Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          JbbOjwe2Dwt6ZB6/L+wCngABT4/6bkrd6xkmqggj6WI=
Subject key identifier:   43:E4:16:1E:A8:28:83:C6:78:41:73:ED:99:14:03:93:6C:3D:1D:3E
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019EB98FC36E40D6203B43F009344CA25FEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          196F
Signing time:             Fri 12 Jun 2026 02:01:07 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:07 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:07 +0000
Files and hashes:         1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
                          2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=)
                          3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
                          4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
                          5: 66nbrZ2mCYwG3e6ha3Nfy0BJKE0.roa (hash: nivnljP3mO1OIkIFMtZNC7rvfkUDANm7b9o7EEV+vw8=)
                          6: 9u44haxRix1aXmDblsqAtiOy3ic.roa (hash: r3I5n8f6rdoTo7uI5qExlu1uSbAdj4bGLbRaLfkDE8E=)
                          7: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=)
                          8: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
                          9: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
                          10: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
                          11: f0fB3ZCLspEHf4xo9ont5Ruj-yU.roa (hash: s3KQRvgs0uMJaKxlqnyZSS+058EdiVidz4VTBoWLKeU=)
                          12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: tvHTSt/4u8fiXvbo5Uw87KYfbZMn2LPMG9EJQ3dUXow=)
                          13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
                          14: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
                          15: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
                          16: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (hash: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=)
                          17: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
                          18: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:c3:6e:40:d6:20:3b:43:f0:09:34:4c:a2:5f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jun 12 02:01:07 2026 GMT
            Not After : Jun 13 02:01:07 2026 GMT
        Subject: CN=43e4161ea82883c6784173ed991403936c3d1d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:b9:d7:18:78:71:20:26:6c:60:6e:89:5e:
                    61:7f:95:30:3e:ac:75:1f:f9:d1:95:f3:19:19:3e:
                    1f:24:77:2b:3b:98:f5:a1:d3:54:64:58:23:93:69:
                    51:b8:64:3a:29:34:54:6f:51:5e:ff:da:33:b9:b4:
                    93:e3:79:c6:92:67:78:cd:76:26:47:5b:8f:44:2c:
                    e2:a2:d8:dc:2b:66:6d:6f:08:30:20:a5:e0:43:0f:
                    17:5b:f3:a6:d6:1f:de:45:ae:23:54:55:36:2f:fe:
                    51:cc:08:0e:b9:d1:48:47:55:6a:32:b7:01:3d:01:
                    97:5a:f8:14:a9:a5:93:d8:0d:ab:92:3e:23:66:b5:
                    3b:a5:d3:c1:d9:a4:ce:3e:e5:af:c2:fb:65:2e:45:
                    d7:5d:3e:8e:50:f0:82:84:88:13:dc:74:b0:4f:1b:
                    dc:e7:7b:9f:20:1d:cd:d9:bb:11:6f:bc:6e:8a:33:
                    5c:b5:b5:ac:8e:11:b8:92:54:32:95:02:9a:46:37:
                    3e:d9:14:47:d4:05:18:a0:3b:ac:d7:59:72:3a:b9:
                    30:48:82:1d:68:2d:d5:48:86:68:80:a7:1f:43:78:
                    c7:62:bc:76:00:32:73:20:13:1c:86:44:2c:40:3f:
                    b0:0b:f4:cb:14:4a:82:dc:7a:f8:91:80:26:58:94:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E4:16:1E:A8:28:83:C6:78:41:73:ED:99:14:03:93:6C:3D:1D:3E
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b9:6e:67:df:c9:69:23:87:82:30:8f:44:59:9c:8b:71:84:
         04:b6:4b:0b:b2:93:76:9c:cb:66:c3:05:61:c2:d8:6e:38:e6:
         b8:d4:93:7c:4c:5a:cd:9b:1d:55:fa:81:a9:57:24:72:0b:05:
         ef:91:ba:0c:5c:9c:05:27:c0:28:d5:96:c7:17:63:3e:28:16:
         be:07:dd:22:f5:d9:94:81:b7:06:03:fc:ac:32:95:e7:f2:09:
         30:22:a2:17:b4:2a:54:d3:13:84:8a:21:98:79:61:43:1d:8b:
         f3:03:53:09:71:f9:f8:df:eb:fc:5c:cb:8f:82:cf:33:6f:20:
         97:2a:92:91:26:60:1a:03:09:20:9c:64:36:1e:ef:f2:9e:2e:
         61:bf:fb:0f:01:2e:e8:52:c9:7e:57:ec:ae:4a:1f:25:2b:1f:
         46:dd:d5:f5:4f:3d:57:1b:36:70:37:25:51:21:a7:f4:d0:af:
         be:5b:2a:57:aa:d7:ec:9d:c4:02:28:2b:5e:f5:5e:86:e4:76:
         2c:d3:e7:91:ef:66:94:2b:7a:cd:8e:56:fd:c1:b5:06:ae:5c:
         e5:87:25:d3:6f:29:e3:c7:d7:73:3e:cf:d9:2a:09:3b:28:0c:
         a7:0b:a0:ee:a7:d4:f9:d1:0e:fb:36:b6:bc:ae:b3:c8:90:93:
         07:42:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:41 2026 by rpki-client