Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
File:                     mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json)
Hash identifier:          ulAl5o7Ez6EnG0pr0mEwROWTPv8kkh8KGQXW2jeKzJ8=
Subject key identifier:   EF:A9:6A:C5:93:DC:28:7C:78:12:23:AB:AD:46:50:7C:C0:2F:AC:A3
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Certificate issuer:       /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial:       019EBAA2EC5AAE0F96D0D3F7C5D8BC8F6825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
Manifest number:          1962
Signing time:             Fri 12 Jun 2026 07:01:39 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:39 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:39 +0000
Files and hashes:         1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=)
                          2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=)
                          3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: 4g58SkXEyA1ejyuIC2oHkTJLsRMfUWTAT+l8W7/jHMI=)
                          4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:ec:5a:ae:0f:96:d0:d3:f7:c5:d8:bc:8f:68:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
        Validity
            Not Before: Jun 12 07:01:39 2026 GMT
            Not After : Jun 13 07:01:39 2026 GMT
        Subject: CN=efa96ac593dc287c781223abad46507cc02faca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:97:30:87:da:20:e4:a2:52:90:36:d5:8a:
                    ab:a8:85:64:87:b1:b2:ec:ff:b9:ca:0a:e9:41:ab:
                    5e:8d:0a:02:28:af:96:d6:00:cc:89:6a:a1:7a:9a:
                    5b:88:65:ca:67:69:da:01:3e:90:4e:da:75:a5:d7:
                    d6:f9:9a:71:58:68:ab:41:59:68:ce:7f:3c:37:6e:
                    a4:3b:10:27:2c:59:d2:22:5e:ca:99:8b:c4:81:93:
                    8d:04:be:cb:d5:f7:cb:b0:11:a1:8d:fc:6c:8e:b4:
                    93:0a:dd:20:e6:2a:b4:49:09:46:d5:b6:6e:fb:c6:
                    6c:65:0e:e0:c3:c2:3d:8b:2b:70:ed:31:dd:c2:d2:
                    07:46:46:19:18:bb:a5:da:15:dd:96:84:65:ba:c4:
                    8d:e2:f8:78:67:e5:a1:d1:6f:48:00:cd:fb:f8:17:
                    59:4b:5c:15:13:a2:fd:8f:e0:42:cc:74:70:9c:9d:
                    58:16:7f:31:14:9c:46:dd:a3:e2:ac:b8:cf:19:c7:
                    ed:7f:93:64:84:ce:70:59:bf:27:55:65:74:e1:34:
                    a0:32:87:a3:a5:ba:eb:c3:60:36:4e:10:d3:83:39:
                    a6:48:be:68:88:81:15:bb:6a:35:fe:c6:c3:7d:99:
                    88:1b:90:02:36:ff:93:8d:f2:13:af:7c:28:ad:a5:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:6A:C5:93:DC:28:7C:78:12:23:AB:AD:46:50:7C:C0:2F:AC:A3
            X509v3 Authority Key Identifier:
                keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d2:03:7a:9d:90:7a:6f:58:37:c9:6e:9e:68:4f:25:47:00:
         1b:85:f9:7e:81:86:f9:15:9d:01:05:ac:6a:97:e1:f1:30:81:
         9f:ad:5b:e5:30:5a:af:76:d6:5e:5f:ef:e8:56:01:d2:7d:66:
         a8:48:5e:ce:5d:e3:01:77:1c:86:7d:b4:cb:57:27:44:41:9e:
         ed:cd:1d:e4:01:20:e0:f5:5e:ef:8b:78:2f:e5:e4:18:75:31:
         38:35:b3:5a:40:1f:08:96:2f:b6:21:27:68:8d:9f:de:6a:c2:
         63:7b:cc:a8:f4:8f:35:85:21:c6:cf:0e:b3:d2:72:d6:be:56:
         4a:15:a1:7b:c4:ff:4c:c4:1c:56:ce:98:3f:6e:12:b0:28:9f:
         56:06:52:65:49:95:0b:f2:a3:c2:dd:52:06:8e:99:9b:ca:bb:
         d6:5d:b6:ed:5a:76:97:05:e2:b0:c5:b9:b0:d4:18:63:66:2a:
         1e:f0:0f:9c:8a:f2:84:14:39:16:59:88:cb:53:c6:9e:f7:a2:
         9c:71:50:5c:27:d2:c6:16:25:b7:3f:7d:ef:26:3d:6b:b9:84:
         b9:e1:49:e9:c5:03:26:0d:42:f5:71:ae:d4:9a:25:8c:7b:09:
         73:70:9c:aa:5b:39:e2:f2:bc:39:aa:8c:e7:74:ab:4b:59:15:
         db:d5:e1:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66ouxarg+W0NP3xdi8j2glMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm
ZTQ2OWMwHhcNMjYwNjEyMDcwMTM5WhcNMjYwNjEzMDcwMTM5WjAzMTEwLwYDVQQD
EyhlZmE5NmFjNTkzZGMyODdjNzgxMjIzYWJhZDQ2NTA3Y2MwMmZhY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfGXMIfaIOSiUpA21YqrqIVkh7Gy
7P+5ygrpQatejQoCKK+W1gDMiWqheppbiGXKZ2naAT6QTtp1pdfW+ZpxWGirQVlo
zn88N26kOxAnLFnSIl7KmYvEgZONBL7L1ffLsBGhjfxsjrSTCt0g5iq0SQlG1bZu
+8ZsZQ7gw8I9iytw7THdwtIHRkYZGLul2hXdloRlusSN4vh4Z+Wh0W9IAM37+BdZ
S1wVE6L9j+BCzHRwnJ1YFn8xFJxG3aPirLjPGcftf5NkhM5wWb8nVWV04TSgMoej
pbrrw2A2ThDTgzmmSL5oiIEVu2o1/sbDfZmIG5ACNv+TjfITr3woraXUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+pasWT3Ch8eBIjq61GUHzAL6yjMB8GA1UdIwQY
MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt
NDQ2OTJkYmNjYjMyLzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy
LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtIDep2Q
em9YN8lunmhPJUcAG4X5foGG+RWdAQWsapfh8TCBn61b5TBar3bWXl/v6FYB0n1m
qEhezl3jAXcchn20y1cnREGe7c0d5AEg4PVe74t4L+XkGHUxODWzWkAfCJYvtiEn
aI2f3mrCY3vMqPSPNYUhxs8Os9Jy1r5WShWhe8T/TMQcVs6YP24SsCifVgZSZUmV
C/Kjwt1SBo6Zm8q71l227Vp2lwXisMW5sNQYY2YqHvAPnIryhBQ5FlmIy1PGnvei
nHFQXCfSxhYltz997yY9a7mEueFJ6cUDJg1C9XGu1JoljHsJc3Ccqls54vK8OaqM
53SrS1kV29Xhtg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:58:03 2026 by rpki-client