Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File:                     kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier:          r0M0K6e8L1bx/d7thkrRKOrmu4NisTFhZ4w99F/vLxU=
Subject key identifier:   5D:46:63:A3:A4:D5:CE:2A:88:8C:7A:AB:DD:E4:00:CC:21:6E:54:66
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer:       /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial:       019EB8EAD0D9BBB55B83FA9BBABEA969394F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number:          0735
Signing time:             Thu 11 Jun 2026 23:00:57 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:57 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:57 +0000
Files and hashes:         1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: D8jhurbIcMeS8liE97vX/bPbSbNfZxvxfMCbxREVsxA=)
                          2: v8xN2-d0fpKAaThoNW-wrq46cas.roa (hash: w0wQ9b7+xzxFuqPdPpkrYcYWx9TLPMta+onXlpVwk44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:d0:d9:bb:b5:5b:83:fa:9b:ba:be:a9:69:39:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
        Validity
            Not Before: Jun 11 23:00:57 2026 GMT
            Not After : Jun 12 23:00:57 2026 GMT
        Subject: CN=5d4663a3a4d5ce2a888c7aabdde400cc216e5466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:69:28:06:1c:b3:ea:04:27:7f:fa:21:7b:
                    3e:78:83:6e:a7:b7:75:f3:ed:5f:51:1e:26:94:b1:
                    a7:fa:87:2e:7d:ed:16:32:1e:0a:70:db:2c:42:83:
                    fc:04:dd:84:d6:ea:cb:2c:9a:cf:46:b9:9b:39:fc:
                    0b:fc:42:ec:9a:f7:25:d3:6a:07:73:1f:58:9a:03:
                    ef:ed:7e:88:5c:50:7d:68:eb:bd:61:65:b2:50:b3:
                    cc:4d:44:7b:f8:dd:4b:c7:4e:f6:aa:c7:82:8b:26:
                    6f:af:a0:e3:1f:da:0e:59:d2:8d:7f:cb:70:bf:fd:
                    ef:d7:0b:6b:71:49:a1:e4:51:dd:94:d9:93:d0:55:
                    bf:2f:19:41:9f:7a:6b:0d:6b:bf:59:d9:76:b8:7b:
                    38:13:60:e7:b5:3d:93:cc:9d:96:bc:6c:2e:18:7c:
                    46:d8:90:f8:3d:3a:76:5b:c9:cc:1e:84:c4:93:b7:
                    63:51:7a:10:9b:2b:f0:ca:25:fc:fa:92:00:35:09:
                    09:a4:60:52:4d:2a:1b:41:6e:18:23:a5:d4:04:d8:
                    37:fb:f7:1f:17:9c:b9:c1:ed:54:36:8f:47:ad:b7:
                    2f:a7:09:31:76:e7:19:a6:22:76:89:c9:79:c5:04:
                    ca:01:60:9a:79:d9:72:46:26:59:e3:fc:57:26:cb:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:46:63:A3:A4:D5:CE:2A:88:8C:7A:AB:DD:E4:00:CC:21:6E:54:66
            X509v3 Authority Key Identifier:
                keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:57:20:77:e4:bb:67:26:39:9b:2a:24:66:44:e2:45:21:45:
         8f:84:f2:b5:f7:31:4d:d4:80:f9:43:6d:b5:88:66:d9:3d:3a:
         25:d9:54:47:01:f1:36:f5:7f:6c:3b:cf:e8:47:98:19:ab:07:
         2d:d3:1a:d4:fd:6a:db:f5:6c:f0:fc:7b:23:45:40:cd:94:b4:
         d2:bd:35:17:5a:67:76:d6:5a:4e:89:52:f1:1a:dd:0f:84:c7:
         1a:10:ca:7c:f2:b1:bf:69:fd:5d:6d:2b:7a:ec:e2:8d:d2:8e:
         7a:77:23:d9:64:d7:45:de:85:23:2e:69:0a:d7:91:17:94:91:
         b0:42:d7:f2:fc:ec:17:1c:b4:7c:15:bf:f0:66:56:48:60:8a:
         c7:a7:8a:ff:b5:0e:7a:c4:59:e7:75:de:d1:13:60:2d:25:d3:
         e3:51:c1:0f:a4:f7:54:d4:5b:ad:79:27:ef:40:80:ff:54:ba:
         85:62:43:db:7f:8d:d7:42:3d:42:cf:21:bd:b9:6d:de:1d:3e:
         5a:d5:c3:9c:8b:85:98:d0:a6:75:b8:d5:c2:75:0e:1d:42:5a:
         13:38:d0:16:69:5c:94:50:7b:5a:f2:2d:f6:89:af:2b:80:16:
         89:df:4b:51:cf:8d:94:7f:bd:e6:1f:e1:11:7d:e3:19:82:ac:
         ff:64:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:50:48 2026 by rpki-client