Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
File:                     L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft (raw, json)
Hash identifier:          wM1LKE1iUrbUDkZZbqdKSapeiTK1yOEs8Uix6oj9at8=
Subject key identifier:   77:12:E1:32:61:60:45:59:1E:CA:B6:74:5F:E3:80:AE:71:87:E8:07
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Certificate issuer:       /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial:       019EB6FBC219F0BAC5ED55323BCEBA92A929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
Manifest number:          0110
Signing time:             Thu 11 Jun 2026 14:00:12 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:12 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:12 +0000
Files and hashes:         1: L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl (hash: HcUc2iTGt7h+QWpHo6YkthWCqMsp447hywGOdUXmF3Y=)
                          2: W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (hash: RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:c2:19:f0:ba:c5:ed:55:32:3b:ce:ba:92:a9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
        Validity
            Not Before: Jun 11 14:00:12 2026 GMT
            Not After : Jun 12 14:00:12 2026 GMT
        Subject: CN=7712e132616045591ecab6745fe380ae7187e807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:4f:c6:30:97:bd:43:4a:0d:b1:fe:a7:07:
                    92:3e:5e:62:08:56:38:a2:0b:47:21:ab:7e:96:c6:
                    34:1b:cd:43:07:ae:e5:1f:5e:1f:24:71:98:4d:e2:
                    d2:62:53:4f:6d:53:70:67:d3:80:dc:a2:9b:53:4e:
                    4b:f9:aa:e4:95:f7:45:34:8a:b8:2e:29:1d:58:61:
                    2b:88:cf:9d:d3:99:09:02:0f:b4:65:d5:26:cf:fd:
                    ec:2a:5f:7a:50:7a:62:7e:35:32:d7:0c:6c:1f:ed:
                    b9:9e:54:c2:ef:7b:cf:f3:3e:0c:f2:d6:7d:6d:88:
                    61:2d:72:1d:87:b9:e9:dd:f9:65:ea:49:84:be:a6:
                    f7:6f:9b:c2:a6:a7:cf:0e:d9:f5:49:8b:d3:e4:f6:
                    79:c5:f8:1c:3a:cf:63:27:a7:6b:f2:f9:ce:05:40:
                    66:e0:16:46:fb:a0:ea:57:bb:06:2b:35:b7:45:4d:
                    5e:22:67:0d:d9:c3:5c:c4:76:ec:93:23:2d:9d:7b:
                    ee:8e:9c:92:34:8a:f9:f8:c4:71:3d:f1:62:97:9e:
                    60:ae:ae:b3:49:7c:68:7e:e1:21:56:4e:4d:45:5f:
                    26:8d:50:14:07:e3:76:cd:20:25:3a:af:05:5c:a1:
                    8c:1d:5b:9b:ba:a8:e6:1c:ff:a7:47:f5:56:25:4e:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:12:E1:32:61:60:45:59:1E:CA:B6:74:5F:E3:80:AE:71:87:E8:07
            X509v3 Authority Key Identifier:
                keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:40:66:89:63:4c:70:de:76:37:42:f8:07:72:22:28:3b:70:
         8e:c6:a6:a7:50:d2:ac:b2:0b:b2:84:e2:b8:c9:95:28:1f:8d:
         4b:a6:22:d9:92:69:ca:67:d9:ce:34:3d:e5:ee:dc:88:aa:ec:
         a2:35:bc:57:b8:3a:0f:89:22:51:fa:a4:7c:12:7f:90:52:e1:
         54:fc:ba:cb:a0:30:f0:b4:fa:5d:ad:94:15:c8:09:d9:9c:24:
         3e:2a:a4:7e:e1:73:44:19:3d:6b:c2:50:8c:4d:a8:82:01:61:
         2e:80:4d:46:23:0e:59:b2:e8:ee:0e:49:4a:6f:f1:3d:95:cd:
         47:02:8e:76:b4:61:b2:50:b2:0a:6f:24:03:4c:1e:a1:c7:a4:
         0b:c3:f0:0b:b2:ce:93:0d:b3:43:d3:d7:cc:df:fc:59:aa:2e:
         2f:b7:89:9a:f1:38:cd:80:24:a1:9f:83:25:0b:34:9d:9c:62:
         91:6c:4e:2d:1f:fd:4d:15:62:38:39:d2:09:6e:0a:dd:56:49:
         05:1c:1a:46:ad:97:04:ba:a5:c6:79:e4:65:aa:4f:d0:24:42:
         db:dd:d9:39:4d:ee:7b:4c:4d:42:2d:9c:57:b5:9b:11:8f:fb:
         96:dc:a9:29:11:ac:26:e0:a9:7e:83:b9:73:0c:e0:19:ef:83:
         4c:11:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:50:34 2026 by rpki-client