Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          NSQCYPEOvv7+CgKN3+bCgFMV8dSTk+ZGn5yqnGC2PZ0=
Subject key identifier:   B0:55:8A:E7:C1:CA:84:17:F7:EF:51:FE:65:98:98:D3:3A:25:3D:4A
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       019EBE7F45AE9BC5F7FB529A9F2A3956AFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          103E
Signing time:             Sat 13 Jun 2026 01:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:12 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: t3wtk+JFi4ywHzYG+STejX2G2SdELvQxOO6LWh4YM90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:45:ae:9b:c5:f7:fb:52:9a:9f:2a:39:56:af:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Jun 13 01:01:12 2026 GMT
            Not After : Jun 14 01:01:12 2026 GMT
        Subject: CN=b0558ae7c1ca8417f7ef51fe659898d33a253d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5c:89:10:67:ee:3f:00:04:95:b2:40:f7:59:
                    d9:77:81:0c:d3:75:6c:dd:a4:f1:ee:dd:9c:47:fc:
                    59:4f:19:21:5f:86:a8:ad:ee:a2:9a:26:cd:a4:94:
                    c9:c6:23:46:e2:63:88:aa:0b:a5:b9:9e:a2:6e:52:
                    46:ce:09:ce:57:36:b4:7e:97:8f:2a:5e:2e:59:0e:
                    88:47:cc:27:31:60:36:6b:61:99:a3:27:06:28:78:
                    f0:69:af:d0:89:84:a5:38:5d:2d:63:53:80:f1:ef:
                    8b:cf:3f:85:c1:2e:4c:8e:5e:b0:86:0d:04:32:7b:
                    a8:a6:89:37:2e:aa:7d:6a:8e:69:9a:70:2c:09:0d:
                    5f:a0:3c:f4:94:d4:e1:71:c5:91:ad:da:7f:78:19:
                    35:ab:a2:30:79:62:60:89:10:a6:c7:99:f5:77:c3:
                    5d:36:eb:36:0e:99:b6:24:ce:7a:44:2e:18:e7:18:
                    44:f7:51:33:21:25:d9:80:dc:f2:ae:05:a5:ce:0e:
                    f3:84:06:0e:76:d7:49:8f:8c:84:01:90:2a:ab:d4:
                    0d:c0:c9:40:9e:dd:80:ea:ff:24:2b:f3:91:0b:f0:
                    eb:99:e3:6c:55:b9:d7:95:3d:56:4c:17:d1:ee:b0:
                    33:fe:ae:d4:22:c5:54:7c:68:46:28:ce:6a:d8:0a:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:55:8A:E7:C1:CA:84:17:F7:EF:51:FE:65:98:98:D3:3A:25:3D:4A
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:00:d5:a2:5e:3a:72:d4:3b:22:26:d7:45:c0:19:59:c6:6e:
         cf:eb:85:4c:59:01:6e:b8:83:c9:d3:b4:78:d2:13:5e:ca:16:
         77:f1:3e:ea:03:cb:da:2e:94:ea:c6:15:be:0c:15:59:82:24:
         b7:9e:36:5f:ad:c2:78:1a:81:ad:3c:70:ca:ef:fe:5f:9c:1a:
         fb:b2:5b:a9:b4:98:34:99:7d:32:a5:9b:4a:0c:0a:b5:06:cd:
         35:79:e7:36:50:2b:ed:1b:53:c5:9b:cf:f4:ad:dd:a8:4b:60:
         8e:90:8b:ad:98:ab:d4:a5:b1:0a:7c:0c:94:d0:78:c0:e7:a3:
         ef:73:0e:72:46:7c:3b:5d:9d:b5:3c:86:26:e8:72:d3:59:b3:
         ec:4a:27:58:e1:f2:c5:ee:4e:04:a7:c7:0b:be:be:e3:de:71:
         b0:f3:4c:be:69:7d:29:52:59:91:dd:79:2e:91:b4:60:d4:26:
         ce:ee:da:26:33:95:64:b7:05:51:f5:69:6d:9b:fd:cf:b2:ef:
         fe:7f:9a:b9:fc:4f:cf:1a:8e:7e:e6:7b:60:d4:cd:55:51:48:
         5b:ff:69:15:3a:6e:7b:34:68:e2:10:61:a9:68:77:05:58:1d:
         7b:0a:8a:a2:75:95:cc:09:af:04:cb:a9:5f:17:3d:90:54:78:
         bc:5d:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:00 2026 by rpki-client