Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          02Ue2bnOc3f6gHPE/ePlJLeYgT7tcYc11ir3i+0wpQE=
Subject key identifier:   B2:06:99:2F:B1:6D:70:07:ED:75:A1:87:CF:73:30:8D:3A:C6:D8:C4
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       019EB733C36F2AB2F7B31F775FAF3E1C99C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          13BB
Signing time:             Thu 11 Jun 2026 15:01:23 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:23 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:23 +0000
Files and hashes:         1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: Rr4nfDpf2Tjr3Ccmm3lbxbUt6SdCPIod2AQaOHAlWgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:c3:6f:2a:b2:f7:b3:1f:77:5f:af:3e:1c:99:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Jun 11 15:01:23 2026 GMT
            Not After : Jun 12 15:01:23 2026 GMT
        Subject: CN=b206992fb16d7007ed75a187cf73308d3ac6d8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:80:d1:e9:ea:ec:df:26:7c:01:15:d8:b9:
                    40:ab:a7:d4:ef:3a:17:68:88:43:9d:9b:26:fb:4a:
                    41:8c:92:51:e1:e5:27:20:c6:fe:3f:33:34:de:86:
                    b5:9f:05:7c:4c:62:e3:09:11:3c:48:c7:e6:4a:9b:
                    8c:2c:48:aa:6d:7a:7c:93:1c:3a:62:75:40:0b:f1:
                    d2:5a:00:ae:9e:2f:71:8d:75:88:a0:88:1c:62:d6:
                    5d:ed:50:e3:41:2e:4d:33:aa:55:72:ea:92:de:30:
                    7f:b7:1f:a8:54:c9:b3:b2:56:d7:75:bc:dc:96:02:
                    5b:da:90:7f:3f:7d:cd:a8:db:f6:17:d2:4a:44:e4:
                    97:19:c0:e3:b5:33:40:72:5f:50:a6:5f:f1:c4:42:
                    0f:b2:9f:14:f5:a2:86:4d:c8:96:41:f2:37:81:d3:
                    20:eb:51:62:9a:53:31:b3:1f:4a:5e:34:85:f9:10:
                    b0:30:66:fb:1d:e8:f0:f6:08:af:99:ff:c7:99:f7:
                    5b:f5:3c:ee:8f:ee:8e:85:c7:5f:f1:c5:60:25:6e:
                    73:9c:15:a1:2a:cf:a1:8e:d0:47:10:4c:01:c6:e9:
                    ad:81:cc:e4:f5:b2:6f:99:c8:4d:8c:9b:3a:ce:db:
                    d3:36:7f:07:e6:04:1c:e1:cf:4f:05:ae:47:b1:12:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:06:99:2F:B1:6D:70:07:ED:75:A1:87:CF:73:30:8D:3A:C6:D8:C4
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:41:1f:01:bb:1e:7c:a2:3d:bf:9a:b3:87:8a:a7:03:a2:fe:
         ef:47:57:6b:e5:80:46:56:c6:1d:a8:6c:46:61:ab:27:03:54:
         ae:18:70:66:60:44:05:03:f4:ad:9a:2c:17:79:e8:87:4d:58:
         e5:1a:5d:09:d1:78:04:80:2f:46:fb:f3:50:f2:1b:f6:eb:44:
         0e:9e:9b:91:68:86:fe:57:13:24:1f:94:14:6e:5f:7b:52:d4:
         a8:d3:f6:53:41:4c:0f:4a:0b:cd:8f:84:7d:c5:ac:d6:9a:f7:
         61:fc:77:94:1c:3f:87:6d:b3:3a:e2:58:06:44:7c:24:0d:8b:
         6a:e1:9b:12:b0:b0:2b:a3:c1:58:23:43:f0:b7:47:3c:6e:8d:
         4c:81:dc:5a:b5:7c:32:7c:16:20:59:8b:99:6e:c6:a3:9a:a2:
         d0:23:9d:d7:0f:98:3b:c0:18:df:8a:ff:7e:0a:65:13:f7:37:
         3d:b5:3a:97:71:9c:bd:c7:d7:da:6e:f3:e6:43:f3:0a:95:99:
         ba:a7:81:7d:61:11:88:c6:e8:5c:7e:67:c8:f0:9e:74:17:c7:
         7d:a8:d8:15:69:c4:d1:96:66:f7:3b:3f:04:bd:6c:08:90:f4:
         13:f3:9c:41:01:f0:1c:01:dc:0b:74:db:24:39:d8:ab:a3:07:
         82:13:84:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:54 2026 by rpki-client