Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          SUHRPM8L3WSHKvaXKn+USQX2Q5gLXU1NQ6+MHhfLpI8=
Subject key identifier:   18:72:06:30:B9:C2:45:6F:FC:F2:AE:19:5F:41:2F:46:43:D0:7B:74
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       019EBF916B70138E7389C4339DDF25BADD46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0C95
Signing time:             Sat 13 Jun 2026 06:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:38 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: PlsRjzdy3v9tTPce6Rxrf0Jk/s1g9PJC+ua9UgJK27Y=)
                          2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:6b:70:13:8e:73:89:c4:33:9d:df:25:ba:dd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Jun 13 06:00:38 2026 GMT
            Not After : Jun 14 06:00:38 2026 GMT
        Subject: CN=18720630b9c2456ffcf2ae195f412f4643d07b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:98:b4:9b:3d:aa:41:0a:fb:c8:85:12:26:
                    5f:49:d2:e0:5d:d0:1b:95:df:31:d5:6c:57:50:e7:
                    02:f8:8a:17:61:bc:fb:8a:8f:9c:08:83:21:b4:24:
                    a8:3e:5f:82:9f:7c:ff:26:e0:26:69:f7:64:80:6c:
                    d2:99:8d:7b:b8:ed:7f:33:09:5c:16:59:c9:dd:7c:
                    6d:b9:fd:d4:ff:ab:4e:49:5d:ad:d0:a6:a5:fd:89:
                    ce:93:76:f1:df:01:c6:57:bf:a4:0c:e5:aa:2c:a7:
                    a0:25:82:5c:97:d9:57:46:ef:fa:95:c6:51:eb:08:
                    65:2d:d2:6c:53:0c:81:71:24:4e:26:59:ea:02:59:
                    be:74:a7:38:70:b1:de:69:71:8b:1e:c3:c1:3e:34:
                    6a:54:7b:8d:79:2c:bd:5f:f0:5f:76:75:45:ab:88:
                    74:19:a5:f7:fb:0a:c6:f1:64:ae:84:09:b7:cb:c5:
                    31:24:bc:be:2e:c3:fd:75:b1:67:49:29:5a:1e:fe:
                    95:25:3c:79:cd:df:c7:5f:a0:8c:38:9c:f5:14:22:
                    ee:f0:08:ab:d3:8e:6b:fa:35:3d:f7:2a:b8:41:1d:
                    e6:09:35:fe:6f:d5:cc:15:6d:9d:64:7e:8e:91:06:
                    0d:2c:d3:25:56:f1:12:7f:be:f8:c1:38:81:7c:48:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:72:06:30:B9:C2:45:6F:FC:F2:AE:19:5F:41:2F:46:43:D0:7B:74
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:1b:8a:30:2c:79:b3:5b:dd:65:07:e9:5b:5f:be:8f:43:
         26:5b:46:8d:57:10:8a:96:cc:d9:f8:14:ee:21:d6:b8:e2:88:
         a8:d0:f5:9e:21:2f:71:70:89:99:b4:ed:e9:bb:b1:59:27:be:
         de:82:7b:6c:48:b6:35:d6:d1:26:43:b5:2f:ea:66:b7:01:04:
         64:26:85:9f:f0:dc:3c:80:e9:39:34:27:c7:4f:12:37:5c:86:
         5b:2f:f4:ea:29:1a:c6:52:c1:2a:ce:a9:b1:88:c7:2c:59:60:
         1f:7b:b0:49:cb:0c:34:bb:9f:40:2d:6b:da:cd:b3:bd:91:06:
         13:df:ca:f8:9e:e5:7f:e0:14:e4:43:86:44:b8:ea:58:2e:6d:
         63:53:cf:56:3f:6a:4f:3d:54:62:54:13:fd:30:39:35:73:5a:
         35:3f:2d:11:1c:19:f0:37:61:fc:a9:89:ce:f1:e5:14:e1:99:
         e9:cb:40:24:52:7f:c5:ed:c1:e1:ac:d9:78:62:e5:f1:00:18:
         8f:47:9a:3c:42:f3:7d:63:97:ba:dd:0d:85:4d:5e:b6:18:d0:
         12:b4:7a:71:88:24:f0:52:cc:41:38:c5:e7:84:3a:2b:f5:b4:
         bd:06:09:6c:e7:c2:f9:ce:1c:fb:d1:ef:b7:89:d4:92:c2:90:
         34:df:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:19 2026 by rpki-client