Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File:                     ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier:          4al4KC6Z41iTBrTnYL+sohhiXSjXPVUxcwUwa+vrvL0=
Subject key identifier:   E4:C2:4B:5A:0A:A9:0F:05:A7:AE:9C:9B:73:DB:C6:33:24:37:9E:29
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer:       /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial:       019EB76A5943407E66E986692F9A74E1B8A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number:          02D0
Signing time:             Thu 11 Jun 2026 16:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:00 +0000
Files and hashes:         1: HoQ127PMQ46C1afRVUl38lwV-mc.roa (hash: EPImSMK5AEzmb20myPwr0VhWDnK9rma59iv9yy2Zj0Y=)
                          2: Rd9sIl0CXtF8tBOprorczvsYDgQ.roa (hash: L9ppBBkp5ghkzaP7yWv1ijBUGH4E834HKDyah6eiGGs=)
                          3: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: QzsOWcdENSc1FEbYxOFDbncCotbSNgc5Aa5tbyUapl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:59:43:40:7e:66:e9:86:69:2f:9a:74:e1:b8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
        Validity
            Not Before: Jun 11 16:01:00 2026 GMT
            Not After : Jun 12 16:01:00 2026 GMT
        Subject: CN=e4c24b5a0aa90f05a7ae9c9b73dbc63324379e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:67:3b:b1:d8:1e:34:d4:97:86:b9:d1:0c:
                    2e:10:c3:b2:cb:18:e2:82:09:04:dc:01:e7:2f:16:
                    c6:16:a8:47:79:7d:62:e1:e2:71:44:e0:24:13:16:
                    eb:15:bf:53:25:d6:22:1b:fa:64:ba:ec:86:ac:fe:
                    98:84:9b:40:98:13:ce:c7:d1:ae:4f:d4:52:13:4c:
                    c9:ac:2a:f3:a7:74:84:7c:80:75:56:f9:22:77:7f:
                    72:bb:bd:da:1c:d1:e5:9f:e9:df:c9:a9:69:0e:a6:
                    8e:1c:ae:92:69:4b:17:f1:62:a4:de:4d:87:9c:0b:
                    c8:8b:53:d9:2e:f9:ba:36:75:2d:6a:ea:53:9b:56:
                    57:7c:f9:2a:95:59:72:42:ba:e1:05:71:bf:e6:9d:
                    31:d3:ed:1b:16:56:32:b4:e1:25:05:81:9b:ec:a6:
                    02:a2:eb:9b:11:da:e1:5b:7c:e7:a7:77:18:4d:bf:
                    b9:54:c5:d3:4d:8d:3a:96:6c:a9:19:cd:dc:87:f6:
                    10:a2:b4:23:aa:ea:2a:48:95:4e:44:32:23:38:52:
                    36:7d:51:93:bc:7f:b1:0c:97:69:6e:16:a7:02:f4:
                    6b:98:1e:56:21:88:bd:f7:b8:fe:c3:83:c4:49:5c:
                    a9:75:84:a3:82:3f:7d:39:1e:83:b7:a8:8f:69:8b:
                    4d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:4B:5A:0A:A9:0F:05:A7:AE:9C:9B:73:DB:C6:33:24:37:9E:29
            X509v3 Authority Key Identifier:
                keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:f4:46:95:54:bf:2c:10:6a:5b:c1:7e:12:bf:9a:9e:2d:
         b6:33:d7:80:77:1d:1e:61:01:b7:00:72:77:6a:c7:81:d6:19:
         92:df:d0:1c:83:45:e9:07:57:1a:46:ce:fe:6a:eb:ca:42:63:
         ea:d3:93:e4:b5:90:01:3e:36:42:30:51:03:5d:f3:17:d7:e7:
         86:27:0f:3d:b8:0b:db:58:15:71:29:21:95:d9:3a:4c:c5:93:
         bb:91:10:3d:51:e6:2d:58:00:d4:28:e8:a5:33:df:a5:99:cb:
         5c:8c:58:52:00:ba:cc:13:34:fe:5a:c4:c4:f3:d8:11:a2:bc:
         66:a0:9b:76:1a:e7:a4:d1:eb:c4:12:8d:47:75:82:21:f6:c7:
         07:06:1b:75:af:b4:02:cb:62:8e:b9:a9:19:87:94:7c:db:9b:
         a1:04:60:aa:21:ad:82:d0:b3:4e:fa:6b:03:c5:25:01:27:24:
         a7:cc:41:4a:98:c4:e9:84:e2:96:91:42:ae:b4:a0:05:fc:1a:
         20:9e:eb:ba:a2:8c:e0:bf:18:67:b0:70:06:50:17:9c:21:be:
         e8:64:55:15:57:16:08:1a:02:44:f8:e1:48:e7:ab:09:18:0f:
         49:b9:e1:94:0f:5b:dc:74:85:f6:23:3b:04:ae:d4:a4:77:83:
         a6:91:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:57:44 2026 by rpki-client