Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          9VgOF8psaUye2xrlEErPOt2G4XYWhP4jMN8NjUOt0mE=
Subject key identifier:   82:F3:97:40:B2:EA:3A:37:6C:79:34:ED:E4:F8:F3:DA:65:2B:FF:1E
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       019EC25C448490B381EF25BD717403763170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 19:01:27 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:27 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:27 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: 7zI1XiWUOraXt/I06gAFTraVfo8ZaTV6B2QOGMNyWDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:44:84:90:b3:81:ef:25:bd:71:74:03:76:31:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Jun 13 19:01:27 2026 GMT
            Not After : Jun 14 19:01:27 2026 GMT
        Subject: CN=82f39740b2ea3a376c7934ede4f8f3da652bff1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2c:ba:9a:a4:9b:45:d9:92:c9:b3:c9:a7:c8:
                    c7:62:04:9f:a5:85:db:aa:0d:63:3d:bb:c0:22:69:
                    66:46:42:70:02:2b:98:31:db:fc:ba:c2:ef:73:50:
                    16:2e:e6:69:43:68:05:9c:85:06:d2:6d:51:92:6b:
                    71:a4:bb:5e:e0:90:a9:ef:ff:9c:43:63:05:a8:cd:
                    fe:83:be:87:78:20:9b:9e:03:7a:63:cb:f4:a3:dc:
                    a5:d7:80:d1:35:ba:c3:37:14:70:a9:45:d7:1c:ba:
                    62:69:b2:46:c0:c6:f6:32:21:7e:f8:c1:93:8d:58:
                    67:1e:14:e8:c3:26:fc:9e:f0:cf:47:e3:b3:8d:7f:
                    24:4c:4c:42:47:94:77:f6:3e:94:9e:f9:55:ed:e1:
                    c1:8f:92:de:c2:59:d6:b9:ae:6c:38:88:e8:0f:ca:
                    06:a7:96:b0:76:b0:32:e1:47:f4:2e:bb:ff:85:25:
                    ab:29:f3:6b:c2:f2:fa:c6:98:2e:2c:e3:7e:27:31:
                    2a:37:e4:21:4c:6c:c0:14:0f:38:66:92:cb:6e:7a:
                    e5:c1:bb:e2:b9:34:3f:27:ac:e5:58:a3:89:5e:49:
                    72:96:d5:cf:2b:17:fc:4d:19:61:8f:15:85:dc:a1:
                    b7:e3:e9:b5:8b:81:47:ae:67:83:a4:07:82:f9:c9:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F3:97:40:B2:EA:3A:37:6C:79:34:ED:E4:F8:F3:DA:65:2B:FF:1E
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:58:1d:c9:35:6d:53:b8:fd:4c:e5:44:bc:04:65:ac:e9:
         3b:ed:83:f3:83:ef:3e:af:e2:bf:4f:a7:f1:70:e1:ee:c8:89:
         c5:a8:01:c8:63:e7:16:f6:f1:fb:7b:a6:e2:17:9d:74:7b:34:
         87:b1:e0:94:a3:dc:1b:0a:a4:c8:d8:85:65:b9:18:84:73:1f:
         21:76:04:fc:0d:a3:fc:9e:15:8a:85:36:3f:69:87:ee:be:86:
         ee:d8:28:16:fa:38:25:cd:dc:29:18:78:6d:1c:0d:ea:4e:a8:
         2d:54:dd:3b:01:6a:3b:81:43:e3:a4:19:c6:02:19:46:9c:7f:
         3f:20:9f:9a:02:75:24:af:c7:7b:f8:72:17:5f:b2:cc:c7:06:
         51:75:a0:b3:84:5d:c9:f3:59:b9:14:cc:39:11:e2:69:da:c1:
         46:c5:40:33:28:94:18:2c:b9:f2:d0:b5:69:d7:be:02:d7:1c:
         bd:9c:d2:cc:14:4d:77:ad:5d:bc:1f:92:a4:d6:56:eb:59:ea:
         58:19:4d:f4:67:2f:75:81:c2:72:8b:4d:22:d7:7b:39:96:a6:
         79:fa:02:69:3d:1d:af:b6:fc:f8:59:65:ea:fb:b0:dd:3f:af:
         2d:00:81:e3:fa:01:39:85:f2:81:63:67:ae:a6:b4:89:14:3f:
         e7:66:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:55:57 2026 by rpki-client