e:c8:bf:
                    46:38:61:6b:42:31:42:e4:b4:b8:61:44:fc:ca:12:
                    2e:38:d7:1a:7f:3b:0f:3e:de:1f:ca:16:00:0d:2a:
                    9f:e0:9e:36:61:da:72:41:a2:4f:59:83:74:b0:5b:
                    97:12:bc:b7:46:7e:80:a3:b9:a0:6a:5c:ee:13:f6:
                    98:6c:a4:0d:37:11:c3:cb:bc:88:b4:90:83:e2:0b:
                    a4:59:40:cc:8c:c6:23:cd:ae:e0:16:c4:64:cf:b6:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E6:F7:5E:CC:91:3F:84:95:96:02:C0:C5:32:2C:A8:0D:D4:CF:C0
            X509v3 Authority Key Identifier:
                keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:59:0f:40:09:9e:09:5c:b6:79:3b:0d:0b:4d:31:eb:fa:
         19:1f:23:c2:a2:64:db:a3:f5:90:59:c0:6d:79:67:d4:80:e4:
         a0:c9:d7:21:80:fa:d3:3a:5b:15:4f:e4:dd:24:6a:0f:93:de:
         05:03:0d:bc:40:fd:83:1d:03:ca:35:04:7e:9f:c5:fd:ac:60:
         71:52:90:1d:f7:d9:78:c7:05:24:50:04:4e:3e:8b:4b:75:3c:
         e8:de:41:8a:87:f2:f8:79:da:2a:fd:a9:e1:a4:93:85:ca:b3:
         bf:62:4b:f7:bf:bb:c5:3c:d5:70:33:91:5f:f4:cf:df:ac:11:
         77:51:17:87:1b:d7:4d:9e:58:21:60:7e:c5:df:c4:9b:b6:ba:
         ea:20:36:0d:2d:e8:c6:5e:5e:c8:d5:25:8a:57:2d:c9:8a:1b:
         bb:67:97:16:d2:44:fb:48:a9:8a:f8:3f:4d:de:73:4b:ac:5c:
         7b:93:f8:cc:e2:84:7a:28:cd:08:11:51:d4:c6:70:09:59:1b:
         40:f6:ee:88:f7:f4:a2:4d:d6:89:bb:23:dd:a2:c2:87:5a:f7:
         20:dd:c1:01:37:fa:6b:b4:ae:ad:39:98:43:10:99:6a:e7:49:
         35:ee:e2:fc:14:fb:f4:b6:2a:77:bc:00:5c:ef:3e:da:9e:7e:
         c7:82:c8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:45 2026 by rpki-client