Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File:                     1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier:          WQMHKoyp1smQyrm7bk34cj/nbDU9c665Czb11wrfYFQ=
Subject key identifier:   48:94:55:37:87:81:43:BC:5A:0F:50:4F:19:31:C8:9F:EB:39:41:F8
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer:       /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial:       019EB922454C596F586F8EBA3938C1230FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number:          0D0E
Signing time:             Fri 12 Jun 2026 00:01:31 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:31 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:31 +0000
Files and hashes:         1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: GXCZeJF9eC8lUxpmNdXBHrxctFkeU4kLFrdzjQXdnEA=)
                          2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:22:45:4c:59:6f:58:6f:8e:ba:39:38:c1:23:0f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
        Validity
            Not Before: Jun 12 00:01:31 2026 GMT
            Not After : Jun 13 00:01:31 2026 GMT
        Subject: CN=48945537878143bc5a0f504f1931c89feb3941f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:cd:a9:47:15:77:21:f3:59:96:f6:02:d0:
                    b7:ae:b7:81:dc:33:de:ae:a2:9a:96:65:6d:09:f2:
                    e4:5d:a4:cb:b6:29:88:db:b5:7a:5c:6f:37:b6:24:
                    59:6a:9c:3b:7b:6c:5b:93:8b:d1:9b:1c:f2:da:fb:
                    bb:b9:89:1c:bb:29:35:5e:a1:2d:94:cd:7a:05:9c:
                    d8:78:65:4e:67:2e:fd:92:2e:ea:71:71:e8:d2:91:
                    8f:ea:7e:ea:c0:46:38:34:08:fc:96:05:15:0c:95:
                    76:65:b3:cd:96:c2:ea:f5:0c:9a:90:1a:86:b5:fb:
                    87:f3:a0:43:15:55:d1:9c:c4:6c:b3:b7:2e:f6:bb:
                    a6:06:f7:64:a9:f1:84:8b:a3:ea:5c:05:a3:6b:30:
                    cc:b6:53:d4:8a:d0:1c:71:b7:8b:12:1d:38:60:d9:
                    25:df:69:19:b4:08:48:7d:dc:c6:0b:06:c4:9c:ed:
                    0a:1b:ec:3f:72:a7:e5:a8:3b:a7:5a:a8:77:7e:52:
                    9a:2d:18:bc:10:55:05:54:10:a0:cf:a0:d3:eb:e1:
                    50:36:08:34:93:69:e0:ca:c1:de:74:93:27:3c:73:
                    b2:ff:af:51:6a:c6:34:f2:41:65:7d:37:e4:ba:0a:
                    89:74:d2:4c:2c:da:95:df:df:a3:c2:ef:cd:e0:f3:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:55:37:87:81:43:BC:5A:0F:50:4F:19:31:C8:9F:EB:39:41:F8
            X509v3 Authority Key Identifier:
                keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:2e:22:07:c5:f1:23:ba:53:f0:2a:35:0b:0f:fb:44:9d:
         fb:71:9e:9a:e4:ae:f1:44:3e:e1:cc:1b:1d:9f:c8:1f:ba:a2:
         7c:bb:ea:86:07:cf:95:40:50:82:42:7f:c1:7e:c8:74:3c:66:
         e4:a6:d0:b1:d9:a4:d6:40:8b:e0:1f:62:74:80:d6:ee:d4:e2:
         35:bb:26:a8:a0:3e:d0:73:de:e0:ca:6a:63:2f:ab:27:1f:d8:
         c2:c2:11:6d:a7:23:65:50:49:78:8e:70:3e:0e:6b:5d:bc:c5:
         e5:61:05:af:9e:94:1f:4e:c2:5a:e7:c9:2e:7c:73:48:39:2d:
         82:d9:17:91:cb:5c:5a:1b:fb:30:66:6d:6a:d4:c1:28:a1:e9:
         38:7e:bd:a0:14:6c:10:11:21:59:7b:88:74:26:3c:45:a2:29:
         cd:c9:3a:7e:08:0e:11:c3:b9:ff:b0:57:cb:be:8c:a5:16:e3:
         02:b7:89:5f:dd:2a:86:a6:a5:d4:46:5c:04:f1:b4:60:fb:65:
         d8:91:71:21:4f:8c:02:9f:cd:22:80:d0:7f:65:ea:b7:54:d7:
         73:6a:c3:35:b2:5f:91:31:97:bb:01:79:be:1f:86:b7:39:d9:
         96:03:a2:ef:96:26:12:0a:bb:90:a7:12:10:e8:d3:d1:9f:14:
         85:47:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:26 2026 by rpki-client