Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File:                     6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier:          7vauWFA6WW4Z6GUFxp7h4RP1MXqe/HGsYjwulc3ZDTk=
Subject key identifier:   D4:AB:2A:C8:48:AE:B6:56:E1:08:2A:4B:3B:35:4A:D5:2C:1C:04:60
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer:       /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial:       019EC111A7038065F1A0524DA7A41664DDC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number:          1496
Signing time:             Sat 13 Jun 2026 13:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:19 +0000
Files and hashes:         1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: zKsre2hPx6PrO/QGQNuopQXtFJM6O9tQB6FU784Yf7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:a7:03:80:65:f1:a0:52:4d:a7:a4:16:64:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
        Validity
            Not Before: Jun 13 13:00:19 2026 GMT
            Not After : Jun 14 13:00:19 2026 GMT
        Subject: CN=d4ab2ac848aeb656e1082a4b3b354ad52c1c0460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:2c:ee:b8:7c:8a:7e:03:ef:0d:64:1e:f6:
                    cd:a1:8a:13:14:cf:1c:9f:d6:ca:8d:d4:b8:90:be:
                    ac:bb:64:ac:9e:88:2b:76:89:23:f0:20:e4:b8:ca:
                    ce:b2:92:f3:99:4e:1f:74:43:2d:45:03:4f:4c:b8:
                    ee:79:10:5c:64:1c:d8:ff:2e:d9:43:e2:20:ac:67:
                    cc:a3:0b:9f:3b:d5:1d:b9:35:c4:d8:09:46:64:3a:
                    0b:99:bd:5b:24:ca:1f:ee:50:b4:04:56:fa:72:f3:
                    44:6e:ab:29:b7:a8:e0:25:a3:7d:f5:04:a9:15:b2:
                    5c:85:2e:92:b4:39:a9:72:f0:d9:7c:a2:f8:c1:1a:
                    5c:cd:61:a7:df:5e:a0:c1:bf:40:9e:02:72:9b:b8:
                    2e:95:5e:a9:24:d9:a1:1b:68:33:56:6d:ab:a4:5a:
                    ff:b6:3f:9c:73:44:6f:35:63:28:e7:74:ef:a5:96:
                    b8:32:40:08:7c:3d:64:27:67:0b:7c:c9:17:86:8e:
                    9b:09:8b:01:e6:48:6e:87:af:83:e0:da:43:c3:a3:
                    fd:57:b1:28:b2:5c:f2:e4:60:e9:9c:09:6a:7e:a9:
                    8a:97:70:82:f2:d5:81:5f:0e:d0:9f:9a:2e:d3:41:
                    a2:74:4b:74:22:7c:58:5b:a8:23:6c:5f:c6:24:ec:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AB:2A:C8:48:AE:B6:56:E1:08:2A:4B:3B:35:4A:D5:2C:1C:04:60
            X509v3 Authority Key Identifier:
                keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:1f:c8:61:c7:6a:c3:eb:99:34:5b:9c:0b:40:64:8c:d9:
         7b:7e:31:0b:2d:7c:3a:51:9f:51:b4:9a:0f:49:d9:4f:5f:5e:
         72:78:58:30:1b:8a:c6:4b:92:69:29:4a:63:f3:ae:c7:63:25:
         a7:3c:c7:0a:db:68:bd:04:16:de:53:fb:d6:58:7c:f4:a9:04:
         b5:3b:6e:92:eb:33:00:da:11:32:27:28:76:9b:81:6f:21:93:
         48:08:3a:10:55:6a:e0:8e:32:89:a4:51:58:8a:08:e9:1f:75:
         8a:9b:9b:a6:66:fd:3f:1e:78:c8:83:ac:10:d6:8a:37:91:35:
         90:a8:e6:11:7e:78:98:c2:b3:8f:5e:64:af:76:ae:b6:77:5c:
         d5:9e:82:8c:21:13:ce:a8:af:8a:75:18:d3:de:ab:0a:98:b2:
         e2:46:53:ba:30:0d:81:dc:0c:78:85:a8:38:7e:0e:44:3e:5e:
         d2:12:ab:72:4d:5b:2a:3a:3b:1a:2e:23:1d:2e:a6:e0:93:70:
         5c:55:87:5d:72:ac:c3:39:77:7c:60:84:c7:70:ab:51:60:1b:
         47:e2:2e:e7:78:19:83:38:12:74:e7:3e:cf:f2:03:f0:ca:b5:
         9b:07:f7:f4:5c:9c:da:86:39:37:21:19:f9:f6:6c:17:78:7a:
         1b:3f:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:41:55 2026 by rpki-client