Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          yfHURx/WKLXbANFE30D63on46u8dbsrjagQkLmGUW5w=
Subject key identifier:   16:91:E8:5C:A3:34:03:A9:4D:5B:42:01:AA:31:76:D7:FA:34:D9:6A
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       019EBF5AC5FD651DD5901342355E073808A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 05:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:57 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: cn0w0TMw89MmSWVmuWVmp3+nk5L3432Tg3p4Pqnq2sE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:c5:fd:65:1d:d5:90:13:42:35:5e:07:38:08:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: Jun 13 05:00:57 2026 GMT
            Not After : Jun 14 05:00:57 2026 GMT
        Subject: CN=1691e85ca33403a94d5b4201aa3176d7fa34d96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:d8:b5:3b:16:8b:08:f6:0d:e1:07:71:0f:
                    e7:88:f7:30:55:13:c7:5d:bf:2f:fd:ad:af:db:2f:
                    77:4a:5f:c1:25:ef:08:50:18:45:37:ef:a9:ef:2d:
                    73:26:8e:d0:72:3a:2c:f9:67:18:77:f1:0c:3f:a3:
                    57:8b:69:51:8d:f1:e2:6e:b3:a9:5a:dc:ce:55:cf:
                    80:3c:0f:52:4c:f9:d7:3c:b0:b1:4b:c1:02:89:23:
                    12:93:24:dd:83:ff:fd:29:36:92:9d:8f:02:bb:a2:
                    64:7d:cc:03:c8:32:03:70:32:fd:2f:a8:79:25:45:
                    fc:4f:4f:99:14:d6:69:8c:d0:3a:c0:2f:36:d9:bc:
                    c8:04:65:15:34:1b:3c:27:3e:10:a6:e2:bc:70:b4:
                    be:99:39:67:11:84:8d:95:be:ed:ad:4c:05:f5:de:
                    81:fa:ea:2c:5a:0c:75:bf:ed:a9:b2:78:8b:35:db:
                    a3:6e:81:11:be:e6:0a:47:dd:3b:4a:d4:93:9b:1a:
                    50:91:ce:a8:e1:14:0e:68:e4:b7:f4:9b:99:16:97:
                    6e:61:b7:28:08:79:a3:cf:05:f2:31:a5:40:b5:9c:
                    d0:05:7f:67:20:9a:0f:2e:01:7a:53:4c:7a:8f:4f:
                    63:58:6e:1b:20:e3:59:a1:56:f6:f6:af:94:74:da:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:91:E8:5C:A3:34:03:A9:4D:5B:42:01:AA:31:76:D7:FA:34:D9:6A
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:c9:32:ce:bf:23:23:95:32:d3:85:1b:6f:51:e2:90:33:
         06:e2:61:60:26:69:de:10:16:10:1a:ca:5e:b0:fb:9b:33:88:
         33:64:ac:74:03:70:65:53:de:de:3e:57:e1:7b:f2:8d:dc:41:
         2a:49:78:78:d3:95:be:41:c7:60:89:bf:8a:fb:5c:db:38:fc:
         ba:e7:61:0c:5a:d5:db:37:2e:dc:ec:27:7f:fb:8c:12:41:13:
         5e:e6:fd:b8:fa:85:bd:d8:13:ba:af:35:1d:f1:8f:e0:59:e0:
         c0:75:b0:2c:f7:3b:bc:2b:90:85:af:5b:41:ab:56:b4:04:d8:
         9a:bc:eb:7b:c1:9c:fe:7f:b2:06:77:20:c7:23:31:d5:60:b3:
         c4:27:c9:d3:da:ae:45:70:f4:89:1f:29:41:dd:df:91:35:ad:
         ef:8f:d8:d1:69:8f:be:f7:87:c3:06:4a:86:a5:72:96:99:5f:
         4e:b8:da:28:ba:53:1f:55:fa:7c:1b:19:b6:dc:ca:2f:5f:2e:
         aa:f3:85:91:70:d6:7a:82:bd:e9:e5:be:3e:ea:ed:24:60:de:
         c7:26:e6:d4:18:da:61:2d:e8:56:99:22:23:6d:59:45:90:24:
         cc:a2:f0:51:d6:9a:d9:39:aa:fb:9f:9a:02:66:c8:8f:0a:00:
         64:dc:67:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WsX9ZR3VkBNCNV4HOAipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTBhNDAzNjY5YmVhYmYyYWQ3NmUwMDFjYjk3ZDE1ZDA3
ZTI5ZDkwHhcNMjYwNjEzMDUwMDU3WhcNMjYwNjE0MDUwMDU3WjAzMTEwLwYDVQQD
EygxNjkxZTg1Y2EzMzQwM2E5NGQ1YjQyMDFhYTMxNzZkN2ZhMzRkOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vrYtTsWiwj2DeEHcQ/niPcwVRPH
Xb8v/a2v2y93Sl/BJe8IUBhFN++p7y1zJo7Qcjos+WcYd/EMP6NXi2lRjfHibrOp
WtzOVc+APA9STPnXPLCxS8ECiSMSkyTdg//9KTaSnY8Cu6JkfcwDyDIDcDL9L6h5
JUX8T0+ZFNZpjNA6wC822bzIBGUVNBs8Jz4QpuK8cLS+mTlnEYSNlb7trUwF9d6B
+uosWgx1v+2psniLNdujboERvuYKR907StSTmxpQkc6o4RQOaOS39JuZFpduYbco
CHmjzwXyMaVAtZzQBX9nIJoPLgF6U0x6j09jWG4bIONZoVb29q+UdNqdOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaR6FyjNAOpTVtCAaoxdtf6NNlqMB8GA1UdIwQY
MBaAFOigpANmm+q/KtduABy5fRXQfinZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81MGUwMjYtMjU1OC00NTlhLWI2ZDIt
NmFlM2QwMDZjNjRjLzEvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS81MGUwMjYtMjU1OC00NTlhLWI2ZDItNmFlM2QwMDZjNjRj
LzEvNktDa0EyYWI2cjhxMTI0QUhMbDlGZEItS2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPrJMs6/
IyOVMtOFG29R4pAzBuJhYCZp3hAWEBrKXrD7mzOIM2SsdANwZVPe3j5X4XvyjdxB
Kkl4eNOVvkHHYIm/ivtc2zj8uudhDFrV2zcu3Ownf/uMEkETXub9uPqFvdgTuq81
HfGP4FngwHWwLPc7vCuQha9bQatWtATYmrzre8Gc/n+yBncgxyMx1WCzxCfJ09qu
RXD0iR8pQd3fkTWt74/Y0WmPvveHwwZKhqVylplfTrjaKLpTH1X6fBsZttzKL18u
qvOFkXDWeoK96eW+PurtJGDexybm1BjaYS3oVpkiI21ZRZAkzKLwUdaa2Tmq+5+a
AmbIjwoAZNxnkg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:33 2026 by rpki-client