Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File:                     gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier:          zsqXEy4FcM5yIoKqBsffGKwTNT0u8HOGmnhuukXXji0=
Subject key identifier:   63:B8:FC:D3:13:9E:70:3E:A8:7B:BB:2B:6C:4F:D0:5B:F5:52:D6:14
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer:       /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial:       019EC2C9A544DF338E6AFA05347739F4374E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number:          086F
Signing time:             Sat 13 Jun 2026 21:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:55 +0000
Files and hashes:         1: 6_jxkWbS4mo_dqKSpUzPD-or2bk.roa (hash: oZKz7hjKw33KEtnhKq1VS8pa2G32Hvyj9HFGHRr0tYo=)
                          2: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: CSLPwuj8xtaa/Eg/sLYnOwG1s2HDER2QNv+YQKvu48g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:a5:44:df:33:8e:6a:fa:05:34:77:39:f4:37:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
        Validity
            Not Before: Jun 13 21:00:55 2026 GMT
            Not After : Jun 14 21:00:55 2026 GMT
        Subject: CN=63b8fcd3139e703ea87bbb2b6c4fd05bf552d614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:a2:eb:f9:54:ce:72:62:3c:54:cc:f8:c8:
                    54:39:02:b2:67:1f:83:22:f6:4a:01:b3:9b:b3:ed:
                    be:96:74:e6:eb:a3:7b:1a:66:47:fc:57:cf:a1:05:
                    41:02:aa:75:13:ca:f9:45:56:d9:54:4e:4a:84:1f:
                    18:32:6a:73:71:29:11:ff:ef:ed:96:5b:36:3f:38:
                    3e:39:02:f2:ba:ed:53:76:0e:c4:99:49:8a:31:d5:
                    59:58:d9:8c:09:29:aa:b6:a4:49:2e:67:ea:2b:b6:
                    ed:d3:f2:84:78:2c:47:36:a7:07:04:24:84:e2:af:
                    a2:dd:01:83:ea:8b:f9:d5:1c:56:ae:0c:3d:ba:f1:
                    b3:87:0c:c0:a2:d8:ea:ae:39:57:86:f9:8a:fb:a2:
                    a6:ea:7a:c8:b4:43:a7:a2:e4:b3:49:7c:d2:a2:c4:
                    54:e9:2d:26:a7:b1:b4:6d:4e:75:1e:15:01:3f:07:
                    a4:b2:34:65:45:33:b8:6d:1b:80:af:8d:a4:3c:44:
                    96:06:82:1a:0c:6a:90:69:7c:d8:87:f5:0b:62:8e:
                    ff:90:26:f3:7a:ee:80:94:33:d7:01:e9:7d:2a:2a:
                    a3:2d:44:e5:bf:e3:1b:aa:f8:40:aa:d6:e4:89:e4:
                    43:d2:95:77:43:46:b6:03:ac:d9:93:0e:24:f6:d3:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:FC:D3:13:9E:70:3E:A8:7B:BB:2B:6C:4F:D0:5B:F5:52:D6:14
            X509v3 Authority Key Identifier:
                keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:ca:95:5f:01:db:60:d5:d5:35:d5:d8:d4:10:c3:53:5a:
         64:5b:70:3d:fb:a4:e1:11:be:e6:20:a5:e1:be:c4:58:9d:97:
         b6:a7:4d:e4:d9:88:cf:ac:10:76:0f:8c:1d:2a:c5:c6:37:3c:
         d4:68:45:fd:55:fa:e9:ec:e2:de:e0:01:16:e3:e1:91:7d:81:
         8a:68:4c:73:19:40:f7:ca:85:15:c1:26:8e:d5:24:36:d3:e2:
         7e:9d:de:15:03:52:6b:90:b3:9d:15:fd:68:c7:f2:99:75:23:
         ba:89:ea:d6:2f:de:8c:6d:fb:fe:20:d0:23:c0:13:14:03:75:
         33:47:91:6a:7a:6a:ff:c3:6f:51:9a:02:e1:7f:08:e4:f8:e2:
         69:dc:e7:b5:a7:02:1a:58:c2:e0:90:d7:b7:fd:ef:00:0d:50:
         d7:fa:17:13:cc:0e:58:b9:37:de:0c:b6:86:a0:10:8b:74:ea:
         26:e8:8e:46:54:f0:93:bc:a3:0c:fd:15:17:58:70:fd:c2:19:
         a3:2c:bc:21:ad:f3:7c:9f:ce:8d:1f:32:f5:45:ac:90:46:da:
         a2:d1:c2:5f:37:03:23:00:53:42:04:5e:ac:20:fa:0e:10:c8:
         0c:d0:64:ba:77:79:c2:44:f4:4a:62:33:2d:5e:f8:dd:52:04:
         14:33:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:29 2026 by rpki-client