Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          MhQdU7g5Uy3p0P32Y12y75oqEubXtcJ9/V1zjhlG39M=
Subject key identifier:   30:14:F3:C1:17:17:9C:D6:4A:2E:6D:22:F1:AB:7B:CD:12:F9:11:72
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       019EBF91866DC45B3E0DDEEB573D2BF4763C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          06EA
Signing time:             Sat 13 Jun 2026 06:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:45 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: fBmPndsjxUMXzkVx01BtTN+BMqyjAs4G1VUt5odej78=)
                          2: oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa (hash: FGb9nSTivNu/mVtaJHoZo1Y7HN3bgy2TP4MFuiqpk7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:86:6d:c4:5b:3e:0d:de:eb:57:3d:2b:f4:76:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: Jun 13 06:00:45 2026 GMT
            Not After : Jun 14 06:00:45 2026 GMT
        Subject: CN=3014f3c117179cd64a2e6d22f1ab7bcd12f91172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:c2:3e:a0:c0:fc:f4:28:5d:5f:c3:81:72:
                    a8:12:21:94:4c:f7:62:bf:9e:38:8f:e6:20:3e:f4:
                    e4:f7:ef:4e:6d:cd:21:d8:29:26:14:69:c4:df:42:
                    7a:2e:58:a7:db:27:b2:e9:80:78:70:ee:5f:04:8a:
                    f4:c6:0e:92:a5:cb:7e:e3:7e:f7:06:b0:61:86:6d:
                    ba:62:bb:a2:3f:37:96:41:9a:c4:95:28:c1:5e:7b:
                    c7:41:9f:42:3e:6b:fb:a1:8b:37:05:4b:92:f7:78:
                    f5:73:d3:9c:03:b8:f8:28:04:32:e4:e2:bd:8c:2c:
                    c0:3d:76:59:d5:2b:45:4e:13:fc:8a:a2:93:a8:f0:
                    ce:75:a8:9d:b5:f4:5d:da:d3:e6:62:c2:18:5b:da:
                    95:c2:5e:11:6a:f0:a2:d5:56:a9:d3:f7:ad:b6:97:
                    37:94:9d:ac:e6:46:96:86:5c:ca:93:64:c2:0c:f8:
                    eb:d9:e9:74:55:fd:86:11:38:6a:10:a6:5a:f5:89:
                    ff:41:04:9d:44:8a:fc:21:a3:4f:0a:35:0d:13:c8:
                    3b:11:1c:20:e9:7f:02:ac:4b:e3:b4:19:f7:1d:57:
                    4c:f0:5e:64:b0:8d:51:6d:09:3f:fd:7f:2a:85:eb:
                    40:d7:b3:80:b3:6b:47:48:16:33:b8:ac:c0:ee:8a:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:14:F3:C1:17:17:9C:D6:4A:2E:6D:22:F1:AB:7B:CD:12:F9:11:72
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3a:d9:d2:fb:02:31:f1:a1:93:e7:be:be:6a:17:b2:57:65:
         97:f4:20:b4:38:2f:4b:60:7a:50:b9:74:a6:24:2a:78:be:ae:
         ae:dc:e5:d5:c4:ff:88:a7:b7:8f:9c:38:da:37:b1:8a:d5:68:
         47:8f:f0:a2:65:c3:9a:7a:73:a7:56:94:b8:98:f2:65:3b:f6:
         77:e7:94:f6:c0:71:b9:bc:bb:d9:95:5b:b9:07:39:81:35:fe:
         64:de:68:76:83:cf:f0:33:b7:f9:b0:c7:3b:4d:65:46:eb:9c:
         89:c2:37:66:4a:5f:79:10:0c:c2:77:1b:f7:11:9b:78:f8:76:
         a8:3f:b0:f6:03:7d:fa:06:3f:ac:e6:28:38:37:50:e8:61:cd:
         34:cb:1f:09:f6:96:85:99:26:98:b6:ae:7e:fd:80:20:d4:02:
         b2:2f:ab:20:be:ee:ea:9e:2a:df:e9:00:7d:15:06:7c:f5:84:
         b3:cf:5c:90:b7:f4:50:2e:71:4f:7f:b6:c1:a2:16:e5:bc:20:
         1b:71:e6:ac:7f:e7:89:47:f8:a7:a7:86:7a:a4:d2:08:fa:81:
         7b:06:41:b2:cd:52:c0:3b:44:35:c6:52:e9:ea:01:18:f9:e2:
         1a:b4:d2:56:ec:82:77:15:70:f3:ca:46:ac:99:1f:e3:89:e4:
         a7:b3:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:42:05 2026 by rpki-client