Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File:                     k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier:          N2/QWp48ygrA5wUziNYX60dtCnNZYepH2fjxvT3/Xsw=
Subject key identifier:   CE:5B:BB:98:36:11:DC:8D:B6:21:4B:18:A3:02:30:DA:3E:9D:7F:3A
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer:       /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial:       019EC1EDE4E518A897DF7537DE1E0A85682D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number:          072B
Signing time:             Sat 13 Jun 2026 17:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:53 +0000
Files and hashes:         1: IDdWjfqKDEDoT5owNDTMrvBAidI.roa (hash: Cun9jfihjGmUz4jQNcB3IyvoxQWP4/ccqsrygK3OW84=)
                          2: NVKj6woT-fJPaVfcr9O7EUW5AlE.roa (hash: 9pmWIL3rH5wkbK7AJiKnnwiKMYGWFVxGS8vZ/hHe2wI=)
                          3: RPKrBbNxp_9CQhYxptiK6qfqSbk.roa (hash: NUJEbh3bKvsth8HU3RWkiOC5sGfAZYVM2xyBk7b/x6I=)
                          4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: AEmWaIWa39AjVwCYC7bEMuBjw7PwqpQSFTFj54eTItM=)
                          5: rE96S2aKHeQZf0vrmquN8VX13fE.roa (hash: YrRMU2rXe7xngSe3xWiIAdBIEOfG76Z85QBRZWlUgPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:e4:e5:18:a8:97:df:75:37:de:1e:0a:85:68:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
        Validity
            Not Before: Jun 13 17:00:53 2026 GMT
            Not After : Jun 14 17:00:53 2026 GMT
        Subject: CN=ce5bbb983611dc8db6214b18a30230da3e9d7f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:f8:84:fa:21:76:79:90:9a:56:a3:26:e6:
                    09:68:4e:ef:c9:b3:f8:2d:b7:a8:af:ad:9d:f8:60:
                    66:64:8a:51:4c:b2:17:ce:32:cc:fb:74:6f:5e:c5:
                    76:ce:04:9a:6c:48:5b:b7:68:fd:55:eb:93:73:54:
                    76:3d:84:05:2b:6a:63:e1:8d:39:1d:23:c3:c9:2a:
                    24:04:b2:f7:13:ca:0a:8e:18:42:11:59:c7:d8:a5:
                    60:67:6f:40:d4:a2:29:26:29:db:e1:f3:e9:6f:52:
                    95:10:ae:ca:14:d6:68:da:68:4b:6e:6e:51:8e:7f:
                    b2:4b:fe:2b:d2:ce:84:29:55:5a:44:9e:94:fd:e0:
                    61:8b:e0:57:f7:4e:14:96:94:22:48:31:99:17:25:
                    75:23:a4:16:a5:e6:94:b7:b2:33:91:4d:89:d1:f8:
                    c4:cd:b2:8d:3f:86:03:6b:e3:46:4f:3c:11:da:53:
                    62:b9:40:e7:75:ac:30:cd:6e:14:da:51:70:17:c3:
                    b4:79:3a:b0:ae:45:05:f2:c5:70:91:77:fb:ee:da:
                    40:34:a0:1d:a4:cc:8a:38:33:ba:71:30:49:c3:f9:
                    b3:d5:50:f0:27:91:2e:cf:6f:f4:21:01:73:88:db:
                    16:ed:49:13:42:17:a7:1f:af:3e:79:6b:76:b5:e6:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:BB:98:36:11:DC:8D:B6:21:4B:18:A3:02:30:DA:3E:9D:7F:3A
            X509v3 Authority Key Identifier:
                keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:08:c3:27:f3:e2:d2:05:93:26:fb:84:fc:5f:1c:9c:db:a9:
         9c:a6:c8:b2:ba:a7:02:d7:c3:f9:96:b4:38:35:4a:37:6a:8e:
         34:75:4f:4e:d3:b0:e3:a1:e2:9d:43:2c:8a:c2:3d:c6:2d:c7:
         32:41:eb:14:24:de:95:7b:cf:2e:07:d6:6a:9a:00:36:80:41:
         1b:01:e5:52:16:61:f0:bf:39:ba:61:0f:41:15:ef:6a:3f:20:
         04:c3:29:6f:b7:e5:4e:0f:f8:f3:b1:7b:ce:42:24:86:36:77:
         b9:be:ad:3c:14:37:3a:3c:79:ec:ed:04:1c:9f:59:f0:b4:2c:
         62:9b:66:f0:d0:58:33:9c:a2:68:ab:78:41:72:0e:ab:56:c5:
         53:2f:65:50:05:0a:05:e4:c3:76:42:1f:12:1e:ba:f8:75:84:
         46:df:01:38:9c:c0:85:f0:f9:1f:51:e5:b2:2e:ae:4f:d4:c2:
         4b:c4:af:0b:86:f9:f5:ff:3f:83:41:19:ad:08:ee:26:59:0d:
         e2:b9:d3:d0:1c:2f:12:fd:19:af:24:a0:df:c9:74:95:ce:a6:
         3a:8e:8d:d1:7f:d3:99:3f:99:c4:f4:bd:be:d6:74:c0:a2:6f:
         83:dc:75:1e:c3:50:2c:5e:fb:42:ea:62:da:ea:72:ad:a3:0f:
         3e:0d:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:25 2026 by rpki-client