Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
File:                     6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft (raw, json)
Hash identifier:          PYVkzXZTuTrcNBjcDzQhSVXgtgGuXvFZfAPGbT0JLFQ=
Subject key identifier:   8A:DC:13:CF:D5:7F:4D:6E:0F:2D:AA:5E:59:9D:81:6D:39:2C:92:3B
Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67
Certificate issuer:       /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
Certificate serial:       019ED42AE686A9FAFB0CD0D27EAA193E3244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
Manifest number:          02CD
Signing time:             Wed 17 Jun 2026 06:00:41 +0000
Manifest this update:     Wed 17 Jun 2026 06:00:41 +0000
Manifest next update:     Thu 18 Jun 2026 06:00:41 +0000
Files and hashes:         1: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl (hash: wuZ7x0HOOPJYUkuU5Q0Bi3JIg3tWR7DrJPZmS+B99zU=)
                          2: n26cCYAcOhIFYAKn4bjFjFh7xRc.roa (hash: DPfOpP0A4iPdwjipLuqhqxwCuOKqp7u2xmFkTIq4Dqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2a:e6:86:a9:fa:fb:0c:d0:d2:7e:aa:19:3e:32:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
        Validity
            Not Before: Jun 17 06:00:41 2026 GMT
            Not After : Jun 18 06:00:41 2026 GMT
        Subject: CN=8adc13cfd57f4d6e0f2daa5e599d816d392c923b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:be:ef:83:3f:48:e0:8e:91:91:41:f3:62:
                    5f:87:e5:be:1d:6f:da:d2:ed:d1:8e:40:32:70:41:
                    11:8d:4d:6e:57:18:c7:ac:43:cf:ee:1e:14:22:74:
                    da:b5:b4:f6:d6:ed:3e:f4:59:b7:4f:53:e6:9f:c8:
                    d1:41:38:75:25:3a:70:f6:b2:ad:e5:4c:f1:ab:ac:
                    f8:9c:b0:df:44:1a:2a:4e:c3:58:c7:3d:88:f8:5f:
                    6d:ac:c7:8e:89:bf:8d:2f:b9:76:6e:04:f3:e8:6f:
                    d4:d1:21:46:b1:10:a5:45:fa:c3:75:8e:52:e3:13:
                    67:d2:b7:97:ef:21:72:68:32:27:0d:d5:41:f1:4b:
                    73:bd:7f:45:b4:df:76:df:d7:71:36:b5:f1:4b:bb:
                    0f:ce:3f:9f:0a:cf:7b:56:03:4d:37:c7:c9:dc:95:
                    d5:7e:4d:3e:28:3f:2a:3d:fa:3f:fa:c8:ed:d4:ce:
                    75:12:2e:1b:8f:22:f5:f3:0c:51:e7:eb:5a:3c:e0:
                    6f:e0:8d:a7:59:31:e6:de:e1:68:09:e4:0c:a6:61:
                    39:0f:65:54:4a:98:50:38:03:48:a3:39:68:2c:fe:
                    87:e1:1f:f9:f2:87:72:ec:d8:b9:86:2f:fc:50:27:
                    74:ec:17:b6:eb:e9:8d:7c:10:6d:d4:38:39:62:02:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:13:CF:D5:7F:4D:6E:0F:2D:AA:5E:59:9D:81:6D:39:2C:92:3B
            X509v3 Authority Key Identifier:
                keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:b9:b0:61:e0:18:04:c4:4f:7c:8a:38:18:19:23:50:f3:
         29:32:4f:b2:75:da:98:d3:66:e5:c7:b5:d3:f7:ce:b3:08:0b:
         d5:a4:47:80:c4:87:a0:62:45:d7:8a:32:93:92:18:6d:20:db:
         4d:ef:cb:03:eb:0d:ee:26:0a:f2:16:29:01:d5:51:12:c7:ee:
         df:d4:d0:06:84:dd:1f:97:39:e0:81:ca:79:f8:ac:0a:e4:d2:
         a4:71:11:6f:46:b4:de:6e:c6:a2:5d:f5:c3:f9:b1:04:a3:bb:
         fd:c0:ab:56:38:4a:5f:54:9a:86:f4:c9:1c:cc:80:ca:05:0f:
         71:34:48:1a:a9:46:20:a9:72:79:b5:c0:15:c7:4e:eb:cd:cb:
         42:f0:cd:ab:70:1e:f7:1a:b3:c1:26:11:95:e5:c7:1e:42:1a:
         a0:5f:00:d9:12:44:8f:d4:e5:6c:14:09:59:d9:ea:85:1f:ee:
         2f:a2:be:1a:1e:05:5d:33:f6:c5:94:83:8d:c6:8e:b3:13:b4:
         a7:f6:8a:5a:1b:e7:a9:6a:4f:0a:b8:15:d9:8c:29:33:a1:ed:
         56:2f:10:80:48:cf:40:7f:94:a7:51:69:75:94:8f:b7:88:4b:
         65:25:68:a6:46:7d:69:0c:47:b8:66:36:42:af:1b:99:66:85:
         b8:dd:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:03 2026 by rpki-client