Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File:                     k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier:          qV9uF36JMi9pCL9vNS6moV6EloUeztFdsY6esKoQ7j8=
Subject key identifier:   6C:38:92:81:3A:48:62:1A:D2:7D:A0:B8:77:C5:41:91:09:4A:AA:CF
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer:       /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial:       019EB9FDA85F7BBF0516B9E84D95C7B1E52C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number:          18E9
Signing time:             Fri 12 Jun 2026 04:01:09 +0000
Manifest this update:     Fri 12 Jun 2026 04:01:09 +0000
Manifest next update:     Sat 13 Jun 2026 04:01:09 +0000
Files and hashes:         1: 8Na-R2PqVFyNzA5u6KAFRMf11HE.roa (hash: 8IZEcdLtXy5KbQ5iic2lrmgZO3w7ovtbGyG4T1KJfkY=)
                          2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: 8q9b32KOP9zreB/rg78u/S6Ahhk5GrFceTXl2/UKxF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:a8:5f:7b:bf:05:16:b9:e8:4d:95:c7:b1:e5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
        Validity
            Not Before: Jun 12 04:01:09 2026 GMT
            Not After : Jun 13 04:01:09 2026 GMT
        Subject: CN=6c3892813a48621ad27da0b877c54191094aaacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:28:a8:e7:b8:52:ff:4a:3b:06:7d:83:53:
                    36:0d:71:fa:17:e1:8c:a1:b9:97:aa:1b:9b:94:da:
                    d5:d4:0a:ce:b5:d1:a1:fe:29:f3:47:50:6f:45:d8:
                    49:54:5e:9a:52:9a:00:3a:8b:3b:c7:3d:8c:49:ec:
                    22:a1:12:e9:e2:ed:52:4f:c6:81:96:76:6c:8e:d0:
                    65:79:05:56:76:17:52:38:02:a5:8c:6c:1b:2a:f2:
                    66:5d:97:ed:31:4f:3a:1d:4c:0e:11:0e:61:1e:01:
                    10:dd:36:06:0a:b4:d7:0b:a8:f1:c3:8a:5a:b5:aa:
                    92:6c:ac:72:78:5c:6c:1d:d4:7e:4e:81:bc:0c:e6:
                    05:3f:8e:6e:8f:c2:f7:39:fa:6e:a2:f9:5c:21:98:
                    0a:28:fc:5f:b2:63:0c:a1:62:b3:38:c5:50:33:5d:
                    58:8d:ed:f6:06:7d:1b:a1:48:06:8f:64:fc:1c:c0:
                    dd:3e:76:90:5d:c0:b7:2c:a4:e0:1b:72:d4:12:21:
                    83:82:f3:ce:d5:71:be:47:89:1e:85:ad:39:37:5c:
                    f7:2e:b9:d8:ff:41:22:c8:ce:6f:03:d1:73:a0:58:
                    a4:2e:78:f1:4c:a4:c3:33:84:a0:da:f4:dc:56:9b:
                    c6:15:df:99:f2:df:68:75:2c:d2:80:1f:ec:e4:e7:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:38:92:81:3A:48:62:1A:D2:7D:A0:B8:77:C5:41:91:09:4A:AA:CF
            X509v3 Authority Key Identifier:
                keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b9:9f:7d:89:de:08:97:60:7c:3b:e5:77:31:33:a7:8e:d6:
         bb:77:e2:c9:56:f9:90:0a:9a:02:42:9a:e0:f1:3b:43:4e:38:
         3c:33:50:1e:6c:60:a9:35:4d:6d:8c:5a:60:4c:19:20:2d:2d:
         da:e0:70:43:44:0f:c0:bf:51:9b:2a:d2:9a:6b:2d:3a:97:49:
         74:91:08:68:df:73:d8:82:db:76:cc:2e:9a:53:92:e7:13:aa:
         1d:18:5e:0b:4d:d5:93:6d:ec:e8:71:42:34:0a:b0:98:e1:09:
         82:94:c5:5b:97:df:78:8a:0e:fb:80:40:59:5d:6d:99:22:2d:
         ba:28:92:01:31:e8:1f:57:49:4a:3e:ca:92:e4:81:f7:2e:47:
         48:d0:48:f6:01:cc:42:9d:ac:ba:e0:00:b7:d9:1e:13:17:3d:
         87:98:ae:ef:c3:df:ae:73:d7:3f:20:05:b4:c6:7e:4c:04:ef:
         36:e4:d8:55:32:3a:55:21:d8:12:8d:c4:a7:69:3b:57:f5:61:
         50:e6:78:e9:68:46:2f:53:0a:9f:f2:96:da:30:c9:59:7c:e4:
         0c:66:2f:09:ff:9e:4f:aa:17:83:d5:36:aa:a5:68:7f:96:51:
         f1:e2:b7:b7:67:14:71:03:12:b3:1b:07:b5:d5:ab:e5:bb:4a:
         1e:a1:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:57 2026 by rpki-client