Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File:                     0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier:          PVvuO0KZtV9UcY4Hm8mdaLrryZJ4CFAILB6/Z2ziL7k=
Subject key identifier:   65:3E:BF:78:2C:71:35:05:3F:A2:48:8C:AF:00:19:B4:59:61:84:AD
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer:       /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial:       019F18D63761B2E9AF74909B09F2C5746951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number:          1093
Signing time:             Tue 30 Jun 2026 14:01:59 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:59 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:59 +0000
Files and hashes:         1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: DUckF4amA2qQzAY+eAbzPiEvgRUZ1buTByJGSstLL/M=)
                          2: VM-fKezFR4SnE_FueP0yvublPPU.roa (hash: NLdH6ARZYMD17vttDtKMAsBhjz+U3ES+mnznmPgNe9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:37:61:b2:e9:af:74:90:9b:09:f2:c5:74:69:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
        Validity
            Not Before: Jun 30 14:01:59 2026 GMT
            Not After : Jul  1 14:01:59 2026 GMT
        Subject: CN=653ebf782c7135053fa2488caf0019b4596184ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:44:5e:a3:9b:5e:5f:fd:ab:c3:52:89:c5:
                    fe:d9:78:47:bb:31:ad:c0:ca:50:02:df:cd:f6:ec:
                    54:6b:17:8d:e6:34:d0:e9:68:fc:67:74:47:8d:b0:
                    18:d9:5c:3f:cd:a2:54:71:ed:a0:32:1f:c9:fb:b8:
                    d8:f6:3c:71:90:8a:5a:8d:9d:d0:df:ac:99:10:d3:
                    da:a1:a7:a3:82:e3:ea:5b:4b:9a:01:a1:5a:35:04:
                    f5:15:5d:cb:c5:e3:98:fb:17:c9:3a:38:6a:50:da:
                    45:0a:b2:24:52:2f:73:ed:2c:5a:12:08:83:47:dd:
                    d9:43:88:ce:c1:a3:35:84:1a:91:59:7d:21:d6:ec:
                    ef:3b:5e:eb:f3:5c:41:54:29:2b:0a:0d:88:52:5c:
                    b4:14:1b:37:1d:8f:cd:4e:ff:e3:4b:f0:79:46:8c:
                    3a:64:44:d1:24:e7:70:9f:f5:1c:4a:14:42:86:a2:
                    51:ad:61:d1:04:f1:29:05:52:2e:c4:38:2b:68:3b:
                    81:f4:17:1c:cd:4d:6d:65:0d:be:be:05:9e:70:49:
                    b3:63:69:0c:e8:4c:9f:fc:26:5e:2d:b8:c2:64:5c:
                    63:52:f4:67:7f:b5:24:d8:8d:fe:81:0c:37:53:2d:
                    8e:74:97:fe:75:d7:93:67:9d:b1:e6:13:b4:12:ce:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3E:BF:78:2C:71:35:05:3F:A2:48:8C:AF:00:19:B4:59:61:84:AD
            X509v3 Authority Key Identifier:
                keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:ac:9e:b4:b3:51:7d:39:1b:33:6c:46:ef:77:ad:f3:ad:
         a4:ed:9b:d3:b7:53:31:db:e2:9d:13:2a:96:f8:ec:1c:ee:85:
         c0:74:a3:f5:f4:69:7f:54:b6:fb:76:1a:d1:6e:ec:7c:64:4b:
         61:f3:29:d0:80:19:c0:3d:af:50:27:2d:c4:d6:3b:2e:c6:a6:
         f8:89:30:8b:ce:d7:e4:0c:da:d2:29:19:ea:d2:7a:fe:a1:71:
         83:2d:9f:5a:62:ea:2a:82:df:db:fe:aa:1b:f9:b8:d3:fb:62:
         68:0c:6f:c9:79:7f:2e:25:40:e4:34:a3:f7:ba:1f:c2:18:3d:
         79:27:97:b6:de:88:e9:31:34:cb:60:83:e2:96:2e:3d:cd:8c:
         d2:37:10:85:01:2f:2d:e3:e1:ad:af:3c:da:d9:fa:1c:84:75:
         f4:90:4d:e6:e1:d6:85:e3:7e:57:41:9b:d5:52:e9:1d:bc:e3:
         4e:30:7e:74:92:5b:c3:8c:43:a3:64:ba:e5:98:05:c1:3f:b6:
         ff:68:b2:f9:73:be:dc:ea:56:cc:92:53:40:89:0e:e7:80:9a:
         e6:ba:a8:7e:cf:67:f7:fa:5b:42:db:57:34:b1:65:76:ea:f4:
         d7:2a:f5:25:d5:e4:c8:e6:cb:72:16:c3:16:9a:85:da:0b:59:
         a6:c9:c4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:20 2026 by rpki-client