Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          qZdC8hw9xaLlIClXH9F0HUQEeM/jFXfba445atUl0gw=
Subject key identifier:   05:28:BF:28:97:93:B1:56:19:D5:BB:D5:6A:B0:24:DA:C4:02:32:50
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       019EC1B6CB624CBD54F1ED7D1281D5436D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          0B13
Signing time:             Sat 13 Jun 2026 16:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:42 +0000
Files and hashes:         1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: hUZm3e22f5oA+rXcidOeOMt1waH5u6qP4tdwEZoEuKc=)
                          2: o2oMp4w_9TGCM9aisNXx6hIf0dE.roa (hash: 5zj6ry4dUTAYdyPOXRmxJv5IwbCW/zphAyYpf0E3ouc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:cb:62:4c:bd:54:f1:ed:7d:12:81:d5:43:6d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: Jun 13 16:00:42 2026 GMT
            Not After : Jun 14 16:00:42 2026 GMT
        Subject: CN=0528bf289793b15619d5bbd56ab024dac4023250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:30:74:d7:66:69:85:c1:c2:b0:61:d1:6a:
                    72:0d:dc:4b:32:3f:10:d9:83:b2:f3:09:eb:1b:3b:
                    25:e1:94:38:55:53:a8:12:dc:b2:89:70:b3:f1:29:
                    17:d1:7f:1c:c3:eb:05:db:db:15:2d:a8:c5:e9:9e:
                    a1:a6:de:ae:2a:db:e4:aa:66:21:f5:ed:82:11:e8:
                    31:30:79:fa:71:74:cc:ec:3d:5b:e6:ef:46:3c:2d:
                    1f:1e:41:37:96:93:79:33:04:16:25:d9:9e:03:58:
                    36:59:bd:54:a9:7d:64:f1:49:50:fd:1c:4a:c5:ec:
                    b1:f7:89:59:fc:8a:20:bf:48:51:f3:0a:0a:42:27:
                    b4:44:0c:c6:fa:1e:1e:9b:84:3d:fa:ae:39:f4:fb:
                    56:43:11:76:27:f6:30:d4:9e:ae:f2:b4:bf:f8:46:
                    70:2d:c8:85:28:a6:3c:69:6a:8f:0c:54:fe:29:3a:
                    d1:34:9c:53:6a:03:21:58:a7:71:43:a3:47:25:75:
                    c9:98:bf:93:60:64:21:df:6b:53:e6:62:45:66:c4:
                    e6:fa:b0:5e:19:93:7e:ab:b6:45:50:8b:83:a9:e8:
                    bc:10:bb:51:7f:0c:e0:08:b2:0b:c8:e5:fc:e3:c4:
                    22:7c:e1:2e:78:82:75:e3:27:46:a4:c9:8c:1c:d7:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:BF:28:97:93:B1:56:19:D5:BB:D5:6A:B0:24:DA:C4:02:32:50
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:a1:fe:b1:f9:60:d6:26:7c:16:f6:bc:42:fb:9a:52:27:
         be:7f:ca:8b:8a:6a:8b:5b:69:c4:2f:4a:53:8b:2f:f6:53:12:
         52:2f:6b:32:a2:5d:76:27:6c:4e:99:fc:4f:41:38:a2:e9:12:
         af:33:65:1b:01:1c:47:d7:6e:52:c8:19:a9:b6:8b:49:ea:36:
         f4:5f:e1:97:6e:f9:2a:7e:0f:01:3e:35:33:3f:60:b3:88:15:
         bf:c5:aa:68:f1:98:37:a5:8d:5c:5a:62:30:15:af:d6:4a:5a:
         b4:ff:af:6f:54:21:fd:78:23:6b:dd:d6:47:de:08:02:8d:b2:
         6d:94:ba:6a:de:54:58:30:e7:03:df:5a:c0:d7:f5:ef:08:94:
         10:ea:6f:81:9d:71:2b:f0:30:c8:5e:ea:46:b0:b8:c7:4c:ce:
         1b:8b:24:da:e9:57:4c:4b:58:ac:72:06:49:ce:b7:5f:88:53:
         e8:aa:5c:50:bb:f4:54:0e:c0:95:bf:6b:5a:68:0e:a7:93:cc:
         a6:f3:9c:2e:48:78:68:e3:0b:bb:f7:a9:24:94:b3:4e:ba:8a:
         30:3d:a4:4f:fd:2e:b0:da:58:da:01:9a:f0:d3:96:77:ee:96:
         ec:c6:09:13:61:59:52:5d:8e:82:63:73:ef:e5:bb:10:30:d6:
         33:c5:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:00 2026 by rpki-client