Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          Vrach75KhhCvWXWEKagat7ihEtYf/C7nBblo1kEyhO0=
Subject key identifier:   18:AE:8B:76:71:EF:33:42:43:F5:31:DB:4A:27:71:A4:BE:CA:56:35
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       019EBDA2BBC919F500AD90252FABA4A43B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          197B
Signing time:             Fri 12 Jun 2026 21:00:19 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:19 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:19 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: LItlCKfRHcLydty7nMqt4BtWJpdqx6PO4KqEb7Wqzco=)
                          2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
                          3: EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa (hash: V48zZ4foJ1VYrvY794dgxk2ozwFXIlT+k/ehWKBbp5M=)
                          4: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
                          5: qxKkXUKEb_RmYwj64WILdO86YXg.roa (hash: OlMznN7mGZobtXI40d2HQSpq6oX2XRgwBJrJMz7Rp1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:bb:c9:19:f5:00:ad:90:25:2f:ab:a4:a4:3b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Jun 12 21:00:19 2026 GMT
            Not After : Jun 13 21:00:19 2026 GMT
        Subject: CN=18ae8b7671ef334243f531db4a2771a4beca5635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:7f:b9:06:f0:4d:24:72:0e:a2:5b:aa:44:
                    35:42:b9:21:20:2c:1f:e9:db:e4:56:7e:bc:21:cf:
                    c0:ff:0d:22:30:cd:b8:f6:3f:00:5a:45:1f:ad:35:
                    31:29:4c:f6:fc:4c:45:76:cd:7e:35:6b:26:20:cd:
                    0b:a0:3b:e9:0c:16:0a:55:33:ed:b1:8a:09:27:b2:
                    33:dd:c4:8a:c3:db:2a:20:2c:bb:74:76:b9:37:26:
                    93:e1:d0:1e:94:21:54:f7:ee:fa:40:1a:0c:66:bb:
                    2f:f1:ae:d3:1c:73:62:55:cc:9d:88:0b:17:ad:59:
                    24:1c:a2:ad:8e:6f:40:d4:1e:fc:a0:c4:46:f2:78:
                    b0:c0:13:b3:30:56:2b:23:14:da:93:ab:49:7f:0b:
                    ae:9a:24:9c:dd:2b:3c:80:cd:40:50:3c:69:04:69:
                    90:80:f0:1d:22:24:e7:9c:2d:cd:2d:30:c0:17:a1:
                    93:30:42:e5:e9:42:67:c1:8c:3b:25:12:78:a3:24:
                    43:b4:44:03:d4:3e:1c:80:84:22:44:f7:ad:98:81:
                    ad:ef:1d:44:c0:4d:26:67:fb:6a:3e:3f:15:c8:c9:
                    d5:51:d9:d0:3d:fc:c0:11:22:8e:be:84:ce:27:a0:
                    d1:d3:a4:00:b8:ef:2c:e0:91:71:0f:90:31:a2:ca:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:8B:76:71:EF:33:42:43:F5:31:DB:4A:27:71:A4:BE:CA:56:35
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:42:b6:c4:59:3f:bd:96:2f:6c:13:bc:b2:90:8d:55:d4:d8:
         a2:43:ad:95:9a:f8:f4:ef:52:6f:e5:e4:c9:81:e2:b7:61:b7:
         d7:57:c8:95:cf:d0:63:0f:6b:d3:9f:02:86:bd:39:41:79:5b:
         4d:14:69:71:c3:50:42:d4:39:dc:54:83:45:f9:e4:67:91:63:
         e8:cf:03:43:b9:be:20:98:90:b8:85:aa:bc:ce:01:d0:1f:5d:
         f4:17:31:3a:d9:cb:c8:54:12:dd:a3:1a:a8:dc:94:94:bc:49:
         da:2c:7c:83:bd:c1:39:bc:31:98:7b:48:84:48:d0:22:84:c7:
         af:34:94:b9:dd:38:da:0b:42:d8:40:57:30:06:e0:9e:9e:e3:
         cb:81:21:d7:8d:71:8c:e5:86:3f:9f:66:6e:fc:2c:52:d1:ca:
         1f:79:af:a8:fa:ae:96:59:1d:1b:22:98:ec:4f:c1:1d:e4:aa:
         54:e6:a7:b8:f4:25:a7:fd:b0:93:65:92:03:1f:1e:ac:16:73:
         6e:ec:56:de:b1:85:da:8a:f9:66:e9:d6:16:1a:b4:42:0b:7f:
         1d:f5:76:30:91:38:0e:c0:13:b1:db:60:0e:6e:23:7c:03:8d:
         6b:81:bf:f1:fa:60:a1:70:e3:80:0d:3c:ea:b4:23:a2:71:b9:
         0c:d4:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:34 2026 by rpki-client