Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File:                     mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier:          oD4997bTYKu+gOi/L/IDxg5eyfHI9KlxGR8txV9BGKY=
Subject key identifier:   E9:BA:F0:56:B4:CC:35:FF:2B:41:49:08:DA:6A:0F:60:E9:9F:5D:9B
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer:       /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial:       019EFB6F8F9B0BF61240BB40243659B9D20A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number:          1294
Signing time:             Wed 24 Jun 2026 21:00:52 +0000
Manifest this update:     Wed 24 Jun 2026 21:00:52 +0000
Manifest next update:     Thu 25 Jun 2026 21:00:52 +0000
Files and hashes:         1: 4NPNpEtggb71IQN4rfD17PgfnPM.roa (hash: Dw4w2HoXn5ATp16MhOhkA0aUdFXm+zKXZvSVq0b6J9o=)
                          2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: XAU+HpBJVLACwY0MXQbsnWID2/Qqt2q6NK8QMBhCddQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 19:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:6f:8f:9b:0b:f6:12:40:bb:40:24:36:59:b9:d2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
        Validity
            Not Before: Jun 24 21:00:52 2026 GMT
            Not After : Jun 25 21:00:52 2026 GMT
        Subject: CN=e9baf056b4cc35ff2b414908da6a0f60e99f5d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:d3:83:84:1c:56:f1:da:a1:3d:c2:8f:ba:
                    bb:0e:67:0f:6b:63:8f:02:e0:96:40:25:a3:31:fe:
                    10:e8:ef:a9:6b:0d:b8:40:cc:27:f1:f3:83:c7:c2:
                    1f:b6:24:d0:82:9a:a4:d9:7c:fd:56:59:bf:47:38:
                    55:9b:b9:0b:e5:ec:e6:12:77:24:7d:4d:dd:5d:dd:
                    11:7b:e7:66:ee:10:78:29:a9:69:3a:ef:51:25:ba:
                    05:a9:be:a5:d9:8d:b2:b8:02:d5:0d:be:32:83:8f:
                    d4:94:f5:92:af:7b:67:35:b6:13:1c:b7:56:07:65:
                    d7:24:cd:91:5f:31:72:36:d3:9e:60:09:62:f5:3f:
                    ee:35:be:ad:c6:e0:81:a7:9b:d6:79:38:17:c4:27:
                    00:82:e5:90:4e:e2:0b:bc:20:c0:a8:90:36:3c:81:
                    b3:d3:1b:fb:8f:3b:25:40:44:7a:22:76:be:26:92:
                    b4:ac:d1:82:2a:1a:9d:56:71:3b:69:2b:c1:38:0b:
                    1c:99:1b:5e:0e:72:5c:d5:49:ce:b7:bc:40:7d:75:
                    c9:1d:b3:b8:cc:23:69:a1:cf:2e:c8:75:bb:80:de:
                    2d:cf:b6:3b:15:5c:1f:6f:fb:ad:89:9d:83:4d:9e:
                    54:fa:cb:c5:7b:32:59:88:32:4c:22:ed:6e:3b:7c:
                    82:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:F0:56:B4:CC:35:FF:2B:41:49:08:DA:6A:0F:60:E9:9F:5D:9B
            X509v3 Authority Key Identifier:
                keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:91:56:3d:e1:03:56:26:74:47:ac:5f:c0:01:d0:24:e2:94:
         8f:9e:47:59:2a:23:9a:50:d7:36:b5:ba:d4:6c:6e:39:9b:b1:
         5f:6b:46:ce:d0:21:46:13:06:85:e5:15:6b:d1:81:3b:c1:65:
         36:30:da:b8:1c:16:c0:14:48:2d:91:d7:82:36:51:44:bb:b9:
         55:71:3e:13:13:ba:60:94:98:7c:de:1b:74:e2:18:0d:2e:9f:
         85:a9:4c:db:e6:7d:72:07:c1:ce:80:32:d3:6e:46:35:1b:17:
         2f:aa:0f:b7:8e:27:05:85:f0:fb:f0:1e:76:48:3d:23:c0:e7:
         f0:bc:9c:eb:21:98:63:d4:7d:0d:30:c8:6e:e5:2d:01:13:f9:
         6a:3b:41:cf:16:7f:14:4d:09:af:88:90:f6:56:71:e4:f8:dd:
         86:e9:3d:f1:c5:93:0c:d4:34:b2:55:43:4b:76:ea:0b:6c:4d:
         f9:b5:bc:bd:36:95:09:35:96:11:72:1b:b7:83:54:ed:5c:70:
         21:fc:03:99:63:da:97:1f:95:6c:8c:3a:16:dc:c7:ea:4e:a8:
         87:8f:b2:4c:78:ac:83:47:83:22:01:5f:40:af:40:03:0c:b3:
         36:27:84:e2:cb:0f:93:f7:79:a2:4c:32:8f:35:a8:e4:a4:7f:
         ec:89:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 02:09:43 2026 by rpki-client