Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File:                     KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier:          Cek/x5h8xLvbU4SoUzUPcj0hKDMBDtfr1MTt2f9PnaU=
Subject key identifier:   6D:0A:C4:69:70:D3:02:9D:86:34:AA:D4:F2:33:03:28:82:37:55:AD
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer:       /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial:       019EB8B404B31248F2DD571108CF423841E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number:          11B8
Signing time:             Thu 11 Jun 2026 22:01:05 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:05 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:05 +0000
Files and hashes:         1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: I6yrlKAtB2U95wsP8DR4Y+VAZ+gDJtXSoPKIC9zD31I=)
                          2: hTiJ6cCS_TiS4eI7qxisMIha6WA.roa (hash: RYMk/98nEg7OxXi5y6LpcIy05kfPWnp4XSK+7SVu8ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:04:b3:12:48:f2:dd:57:11:08:cf:42:38:41:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
        Validity
            Not Before: Jun 11 22:01:05 2026 GMT
            Not After : Jun 12 22:01:05 2026 GMT
        Subject: CN=6d0ac46970d3029d8634aad4f2330328823755ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:ac:b0:7f:e3:99:a1:b4:eb:b6:17:72:85:
                    98:17:5b:7d:59:88:b3:bb:46:31:ec:eb:c1:af:78:
                    27:97:09:88:11:f9:c8:1c:73:e7:c3:d1:64:98:76:
                    1e:c3:71:60:a6:0d:33:68:31:0b:75:18:d1:de:d8:
                    a6:39:a3:2c:e9:ba:77:09:05:6b:f4:f5:b1:ae:4b:
                    5f:04:e1:e8:56:4f:ed:36:4e:31:37:ac:48:3d:52:
                    24:ce:94:b2:73:22:29:b4:a2:1c:81:33:05:f1:93:
                    62:d7:14:4f:22:ad:90:9c:e1:96:64:30:60:ab:a2:
                    16:66:ef:7e:29:3c:c3:96:5a:96:2c:82:7c:1f:a8:
                    9d:aa:22:44:f7:66:84:d9:00:a1:e4:a3:ef:93:49:
                    5f:ea:bb:21:83:2b:04:f4:97:4b:86:28:31:a0:52:
                    f4:99:c6:6f:31:aa:f0:e6:e9:0f:c7:22:7d:14:d7:
                    21:03:60:7b:41:4a:85:66:c7:4b:e5:3e:20:52:ed:
                    00:bb:c3:51:e8:36:83:07:6f:42:f1:bf:df:45:8d:
                    01:ad:09:38:b0:58:b8:13:b0:cf:d9:9c:31:d0:a4:
                    5d:4b:6d:c8:44:09:7b:c4:4f:d6:1f:72:d0:23:60:
                    63:17:11:d0:34:9b:7c:c1:26:70:54:fd:d0:9c:a3:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0A:C4:69:70:D3:02:9D:86:34:AA:D4:F2:33:03:28:82:37:55:AD
            X509v3 Authority Key Identifier:
                keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:37:c8:76:d7:eb:d8:23:3d:61:32:7d:cf:63:dd:ab:05:4a:
         c4:82:81:f9:b9:8c:b8:a7:e4:42:76:bd:e0:10:b9:df:f3:9c:
         f1:ab:ad:9f:3d:76:ff:cb:a2:59:d6:0c:b3:49:af:de:32:ea:
         7a:bd:eb:92:12:ca:f1:5e:e6:67:5b:cc:5e:17:d0:da:8e:b6:
         be:b6:b8:c7:f7:5f:d5:33:1e:00:e1:0e:c9:9e:7b:c3:2e:85:
         d8:ac:76:ed:f8:57:1f:3d:37:f0:a8:81:e1:ec:24:a1:10:2c:
         58:0f:26:07:21:d4:c2:1d:ab:d2:f6:26:75:a2:ea:0f:24:91:
         06:c7:0c:4d:10:53:ab:4a:9b:77:19:1c:40:c5:6a:4f:0b:6f:
         2d:e1:62:f5:bc:e7:a6:24:04:65:d2:22:b1:f7:96:52:35:20:
         36:47:7b:a3:b9:bd:70:db:7b:00:6f:90:a5:89:3b:6b:8b:71:
         f2:7f:75:49:bd:6a:b1:70:18:d4:fe:17:ec:53:d6:9c:5e:b1:
         4d:c3:4c:88:e1:4e:cc:01:3f:30:f7:7b:12:d4:17:69:b7:18:
         fa:73:8e:3a:ce:1c:a0:4b:02:45:1f:8f:95:82:dd:91:65:e9:
         3a:01:8d:ff:d8:3b:f3:fd:57:eb:6b:d1:8c:fe:4b:11:18:48:
         75:55:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:41 2026 by rpki-client