Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File:                     aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier:          HB7sr0qBz0YLsmoJzYXL/Y1y9de9yoDmh2k+4ZPF2VI=
Subject key identifier:   93:4F:7B:CA:8D:21:E8:04:3C:1D:7F:14:49:75:63:3B:AD:F6:03:7D
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer:       /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial:       019EB80EC75F760700491CF9B9B4299F4866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number:          13B8
Signing time:             Thu 11 Jun 2026 19:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:36 +0000
Files and hashes:         1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: a3r+ulUZxT4bCSx6kGF4VGOoPusdvWv9MoFTh78PCkM=)
                          2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:c7:5f:76:07:00:49:1c:f9:b9:b4:29:9f:48:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
        Validity
            Not Before: Jun 11 19:00:36 2026 GMT
            Not After : Jun 12 19:00:36 2026 GMT
        Subject: CN=934f7bca8d21e8043c1d7f144975633badf6037d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:f4:5e:66:47:ce:64:66:aa:9f:50:e2:3f:
                    0b:fa:71:6c:3c:84:66:38:4f:7d:5e:a6:d1:ab:fc:
                    f0:c1:81:c0:42:b5:b1:c0:57:4b:df:d6:6c:80:ff:
                    4e:34:70:25:9d:83:c4:6d:2f:c7:fc:ec:d8:77:5d:
                    43:1e:e8:d5:4c:1a:93:eb:ff:41:02:c5:88:e4:02:
                    2f:1c:8d:c8:12:af:3d:ed:de:5f:f4:71:5b:cb:cc:
                    f2:f4:52:bf:93:c7:44:29:c4:76:b1:e6:76:4a:e1:
                    54:e8:11:04:87:da:f7:58:01:7f:53:41:95:35:c7:
                    e5:1c:8b:4b:c8:8f:a0:46:65:dc:85:51:27:85:b1:
                    7d:91:e5:ec:b7:93:e8:af:f4:13:e3:d0:12:97:2d:
                    a9:8f:03:f7:fa:ee:d6:c4:de:6c:3c:b4:03:82:0b:
                    b2:bb:8b:8f:c8:17:1b:01:ba:a7:fa:64:9c:00:a1:
                    c9:ea:90:f5:dc:b2:e1:e0:9f:5d:6e:fd:18:eb:57:
                    f0:67:e4:9f:f3:94:6b:80:96:8a:37:32:c7:60:70:
                    6d:35:cc:ec:1e:d9:ce:72:37:73:44:92:27:5c:66:
                    d9:46:0f:83:56:77:ee:41:27:dc:73:14:7b:1a:6d:
                    1a:01:54:25:1c:a3:4d:13:9f:4e:9e:e1:13:d4:77:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:7B:CA:8D:21:E8:04:3C:1D:7F:14:49:75:63:3B:AD:F6:03:7D
            X509v3 Authority Key Identifier:
                keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:eb:5d:1d:91:1e:12:7b:b6:c7:40:2f:9f:b1:e6:73:7f:e7:
         10:89:18:2b:ce:f4:2f:de:a8:2b:20:8d:67:0c:66:5a:26:bf:
         12:e2:3b:69:71:c0:04:96:23:b1:43:77:aa:b4:a9:82:5d:37:
         b2:e6:61:35:9d:cf:af:c2:1c:a7:49:2d:58:c8:a9:e2:db:4f:
         8b:c0:a8:14:50:c1:6c:bf:ef:4a:b0:9d:3a:84:ba:29:8e:0b:
         e4:03:82:98:ac:26:0a:e2:ce:ee:cf:dd:38:35:2e:cb:c9:9a:
         ad:61:8b:4a:3f:3b:4e:65:f5:bd:61:2d:7e:b9:fd:9d:db:73:
         99:90:ac:86:f7:4a:ad:d2:1c:0e:78:e7:24:85:c1:3c:a2:90:
         07:11:74:24:5b:30:d9:d3:14:46:d8:39:4a:8e:ac:4b:47:3d:
         30:80:df:27:12:fd:38:67:68:ea:45:70:73:a7:53:6a:f5:93:
         92:8f:76:85:cf:db:52:e5:33:a8:ea:59:34:cd:2e:7f:98:ad:
         38:4e:a2:3f:58:4f:8c:dd:89:6e:a6:d9:f8:63:c9:42:8a:fe:
         1d:e9:da:bc:09:11:d9:e8:14:1e:36:a8:cc:91:24:3b:9d:a0:
         33:05:8c:77:a6:f8:3f:72:42:ac:b7:7e:41:4e:37:62:46:65:
         07:81:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:13 2026 by rpki-client