Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File:                     l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier:          xDT/zC0IB6VjIEXGqUwbBfQaPS9av+jaOiKvAMDLYoI=
Subject key identifier:   C9:A6:82:42:DA:96:A3:90:56:65:E9:CD:A9:55:BA:49:4B:38:1F:FC
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer:       /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial:       019EE6D6E88DD29395BA11AA68586FF7742D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number:          104F
Signing time:             Sat 20 Jun 2026 21:01:44 +0000
Manifest this update:     Sat 20 Jun 2026 21:01:44 +0000
Manifest next update:     Sun 21 Jun 2026 21:01:44 +0000
Files and hashes:         1: WB_mADfJlCgt_xSlZ9hPegF8MZQ.roa (hash: kxZ7EdAvbHTtvdvBXeZjcprnDUkeyC7fLZksUUvbJuo=)
                          2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: kd3Or2kQvlFeZ5b6sqnAswrmhMLBtluny5WPbKT6jm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e6:d6:e8:8d:d2:93:95:ba:11:aa:68:58:6f:f7:74:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
        Validity
            Not Before: Jun 20 21:01:44 2026 GMT
            Not After : Jun 21 21:01:44 2026 GMT
        Subject: CN=c9a68242da96a3905665e9cda955ba494b381ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:d2:3e:76:55:87:c8:b6:30:b5:bb:78:63:
                    32:7c:c1:c7:c4:21:18:b6:8d:cc:3d:ac:13:35:5c:
                    e2:02:c7:71:0e:c8:54:7e:32:7b:c1:e1:ff:be:da:
                    e3:38:ac:e7:e2:79:2c:d4:62:07:6b:e1:e3:04:af:
                    28:4f:68:da:72:ea:18:fe:63:7e:8b:66:0d:df:b1:
                    3f:f3:f2:7c:d3:5d:17:8b:c9:a5:b6:23:10:2f:57:
                    0e:25:73:ba:9c:ac:56:6c:fc:88:2b:21:d6:f2:77:
                    80:43:7f:b0:f5:b8:8d:2f:bd:e4:d6:69:c7:f8:52:
                    e8:b6:94:91:b2:13:f4:1a:51:59:58:93:45:d6:db:
                    59:9b:a9:29:63:61:88:2b:39:81:48:d8:60:c3:12:
                    57:9c:74:02:28:91:18:bc:39:34:df:28:33:ab:0d:
                    ca:6e:99:53:01:f4:3e:e6:ca:36:0d:36:00:42:60:
                    f2:cd:fa:31:02:59:36:13:43:f7:f6:15:a0:bc:d1:
                    bc:37:3f:65:02:be:4f:57:93:91:f2:b4:c3:5b:41:
                    7c:01:54:8a:d2:f5:53:e2:7e:e6:d7:15:df:a3:cc:
                    75:67:b7:33:2c:cf:e4:ea:09:fc:7b:38:7a:97:38:
                    e9:bc:ea:7e:10:54:31:5b:38:ae:8d:d7:85:c7:a9:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:82:42:DA:96:A3:90:56:65:E9:CD:A9:55:BA:49:4B:38:1F:FC
            X509v3 Authority Key Identifier:
                keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:50:3d:d9:60:cd:36:14:3d:f7:ef:72:37:0e:f2:88:0c:
         c2:bd:fa:d8:df:a9:2c:7a:07:b7:61:9f:e3:6f:c2:35:f9:2f:
         17:65:b8:34:42:42:c6:8c:03:16:e8:ca:4c:51:55:7c:cc:4d:
         ef:45:7b:97:bb:68:4e:8b:0c:1a:3b:a4:76:ef:f6:98:f2:e7:
         52:4a:d7:38:f6:0b:26:8c:38:76:8a:34:e4:f3:2d:24:c2:89:
         15:8d:46:d4:d8:be:bc:a9:5e:24:d1:c4:41:d8:91:70:1b:1d:
         8c:65:fd:15:50:97:c2:1f:2d:a4:7f:06:ac:05:d4:ac:15:e4:
         80:29:d1:2c:88:56:c6:a8:95:50:5d:be:16:4e:ba:e0:38:31:
         62:db:35:e7:ef:39:7d:f3:9f:22:45:1c:a7:6c:7c:34:46:da:
         0a:f6:79:4f:89:63:64:c4:f3:23:b5:3d:05:a6:83:0d:09:2a:
         93:41:a2:bf:20:83:2b:17:a6:42:1f:79:14:7d:56:1b:ff:0d:
         c4:01:35:dd:f9:6e:84:9f:c4:18:c7:7b:0f:cd:0d:ba:44:98:
         b9:54:97:b6:5b:a5:50:ff:79:ba:b9:b4:2d:89:02:fc:33:e8:
         a0:17:30:e5:a3:dc:28:70:43:09:60:d4:49:4c:20:7a:49:1a:
         21:5e:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:04:55 2026 by rpki-client