Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File:                     5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier:          zHnbfRE+96GECgW0oDU5WAOZlcrly/fGFLI7NUrzfKc=
Subject key identifier:   66:75:99:9D:C1:AA:75:5F:0F:87:41:8D:70:EC:28:68:A4:97:A9:32
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       019EE331A5C6B70D1CCEFF77150D189376B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number:          19EF
Signing time:             Sat 20 Jun 2026 04:02:22 +0000
Manifest this update:     Sat 20 Jun 2026 04:02:22 +0000
Manifest next update:     Sun 21 Jun 2026 04:02:22 +0000
Files and hashes:         1: 0xg0LHFmIAhRMpdSsXPI-Ie_PsI.roa (hash: WHzwzDrG+iQh9uqHG4tV1Yh6NKaFw5D08VOYk/ojXTc=)
                          2: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: BToH58NZrpP4mFaoTExBRUpcWZcrO/o2tbxh40ZFU6U=)
                          3: azXt4JSrhCkbBDLougb_ea1t6os.roa (hash: zCtBx08/hOTifYY1efRidpEdm3U/OsYy+2PnGFcIFuE=)
                          4: wF76zj4RuOFh39FZ-21d3WLD4As.roa (hash: +mS0w0JTWZxTgTnEjxzUUW+qwY254+9o+tm44Q39t6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e3:31:a5:c6:b7:0d:1c:ce:ff:77:15:0d:18:93:76:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: Jun 20 04:02:22 2026 GMT
            Not After : Jun 21 04:02:22 2026 GMT
        Subject: CN=6675999dc1aa755f0f87418d70ec2868a497a932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:19:1b:1f:66:20:17:a5:7c:fc:ef:4d:5e:
                    3f:77:7c:47:e8:98:9b:b0:5f:69:5f:c9:88:81:1e:
                    88:04:2b:7e:29:5b:b2:70:1f:11:4a:0e:b1:c4:50:
                    5a:6b:89:f6:5e:a0:11:1d:88:cb:34:a2:7f:c8:88:
                    8e:34:b4:a9:7c:15:65:91:c2:93:7a:f3:61:07:ed:
                    b0:b2:b5:01:4c:46:d6:be:d6:d1:a7:da:ae:cc:72:
                    68:1f:bb:47:7e:0f:a6:0f:66:cb:c6:33:cd:8a:0b:
                    39:f4:d7:20:0a:7a:4f:d6:dc:4f:db:61:50:83:42:
                    39:52:bc:1f:9b:12:16:df:d7:da:45:6f:e9:8a:a7:
                    2c:67:0e:67:14:98:2e:45:96:0d:fb:f9:01:66:d2:
                    1c:97:5d:cd:8d:81:fd:30:cf:d4:73:99:ca:bb:5a:
                    2f:ed:a9:47:07:f0:a1:e7:30:c3:af:ab:dd:58:cf:
                    0e:27:e5:19:7c:4e:da:96:e8:af:94:59:89:96:97:
                    c9:5d:9b:08:42:b3:38:c7:ee:b8:ea:ce:af:6c:79:
                    8f:46:fd:34:77:41:24:e9:c2:d1:4a:2a:00:9a:c0:
                    aa:60:d8:7c:91:0c:d5:1b:52:7f:1d:56:18:9a:9b:
                    61:7c:8d:dd:e9:a7:70:55:27:c4:f8:05:42:d2:da:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:75:99:9D:C1:AA:75:5F:0F:87:41:8D:70:EC:28:68:A4:97:A9:32
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:bf:92:32:42:ce:6b:05:f6:f9:e7:66:2b:fc:ae:a0:f0:
         13:11:93:23:1e:54:ad:a4:a4:d5:06:03:ad:e8:1b:f7:94:19:
         8c:b5:f6:c0:19:be:0b:fb:41:ea:b8:5e:ff:45:87:2d:4a:10:
         95:a7:47:df:0c:28:66:58:0e:a6:76:d4:54:87:b4:7a:5a:95:
         61:e6:67:b0:a6:06:40:8e:83:03:34:c1:3e:bf:c9:ef:5a:59:
         43:26:68:43:c2:ce:5b:48:29:3f:37:e4:93:d6:d1:2d:82:a9:
         28:b2:ad:71:cd:72:c3:c1:cd:bb:64:b1:be:bf:14:d7:96:78:
         a2:ec:3a:49:59:d2:06:f7:12:a3:9f:a1:a9:21:11:58:39:20:
         ed:84:cc:c3:42:12:ac:73:08:6f:88:b9:db:45:9e:f3:a2:af:
         b1:b8:34:f8:a0:12:02:30:75:ec:1e:15:b4:0f:54:78:0e:9b:
         d7:e3:79:de:32:ea:01:3f:fe:d5:32:81:00:93:b1:06:ba:b5:
         49:72:f3:7c:e1:e2:d9:24:fe:94:24:b3:4d:c7:83:57:6d:9c:
         c1:28:ab:71:18:5d:16:f9:46:d5:fe:c1:68:9f:35:17:d2:43:
         0b:5f:94:d7:91:a0:ae:72:04:89:c7:0e:93:d6:94:f7:d1:3d:
         91:f1:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 12:49:14 2026 by rpki-client