Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
File:                     6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft (raw, json)
Hash identifier:          IL+bGK/XI/BAo+YAqENv5CK4B24ur2nAHEUjnAJiDpc=
Subject key identifier:   37:6F:4A:93:10:1C:33:C9:43:A6:E9:6F:80:9C:28:56:59:D7:E2:F4
Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
Certificate issuer:       /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Certificate serial:       019EBF233866BA31B306728799A701083EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
Manifest number:          06A8
Signing time:             Sat 13 Jun 2026 04:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:16 +0000
Files and hashes:         1: 6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl (hash: PapPOpCc1g+Uxq7aaFzxn/0MdX5drS3lqxlohOaAKNE=)
                          2: BVYN4mpgVpQOoKQGpc1xRKPLhCo.roa (hash: Z4P+UxXaSgUPpz9h0OSP10XtT9KI4gXF8z8dqug7dp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:38:66:ba:31:b3:06:72:87:99:a7:01:08:3e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
        Validity
            Not Before: Jun 13 04:00:16 2026 GMT
            Not After : Jun 14 04:00:16 2026 GMT
        Subject: CN=376f4a93101c33c943a6e96f809c285659d7e2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:5b:c8:d0:94:c7:7c:43:b6:ad:9b:fd:a7:
                    6f:54:1b:bd:e4:30:73:bf:a6:12:b8:e5:22:76:cc:
                    48:c6:c1:e8:f0:b3:29:3a:b8:a4:71:f0:6a:0d:1a:
                    0d:97:ce:91:58:a2:01:a3:ab:21:2c:f0:d2:35:e7:
                    9d:1b:0f:e5:45:62:86:3c:9d:55:92:2b:1a:56:a9:
                    49:dd:c7:6e:93:e9:a3:54:d0:97:d8:63:f3:d8:f9:
                    2f:87:e5:fe:47:20:e6:07:27:f7:c9:81:19:1a:9f:
                    39:f6:b5:77:36:27:1e:84:21:42:39:f8:8c:e9:11:
                    58:31:ee:82:d8:b3:c5:60:be:fa:8d:43:f2:42:3f:
                    2f:67:6a:05:a4:10:1b:cf:d0:e8:23:e6:59:36:38:
                    f3:30:48:54:20:c6:c7:19:30:dd:92:85:84:e0:a1:
                    74:52:5e:1c:05:ab:7c:e4:42:d9:1a:c4:cb:75:e3:
                    13:c0:93:ff:bd:2a:17:56:5b:dc:de:19:a2:fd:6a:
                    cf:60:22:0e:23:fa:1d:45:f8:e8:53:54:42:cc:48:
                    5a:e5:74:fe:4a:ef:1a:41:0c:4c:3b:37:21:0b:f0:
                    5a:40:62:81:f4:7f:21:64:62:80:5f:81:39:ea:ae:
                    70:a2:bd:6d:81:63:d0:c7:b0:d6:19:1d:0b:5f:6e:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6F:4A:93:10:1C:33:C9:43:A6:E9:6F:80:9C:28:56:59:D7:E2:F4
            X509v3 Authority Key Identifier:
                keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ec:69:1c:54:f3:e5:43:d0:69:8d:42:e7:76:77:6f:f6:59:
         79:a4:b3:cd:05:b2:93:4d:48:75:14:a9:c1:a0:84:99:f6:69:
         cb:c5:20:d2:a7:9c:9c:a3:02:92:0f:6c:df:ad:a6:6f:db:5c:
         5b:29:79:e8:b2:2a:e7:08:99:57:6b:1e:a8:6f:1e:10:35:4e:
         ad:b1:19:67:85:05:45:2c:b7:21:f5:58:c9:4b:c7:8c:a8:58:
         24:23:74:29:cb:5c:4e:93:7f:fa:44:5e:55:ec:b7:c8:6f:a5:
         76:a5:7a:29:17:b7:e8:99:62:8f:2c:d9:20:86:81:de:2a:6a:
         4d:cd:a9:de:67:30:93:78:b2:00:a0:b7:33:95:a2:d4:3c:e5:
         1f:c1:68:2a:36:83:c5:21:a1:dc:7b:a6:70:53:10:3b:2c:fa:
         1a:40:79:1d:a2:31:c3:b1:3c:5b:55:bc:99:60:60:f6:b7:62:
         40:44:ef:51:dd:6b:70:c6:5d:c2:6e:67:0e:a3:19:88:18:08:
         07:cf:f0:a7:90:dd:c8:4d:9f:20:59:7a:11:26:c8:3c:51:63:
         c3:a3:89:5b:9e:5d:68:bd:15:26:9d:a9:9f:f0:2c:e2:2f:c6:
         67:9c:c2:58:1d:2d:5b:c5:71:10:c6:a5:39:64:e1:19:97:03:
         ba:9d:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:03:10 2026 by rpki-client