Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File:                     KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier:          X9gIc+FYMEGElBinrv7erHsQwLY9sa2jjlQ8Vi93/bU=
Subject key identifier:   57:1B:F7:49:CE:90:0C:B9:73:B7:06:34:B4:5D:52:8A:84:56:E5:88
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer:       /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial:       019EC036198A8B48D7F7C434040A622F31BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number:          15AB
Signing time:             Sat 13 Jun 2026 09:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:31 +0000
Files and hashes:         1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=)
                          2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=)
                          3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=)
                          4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=)
                          5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=)
                          6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=)
                          7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=)
                          8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: Qb06z3l9AneWhjWMmkP7HQDBSZ3RM5eJ9g+m3qOosow=)
                          9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=)
                          10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:19:8a:8b:48:d7:f7:c4:34:04:0a:62:2f:31:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
        Validity
            Not Before: Jun 13 09:00:31 2026 GMT
            Not After : Jun 14 09:00:31 2026 GMT
        Subject: CN=571bf749ce900cb973b70634b45d528a8456e588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:97:e1:52:77:4c:14:cb:0e:f3:1c:0b:99:
                    51:2f:ee:d4:75:8e:48:a5:14:1e:db:ce:2c:77:79:
                    9a:cd:4b:49:db:9f:c0:c1:a4:6f:31:f8:4b:c0:1b:
                    b3:75:a1:c4:95:3c:d7:32:e3:01:44:fc:09:9e:ac:
                    77:57:5f:99:7a:b3:fe:de:44:44:db:4d:fb:54:c6:
                    7b:d9:a6:38:8f:34:17:0b:bf:e3:a1:8c:0b:d2:cc:
                    dd:5b:21:51:c3:8f:f3:a6:93:ef:5d:20:ff:27:df:
                    9f:5c:18:49:a0:12:74:93:31:5f:95:ad:b3:fc:09:
                    1d:46:14:15:79:31:94:47:cd:25:30:64:80:9c:d4:
                    ec:82:a3:62:c7:3b:92:6f:63:f4:4e:e6:04:64:ec:
                    78:69:ef:00:5f:07:a1:91:5c:07:72:2c:b3:28:c7:
                    48:c1:0d:b1:08:e6:06:9d:f9:d0:ed:be:ba:30:da:
                    ee:fe:cb:28:97:3f:63:f9:c2:3f:ac:24:23:b5:1a:
                    09:38:66:86:67:ec:aa:3a:1f:51:f0:d0:63:c6:62:
                    76:cc:db:33:fb:a6:c0:ee:4b:4d:b6:a6:06:90:dd:
                    73:c4:ed:d9:0d:86:e1:85:84:7a:91:49:01:52:7f:
                    d8:cc:22:60:2a:b6:8c:26:72:2e:52:74:45:dc:78:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:F7:49:CE:90:0C:B9:73:B7:06:34:B4:5D:52:8A:84:56:E5:88
            X509v3 Authority Key Identifier:
                keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:47:d5:2a:64:aa:53:c0:56:71:8d:c9:1b:a1:67:4e:e8:28:
         1d:88:f8:de:5b:e9:3e:23:d2:11:d4:0b:46:44:24:9e:a2:59:
         84:23:d8:c3:9b:26:10:3a:e7:65:6a:2e:2c:9f:59:eb:a1:bb:
         ca:6f:14:f4:3d:cd:3e:27:f8:0a:41:9e:60:f5:ff:cc:71:1a:
         c6:3f:d1:dd:37:f0:d3:fb:ca:4b:e9:96:0e:3e:25:16:58:59:
         f9:ae:1c:e1:1a:b8:96:b3:a1:c1:58:ad:27:84:69:5f:24:d5:
         3f:bf:bb:fd:b2:b5:48:bc:e8:90:fc:f4:d9:bb:26:ac:b1:ed:
         c9:3b:1f:fd:23:f7:ef:35:34:c9:42:eb:9b:9e:eb:38:c3:36:
         c5:60:f3:1e:ec:41:38:16:21:e5:10:c1:4d:ed:aa:9f:98:98:
         f9:94:d0:37:c2:60:0a:50:2f:4b:61:14:e2:4b:5d:54:98:51:
         4e:0c:8d:53:c1:41:02:26:c5:27:ac:1c:22:21:77:19:28:da:
         3d:43:6f:a8:ab:28:b6:3a:31:65:12:30:9e:a6:ae:69:00:39:
         1c:70:40:42:5c:64:69:b8:f6:2d:02:2a:38:62:89:cd:8d:d2:
         ff:c7:04:f8:3a:6f:16:f3:62:d1:b6:9e:12:cd:4e:63:28:95:
         1f:84:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:06:31 2026 by rpki-client