Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File:                     E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier:          b8ASg4QomEr7mNQ3fXo0dF5w2n8wMBUJFfRX5lbPytE=
Subject key identifier:   9F:4C:B2:8D:8F:0A:DC:C7:5B:A8:A4:40:23:D6:D3:FB:F3:54:39:07
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer:       /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial:       019EBFC8FDEB9ED7BA58BD0AEF138D1C19A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number:          0F86
Signing time:             Sat 13 Jun 2026 07:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:20 +0000
Files and hashes:         1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: eDus71m5WEYNkt9wSl4dBx7cexX5FOCIDvuNxgFr3m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:fd:eb:9e:d7:ba:58:bd:0a:ef:13:8d:1c:19:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dde69abccc65d08688ca83542633a219293227
        Validity
            Not Before: Jun 13 07:01:20 2026 GMT
            Not After : Jun 14 07:01:20 2026 GMT
        Subject: CN=9f4cb28d8f0adcc75ba8a44023d6d3fbf3543907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:2d:3d:98:39:64:09:7d:22:e5:f6:3d:4d:
                    87:91:29:77:37:e9:23:9d:23:3a:43:62:50:e1:0a:
                    73:41:ec:55:50:d9:03:78:06:bb:c5:c4:7e:4e:2b:
                    96:22:24:ab:56:df:5a:db:bf:15:10:b4:9e:70:94:
                    8c:0d:75:1f:ed:b0:4e:a1:72:44:60:02:8c:07:ad:
                    83:83:b4:fa:69:7a:28:a9:62:df:16:28:3c:45:b5:
                    e7:43:35:14:da:cc:91:fa:cd:18:74:07:55:2b:e5:
                    10:99:b1:9d:b7:37:3d:1b:50:ce:1a:e0:c7:b4:ea:
                    fa:f3:67:2c:f7:08:04:f0:f4:dd:ad:a0:e1:bf:a4:
                    2c:e1:ab:0d:24:98:c7:93:13:a5:84:21:7d:f4:72:
                    7a:3e:c0:f7:e0:68:de:60:b5:d0:04:17:41:96:0e:
                    98:8e:49:55:d2:8d:75:c3:2f:f1:db:06:89:a3:7c:
                    18:71:dd:53:89:f7:88:f2:27:10:c1:36:09:df:d9:
                    50:e9:5d:29:31:95:e6:6e:61:b9:9a:38:0d:de:b9:
                    63:ae:dc:b4:1c:94:6c:d9:5c:65:70:fb:2a:28:34:
                    08:15:31:a7:d5:93:8b:16:1b:87:4c:e9:58:16:b5:
                    70:16:d3:4e:83:d4:60:e7:fa:d7:fa:86:54:c3:3a:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4C:B2:8D:8F:0A:DC:C7:5B:A8:A4:40:23:D6:D3:FB:F3:54:39:07
            X509v3 Authority Key Identifier:
                keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:4a:e3:c7:8b:ba:da:26:a9:2b:2a:a1:72:5a:29:c3:e4:
         1c:dc:f5:40:fd:eb:14:09:71:18:c0:90:58:4f:b1:0c:0d:35:
         1c:25:79:e3:ee:61:c6:03:25:56:69:2c:d2:a4:9a:d6:ad:c5:
         49:4d:5a:d7:19:d5:9f:2b:22:8d:fb:df:66:c5:ff:3d:f9:f4:
         64:49:26:c2:cf:74:ef:63:d9:50:4c:a3:a8:11:d6:a2:aa:61:
         70:cd:d1:c9:9b:fe:b1:fb:b4:b6:7c:3d:1b:29:77:c4:63:94:
         c7:ff:fd:a2:1d:65:bd:5a:8b:36:23:46:b7:13:d2:77:55:1f:
         08:18:8a:f7:ab:ef:d6:8f:86:8d:71:f2:e5:6f:04:f1:b4:b3:
         50:cf:22:88:9e:3a:11:9a:4c:80:67:0c:cb:8e:bf:4b:df:cd:
         bf:bf:3f:51:0a:a1:eb:6f:c5:69:28:61:be:45:89:d1:e1:8b:
         b1:d3:f3:b6:e1:12:b8:43:ec:91:4d:9c:75:45:87:2a:47:1b:
         a5:f6:e1:f2:1f:a5:9f:1c:de:20:0e:6b:55:fa:39:3e:db:45:
         6a:6a:8e:da:c9:53:46:c9:26:3f:67:e3:92:10:ac:1a:fd:18:
         fc:f4:16:4b:32:8a:5e:62:b8:0b:ad:35:b9:5e:2e:78:64:44:
         69:79:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:46 2026 by rpki-client