Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File:                     xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier:          8JYVdxzSEx46CscrYTRHzQZ95XOvMY5YKWm1P+Y5c0M=
Subject key identifier:   CB:F5:32:8C:9B:C3:58:9A:C3:4A:20:9E:93:F4:5F:E3:AC:47:BD:48
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer:       /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial:       019EC3006127A1F304E2FD01EDE5475332CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number:          01D1
Signing time:             Sat 13 Jun 2026 22:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:42 +0000
Files and hashes:         1: 7kloanVHOYaHRlhEsLAGIVGi_rY.asa (hash: 8NXppGEeLQlW5S79hnELA4YUQ5d6IwXskVcbthg2tt4=)
                          2: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
                          3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: IG+cgcW2cbNYYshfAoetCRoyV55UtInVclebuE4uERY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:61:27:a1:f3:04:e2:fd:01:ed:e5:47:53:32:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
        Validity
            Not Before: Jun 13 22:00:42 2026 GMT
            Not After : Jun 14 22:00:42 2026 GMT
        Subject: CN=cbf5328c9bc3589ac34a209e93f45fe3ac47bd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:0f:ee:a8:1b:ea:9d:4d:fb:98:a6:a3:ab:
                    f1:cf:52:b3:7a:73:f2:89:e5:93:8e:b2:97:c6:05:
                    5c:ce:fb:7f:bc:2e:db:89:8a:64:a1:b0:07:7f:49:
                    c1:f8:68:30:36:e4:2e:aa:46:85:28:a3:2c:a6:e9:
                    ea:d6:16:aa:63:15:d8:67:58:31:ef:9b:20:9e:f2:
                    10:cd:dd:70:15:99:d8:88:e9:08:7d:8a:83:16:11:
                    fe:57:2f:cf:b5:aa:e2:ec:92:c0:a3:07:51:c1:04:
                    d6:95:4d:1a:82:ec:d5:bf:88:d4:55:b7:e8:85:d1:
                    0c:30:b2:25:8b:54:ab:70:58:8f:da:6e:3d:13:e9:
                    28:93:6d:6a:6a:cc:73:74:3d:a9:fc:fc:4b:ab:dd:
                    a8:a5:ee:77:08:72:d8:81:7c:ef:86:58:02:c9:01:
                    b2:5e:7f:f8:60:ef:9d:ea:e8:28:ba:31:73:9f:75:
                    25:1c:1b:2f:a2:3f:6b:c7:06:16:8e:ba:6e:5e:88:
                    fa:4e:2f:e1:54:98:8f:3f:0c:90:68:4d:53:92:66:
                    65:30:35:0c:49:3e:f0:c1:c0:d8:3d:4f:37:44:d0:
                    71:fc:61:b3:73:62:41:74:22:56:3f:fd:e8:62:bc:
                    42:f5:2c:ed:63:2e:79:45:45:5b:3e:cd:09:00:b4:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:32:8C:9B:C3:58:9A:C3:4A:20:9E:93:F4:5F:E3:AC:47:BD:48
            X509v3 Authority Key Identifier:
                keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e2:fb:22:fb:4c:8c:30:49:be:33:4f:48:af:86:07:01:8d:
         4f:87:06:18:2c:73:b1:89:94:c5:fc:d4:a4:ac:33:f2:23:48:
         ff:5f:d5:90:7f:b5:59:37:f7:5a:7a:99:08:43:87:39:3b:1d:
         a3:37:3b:2d:19:a6:35:98:b4:16:3b:9e:6a:42:38:7d:fe:14:
         fc:97:31:fd:7c:b3:5d:8d:9d:0e:86:23:0f:48:ee:f4:88:a8:
         53:7f:29:a4:62:91:ac:e6:3a:d7:6e:f4:1b:6f:cd:e8:e1:19:
         30:4f:86:3d:03:b9:08:34:31:0b:81:13:75:d6:e0:19:6b:a9:
         28:01:55:16:ba:0d:a2:07:83:e2:91:5e:d9:8f:23:d6:27:48:
         48:b6:9d:24:2c:47:2d:48:d3:b7:ad:bd:ff:ec:9f:0c:ef:88:
         f5:24:32:15:49:2f:5b:bf:69:5c:d4:f4:82:02:55:40:4a:27:
         4a:a5:7d:64:01:a8:58:4c:df:d1:6b:4b:1f:36:c8:51:4a:e7:
         73:fb:5d:30:2b:23:d6:b5:c2:5b:f7:49:15:87:45:6a:66:e9:
         12:0d:23:5b:c9:c4:d2:12:78:37:3f:aa:ce:85:c7:71:0b:ab:
         31:e4:80:6a:14:43:bb:33:88:90:50:c8:da:cb:28:75:0c:62:
         7a:81:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:36 2026 by rpki-client