Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          wBOMv1faekmhGwRjHi/wHm+JeS5K0YO3xlVIWx5QCEg=
Subject key identifier:   65:19:65:7B:68:D5:E0:EE:5E:71:E1:76:E3:8B:B6:A7:84:6D:1A:D3
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       019EBF5A6B15E12749785005497473CD49D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          103B
Signing time:             Sat 13 Jun 2026 05:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:34 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: nDATlHuF2Y3ZSh1TUok80KijuV0MgOD4bMk5mCNOWgU=)
                          2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:6b:15:e1:27:49:78:50:05:49:74:73:cd:49:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Jun 13 05:00:34 2026 GMT
            Not After : Jun 14 05:00:34 2026 GMT
        Subject: CN=6519657b68d5e0ee5e71e176e38bb6a7846d1ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:7a:c4:ce:ba:4e:07:a1:1c:52:f9:fa:c0:
                    1b:8c:20:61:2a:9a:f3:6c:9f:90:4c:d7:f2:81:e3:
                    b5:b8:98:14:04:09:2f:b4:9d:c9:02:4d:b4:02:0d:
                    ab:a3:24:4c:41:4f:fe:76:44:e5:af:a1:21:08:61:
                    56:14:bb:ef:1e:45:01:4e:df:aa:8d:98:ec:19:d4:
                    0f:27:50:30:ca:6c:ee:ed:3d:20:ab:43:42:94:d8:
                    b6:bf:50:cf:dc:73:a9:ed:b5:7a:27:e9:f2:e6:1b:
                    35:bc:19:fd:06:b8:a3:00:4f:24:c8:db:8e:ca:61:
                    de:e7:23:f5:32:43:05:6b:f9:9a:a4:08:34:96:c8:
                    55:93:f1:7d:a6:50:a2:9e:26:94:08:fa:f6:43:d1:
                    33:af:28:9d:e5:2e:34:8b:9e:da:cf:a7:fb:94:6e:
                    70:aa:6c:32:2a:63:dd:c8:1d:74:b0:d0:f1:51:45:
                    aa:2f:4a:22:5c:95:39:10:b8:29:19:36:5a:e8:81:
                    14:34:6e:4f:73:61:ac:5b:44:7a:23:73:b0:7f:34:
                    bf:58:1d:2a:64:fa:2e:a0:4e:5b:d7:a6:f5:42:19:
                    52:60:28:8c:c7:13:b5:76:4a:e9:8a:6f:3c:44:77:
                    50:ef:80:54:ea:21:21:eb:94:f0:2e:f5:3a:be:1e:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:65:7B:68:D5:E0:EE:5E:71:E1:76:E3:8B:B6:A7:84:6D:1A:D3
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:01:40:53:9d:5e:42:a2:b6:d0:1b:f1:b5:d8:63:e6:d4:
         96:b4:0e:1c:a6:c0:af:fc:3e:81:8e:19:dd:76:dc:e4:23:ed:
         b9:c0:59:e3:41:d9:22:d4:65:19:4c:6a:78:a6:04:b7:b0:76:
         4e:2b:48:5a:af:dd:08:a6:20:75:ed:00:10:8f:da:93:19:01:
         45:f9:d3:3a:7d:30:71:73:7e:ac:25:3a:3f:a1:6d:42:17:1a:
         82:eb:b7:9d:bd:65:3e:91:b2:83:4a:bf:62:ca:62:94:78:21:
         87:22:af:7d:08:d4:09:40:e6:8f:9f:3d:f3:74:fe:bf:80:8c:
         b2:ee:50:6d:80:b2:1a:33:0c:e0:9a:41:c2:4e:dc:8c:0d:6f:
         69:a6:f6:0f:dc:5a:1e:97:24:7b:41:31:b0:bb:b1:c7:e9:42:
         23:ec:f8:7a:d4:70:a5:0f:d7:7e:41:f2:78:8a:23:19:f7:c5:
         37:bb:fc:c3:74:5f:09:7e:2e:77:1c:23:4f:97:49:32:eb:b3:
         c0:b3:5a:1b:5a:9b:00:19:e6:95:80:c1:49:2b:45:ec:b8:d3:
         ee:93:73:36:0a:04:fe:54:5f:d0:77:ac:89:d5:07:0e:4e:88:
         08:d3:6f:9f:ef:8e:75:c7:59:3d:cd:64:86:4c:15:46:fa:73:
         c2:bb:4b:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WmsV4SdJeFAFSXRzzUnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy
ODM2ZGMwHhcNMjYwNjEzMDUwMDM0WhcNMjYwNjE0MDUwMDM0WjAzMTEwLwYDVQQD
Eyg2NTE5NjU3YjY4ZDVlMGVlNWU3MWUxNzZlMzhiYjZhNzg0NmQxYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kV6xM66TgehHFL5+sAbjCBhKprz
bJ+QTNfygeO1uJgUBAkvtJ3JAk20Ag2royRMQU/+dkTlr6EhCGFWFLvvHkUBTt+q
jZjsGdQPJ1Awymzu7T0gq0NClNi2v1DP3HOp7bV6J+ny5hs1vBn9BrijAE8kyNuO
ymHe5yP1MkMFa/mapAg0lshVk/F9plCiniaUCPr2Q9Ezryid5S40i57az6f7lG5w
qmwyKmPdyB10sNDxUUWqL0oiXJU5ELgpGTZa6IEUNG5Pc2GsW0R6I3OwfzS/WB0q
ZPouoE5b16b1QhlSYCiMxxO1dkrpim88RHdQ74BU6iEh65TwLvU6vh5qIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUZZXto1eDuXnHhduOLtqeEbRrTMB8GA1UdIwQY
MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt
MDY1ZWQ0ZDg0NDFmLzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm
LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOwBQFOd
XkKittAb8bXYY+bUlrQOHKbAr/w+gY4Z3Xbc5CPtucBZ40HZItRlGUxqeKYEt7B2
TitIWq/dCKYgde0AEI/akxkBRfnTOn0wcXN+rCU6P6FtQhcaguu3nb1lPpGyg0q/
YspilHghhyKvfQjUCUDmj58983T+v4CMsu5QbYCyGjMM4JpBwk7cjA1vaab2D9xa
Hpcke0ExsLuxx+lCI+z4etRwpQ/XfkHyeIojGffFN7v8w3RfCX4udxwjT5dJMuuz
wLNaG1qbABnmlYDBSStF7LjT7pNzNgoE/lRf0HesidUHDk6ICNNvn++OdcdZPc1k
hkwVRvpzwrtLoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:32 2026 by rpki-client