Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          Wx2VhwTbL8FbmrlT9teqn5GhL1lfVVXpQ90Co06XnYQ=
Subject key identifier:   CA:A4:FB:F8:39:8E:E5:BF:65:AE:97:58:4D:A4:74:5D:78:7A:55:BF
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       019EBFC80434A368B1CC53745FAC06880315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 07:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:16 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: magWx4jiO3l3yG6rzFDfxJM5aYfvf6SmfM3PdNMBGNg=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:04:34:a3:68:b1:cc:53:74:5f:ac:06:88:03:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Jun 13 07:00:16 2026 GMT
            Not After : Jun 14 07:00:16 2026 GMT
        Subject: CN=caa4fbf8398ee5bf65ae97584da4745d787a55bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:8a:3b:12:47:0f:84:3c:eb:d6:79:9a:2d:
                    b8:e9:14:c7:e6:69:24:b7:ec:24:3f:cb:1d:ab:38:
                    65:69:82:0f:b5:23:8b:1b:cf:49:ca:e2:63:3d:4d:
                    03:48:57:80:89:81:9d:55:c4:30:17:9c:23:b1:7d:
                    bd:b0:0e:22:19:b6:45:f8:ab:52:a2:ea:90:0d:b3:
                    57:b6:9a:c0:c0:1d:d3:11:94:ed:e1:c7:d8:25:76:
                    fd:1e:cd:65:cb:32:9e:15:44:20:fd:21:75:38:90:
                    53:a0:07:7a:5c:f7:3e:53:0c:5b:58:f9:34:90:b4:
                    71:4e:a4:35:c6:53:4f:fa:eb:94:d1:32:2d:d7:24:
                    db:6f:8b:53:b6:34:27:ae:15:a5:28:81:b4:72:76:
                    b3:7c:8f:54:9e:d6:2c:3b:1c:a8:75:db:e6:0f:94:
                    50:1b:93:32:5f:d8:a1:27:d5:5d:46:66:26:bd:b2:
                    c0:8c:18:90:52:b3:cb:2d:ec:40:34:6e:8b:b0:16:
                    c7:ab:19:e0:5c:39:6e:f5:01:36:85:f0:aa:0a:87:
                    2f:a6:5e:47:41:7c:63:25:aa:1e:f2:b7:79:33:1e:
                    f4:fc:82:01:14:e6:de:59:9d:13:39:02:e8:98:87:
                    24:3d:4b:10:77:10:17:34:09:2c:cd:e9:99:ac:b4:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:FB:F8:39:8E:E5:BF:65:AE:97:58:4D:A4:74:5D:78:7A:55:BF
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9d:7b:d1:a2:10:44:6d:66:29:b8:b4:72:f0:e7:06:31:28:
         46:77:18:14:b6:85:5c:ae:e6:3f:26:1c:2d:f7:04:01:8f:57:
         44:24:45:62:36:c1:8a:e5:a3:a6:de:d5:54:42:3b:d6:14:83:
         65:c2:a4:43:2a:44:3f:1f:5a:f4:76:13:3e:91:d3:a8:cc:fa:
         9e:26:b9:ff:de:14:13:76:0a:f8:69:a0:39:f2:2d:65:86:4f:
         7f:b3:41:2a:91:3f:9d:bd:59:72:26:ac:48:fe:5d:b9:40:55:
         a9:b6:93:70:d9:6b:1f:2d:b3:13:70:a2:61:16:aa:96:9e:59:
         40:02:e5:0e:d5:ff:a8:34:a3:6b:df:b7:e4:e1:a2:f1:0c:79:
         7a:d6:f8:a5:c6:48:07:55:58:7e:c7:89:48:00:4c:ae:73:35:
         29:4b:98:0d:95:74:fd:84:5b:64:81:fc:82:b0:40:82:1a:26:
         91:a7:28:53:65:05:c8:ef:33:e7:ba:a7:9e:70:cf:3b:83:82:
         a3:8a:a6:3e:78:c2:13:b0:43:85:f9:6a:66:a9:16:4d:d2:cf:
         0f:cc:ad:cb:80:9f:56:9b:d0:8a:46:6c:41:b9:66:61:59:c2:
         13:af:8a:4e:f9:e7:cc:88:e6:34:f8:b6:0a:9a:1f:69:83:77:
         c4:93:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:41 2026 by rpki-client