Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File:                     kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier:          wJVIEk8tbzaMeTPNpVaxiP5obv4Wm/jC0+jX9K/P9uU=
Subject key identifier:   76:61:A5:BD:F8:08:5B:8F:E9:54:E5:71:2F:51:04:8A:7A:DF:9A:FC
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer:       /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial:       019EC7B8F73ED568BAD6393E16ABEC00F5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number:          1963
Signing time:             Sun 14 Jun 2026 20:00:47 +0000
Manifest this update:     Sun 14 Jun 2026 20:00:47 +0000
Manifest next update:     Mon 15 Jun 2026 20:00:47 +0000
Files and hashes:         1: JL_bv1rE4SOiwiRn1jc2s_87lQQ.roa (hash: dWOsdKuE7dNLYI4NP8+n+WEeun5in1SyaWv26Okq8QI=)
                          2: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: 0PQdve3u5LY69nWf9qdgZqkcvRDzUoe8iAe0q3yDXTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c7:b8:f7:3e:d5:68:ba:d6:39:3e:16:ab:ec:00:f5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
        Validity
            Not Before: Jun 14 20:00:47 2026 GMT
            Not After : Jun 15 20:00:47 2026 GMT
        Subject: CN=7661a5bdf8085b8fe954e5712f51048a7adf9afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:c6:7b:7a:97:5d:76:8e:48:0b:3f:63:5a:
                    a6:80:a3:30:12:0f:b7:00:53:87:6f:a4:3c:59:a0:
                    1a:3a:38:67:3d:c2:65:6b:1a:63:12:ac:99:3c:65:
                    66:16:33:76:b4:da:c5:f6:f5:43:80:af:a1:b1:3d:
                    25:d0:f3:7d:6d:9a:bc:39:3d:c3:31:1c:bb:09:7e:
                    8e:1b:16:b8:ff:61:bf:fc:bf:24:50:36:43:bc:47:
                    8f:67:e6:8c:cd:e6:09:57:46:a3:ad:9f:19:20:a6:
                    e8:61:be:ab:06:b9:95:f9:10:63:b4:cf:1a:7b:f7:
                    9e:51:c4:94:9b:e9:6a:73:41:9b:6a:b2:1c:4f:01:
                    09:83:7c:40:52:f2:20:52:79:f5:4c:6c:d0:bb:dc:
                    fe:c4:1a:f7:06:8b:af:1f:e2:4b:eb:29:bd:ad:cb:
                    27:03:03:39:10:65:1b:41:c3:c9:99:c4:5b:9d:97:
                    28:59:5a:84:c8:25:ca:ce:3b:c6:71:15:ac:b4:d8:
                    06:fa:98:75:68:c4:6a:9e:99:d3:b9:c4:93:30:3d:
                    b7:42:70:55:2a:80:7a:b6:d1:16:cd:07:5c:e2:1a:
                    56:00:39:2d:c2:8f:97:79:5f:ee:91:67:d5:ff:5a:
                    6c:b9:53:c1:f0:c8:e3:f7:41:12:03:23:14:d2:1e:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:61:A5:BD:F8:08:5B:8F:E9:54:E5:71:2F:51:04:8A:7A:DF:9A:FC
            X509v3 Authority Key Identifier:
                keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:96:9f:26:e9:d9:54:b0:bd:38:d2:17:e2:2e:08:e3:25:59:
         b9:4b:a4:a0:23:52:a1:1d:4a:6b:2a:03:8a:f4:9d:24:34:53:
         61:54:f0:6e:fc:01:76:4c:a3:15:ae:6e:fd:3f:f4:62:98:87:
         87:77:42:0e:39:88:00:84:15:4e:36:19:97:3c:e2:74:d5:f6:
         be:da:84:c7:66:70:a3:ec:fe:61:8a:fd:ae:a4:2c:26:95:d6:
         6e:b9:5a:2e:2f:a0:95:a1:58:e2:4a:7f:8e:e6:d3:53:57:69:
         cf:52:50:af:9b:95:f5:69:f2:12:82:9a:2c:14:db:58:2e:a2:
         ec:59:dc:ce:d7:3a:2b:f0:01:ab:74:16:49:ce:5f:12:d4:6a:
         15:21:cd:e9:a2:4f:29:bd:e1:64:03:17:b2:69:b5:6e:a8:82:
         15:48:1b:3e:b0:11:6c:30:b8:3a:36:78:f7:7a:f7:60:db:ef:
         31:37:2b:5f:50:f9:a9:4e:55:66:35:4c:0c:7c:8e:e4:9e:fc:
         cd:9c:76:89:0b:e2:34:a7:58:64:35:71:5a:bc:46:ca:a9:30:
         76:6a:c1:af:b7:c0:58:a8:27:15:cf:2b:f7:0b:dc:fc:b1:94:
         c9:78:ff:52:0d:3b:ca:83:63:0d:76:ce:d7:0e:b9:05:06:a1:
         60:b2:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 03:07:30 2026 by rpki-client