Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          fLfX3aPmuzzylglC3I1gRlyUNJvJIG6Ismvaovf9gh4=
Subject key identifier:   95:0B:8B:F1:D8:13:20:10:8C:C9:71:A4:20:58:A5:BC:12:60:AE:13
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       019EBE7F8C2AE7BC233B531BF7327CEB390E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          1180
Signing time:             Sat 13 Jun 2026 01:01:30 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:30 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:30 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: 2wqPwxXc72fgaHA8J5wTw6JpOXhZYek1RS0CGY4vt3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:8c:2a:e7:bc:23:3b:53:1b:f7:32:7c:eb:39:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Jun 13 01:01:30 2026 GMT
            Not After : Jun 14 01:01:30 2026 GMT
        Subject: CN=950b8bf1d81320108cc971a42058a5bc1260ae13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:e1:4a:b7:86:12:95:42:53:81:e1:a1:7e:
                    c2:f4:67:c4:2b:1f:82:55:fb:64:82:ac:38:8d:03:
                    43:0d:31:9b:80:11:63:94:99:d5:1c:24:a4:28:1c:
                    93:7a:0b:9f:95:38:84:45:2a:1f:6f:d9:c8:26:ec:
                    8a:cc:a3:14:91:96:41:66:c0:29:4f:65:a2:44:f0:
                    e5:cb:ce:18:02:cd:eb:e7:0f:46:81:9f:c3:55:27:
                    03:03:34:58:f4:f4:76:1d:f9:bb:69:83:d8:f7:58:
                    44:5e:03:67:48:19:38:74:08:a5:3d:97:78:da:95:
                    da:ac:dd:3a:73:8d:b9:b0:ee:a1:41:8d:f4:28:0c:
                    1c:a4:3d:ff:11:30:07:c1:83:7a:5f:41:a1:39:9f:
                    1e:de:1e:cd:7c:60:b1:19:e7:52:db:ee:9d:ba:74:
                    78:8a:23:5f:aa:44:d3:0b:9b:10:87:62:b4:29:da:
                    46:7b:9b:ff:63:25:8d:5d:65:dd:fd:d6:29:46:83:
                    82:ee:c5:5c:a0:e0:2c:a6:cb:4c:c5:fd:ff:f6:0f:
                    4d:20:c3:4c:81:58:c0:5e:c8:7a:76:fa:a8:09:d8:
                    41:11:3c:29:1a:01:a9:de:99:bf:e9:57:cc:24:0d:
                    93:07:fb:89:43:ac:30:a9:6c:e2:41:86:dd:86:09:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:8B:F1:D8:13:20:10:8C:C9:71:A4:20:58:A5:BC:12:60:AE:13
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f9:35:48:55:4c:34:ec:91:b2:0d:f0:e8:46:8f:9c:6a:be:
         1d:de:bb:c4:c2:31:c4:1f:eb:a8:77:57:e1:3d:20:dc:dd:4f:
         a5:f0:05:a1:d6:24:e7:44:c3:48:91:36:9c:57:2a:c8:37:08:
         89:58:03:a6:9a:34:90:64:4a:48:f0:1b:1b:a8:67:6c:14:aa:
         64:ae:ee:d5:53:98:a1:08:9c:c0:55:09:7f:71:69:3e:bc:58:
         10:01:1c:ec:d5:15:0e:f5:1e:6a:22:aa:a6:d9:ba:7a:43:d7:
         3d:c0:df:64:67:a2:b9:a7:8f:61:5e:2f:84:e8:4a:77:94:14:
         4b:c2:e6:c1:be:7f:e3:3f:4d:e0:71:5d:82:6c:00:e2:9e:a8:
         a5:67:16:bb:df:49:61:a9:1f:d4:3a:ad:69:b2:6f:ba:a4:59:
         4b:58:ba:2b:ab:86:89:29:c5:8a:18:e4:d5:5f:85:1e:c9:92:
         39:23:90:24:dc:52:74:04:05:c3:36:e4:ab:31:37:65:b8:0f:
         df:e4:3e:11:16:62:bb:d8:48:a5:04:0f:9e:c9:0d:5a:e2:92:
         8e:44:26:a4:d6:77:71:9f:bf:55:cb:0f:ea:1a:c3:6c:e4:c8:
         59:ab:36:60:f6:0a:0e:13:09:a1:ee:98:26:41:3a:72:b8:02:
         ae:35:4d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:02 2026 by rpki-client