Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
File:                     L6e3lEVZi0Luy76CjdiU368d_Ko.mft (raw, json)
Hash identifier:          3ynR0VArWynaaglOTJMQhz4BOJVHSnlDTvlXItj8hSI=
Subject key identifier:   FB:38:D3:91:8D:A2:00:41:05:B8:A7:BB:E5:81:EA:07:DF:18:AE:98
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Certificate issuer:       /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial:       019EC2249192D3C02DA2DE66E093A9DFAD70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
Manifest number:          EA
Signing time:             Sat 13 Jun 2026 18:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:36 +0000
Files and hashes:         1: L6e3lEVZi0Luy76CjdiU368d_Ko.crl (hash: 6v48P/FZipWPFhycAf/E/lgN89S6shx3QqRFh4F2P0o=)
                          2: y9EmBnlrUJ5TJDgeHtlan8Tczq4.roa (hash: 2erRWv6redCBPjuOhVB00JAgnjJTYsHMgDSbesnXn8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:91:92:d3:c0:2d:a2:de:66:e0:93:a9:df:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
        Validity
            Not Before: Jun 13 18:00:36 2026 GMT
            Not After : Jun 14 18:00:36 2026 GMT
        Subject: CN=fb38d3918da2004105b8a7bbe581ea07df18ae98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:1f:5f:a0:7d:78:17:41:00:0f:ce:a9:85:
                    22:5b:b9:84:51:ee:e5:4a:cc:13:42:40:d7:d8:78:
                    fe:9f:6b:df:31:1e:ad:2a:f4:f7:87:2b:ae:64:64:
                    47:a1:fb:d9:c3:e9:df:eb:5e:48:50:48:59:c4:61:
                    3b:d6:e3:15:62:c6:c8:d9:ac:87:ac:b5:0a:b5:d4:
                    cf:2d:73:8b:e8:3f:6c:37:1b:45:3a:c8:72:a4:e7:
                    56:74:76:ef:e0:a7:15:d7:d0:bd:24:8e:1d:21:e6:
                    e0:f0:a6:35:17:d6:03:d5:83:35:ad:63:81:3a:a4:
                    44:b4:ea:17:89:d5:a7:5b:09:b4:08:39:e3:36:62:
                    6b:80:78:76:4e:e2:66:3e:45:47:f2:f0:c3:da:9a:
                    2c:9a:56:93:5f:ce:8e:61:72:2f:3b:a3:a8:3d:6b:
                    e0:47:25:13:d7:27:da:76:5f:cd:da:86:a6:5c:87:
                    b6:57:bc:c1:18:0f:28:75:02:78:84:ee:53:5e:fa:
                    b2:20:32:15:31:f0:d6:ff:16:3c:ac:c6:3b:b2:90:
                    8a:37:20:fa:f0:64:46:0e:b9:bb:74:ff:92:e3:38:
                    b0:f9:41:34:c5:6d:42:99:78:39:e0:09:c4:4d:fd:
                    b6:b2:58:fe:14:c7:d1:87:b3:19:d6:82:f5:61:a8:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:D3:91:8D:A2:00:41:05:B8:A7:BB:E5:81:EA:07:DF:18:AE:98
            X509v3 Authority Key Identifier:
                keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:01:d5:b7:b3:93:4a:e5:52:a4:78:11:df:60:3b:3d:5a:d3:
         1c:b7:fa:56:bf:65:25:1a:09:80:e6:34:43:e5:dc:bc:d2:4c:
         5e:68:56:f9:6b:0e:0c:a6:a7:f7:58:64:99:b3:88:8e:44:40:
         62:12:5d:dc:c1:fe:1d:63:3c:45:dd:40:54:89:df:7d:a0:3a:
         67:d3:1f:89:c9:2e:4a:89:37:d1:75:b5:f9:de:79:6e:f1:06:
         1f:ad:bb:4c:bf:78:04:63:c6:ad:a7:24:87:f3:66:3b:bc:f3:
         19:1e:a9:d3:23:39:86:5c:ed:76:a0:f9:a4:da:f7:bb:09:4b:
         56:1d:9e:b0:87:72:e2:18:98:c4:1a:e4:8b:8a:35:12:38:d5:
         8d:dd:d5:0a:e6:9d:dc:d0:8a:3a:4c:1d:53:f1:8c:ac:b3:31:
         9f:39:59:06:40:de:cd:ec:19:7f:a3:a5:ae:84:7d:44:98:83:
         e5:2c:03:65:de:1a:9f:9c:0f:eb:7f:98:c1:60:d2:24:d0:2a:
         0b:e8:71:69:bf:f6:a4:bf:44:13:2b:e4:79:f6:f9:f9:2d:94:
         f7:89:33:84:dc:3b:45:da:24:6e:ae:db:8e:32:8a:76:20:45:
         f3:7a:36:98:6e:21:de:3e:71:41:4b:ff:2c:7a:e9:cd:78:ea:
         a6:c1:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:31:57 2026 by rpki-client