Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          V2hHGtrRZZK/XrgbuGjSYTqRyMLwHTsTc5Sn6+2b66k=
Subject key identifier:   FA:1A:66:93:D4:0B:92:7C:CB:37:B3:C8:8D:AE:E3:E4:5B:DA:29:58
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       019EBEED6D4C3D469A27CF8E035CB0B85629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          1351
Signing time:             Sat 13 Jun 2026 03:01:31 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:31 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:31 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: YzTHBeY6ovRzEzYcoF7IoN66AaZZSZlv3SvIRA/2jcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:6d:4c:3d:46:9a:27:cf:8e:03:5c:b0:b8:56:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Jun 13 03:01:31 2026 GMT
            Not After : Jun 14 03:01:31 2026 GMT
        Subject: CN=fa1a6693d40b927ccb37b3c88daee3e45bda2958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:a6:bb:4b:fc:9b:44:e3:d6:6a:11:54:95:
                    ee:2c:b1:24:a7:d3:0f:10:1e:39:d8:e3:7e:89:13:
                    b6:5b:44:a8:65:ee:53:ec:71:c1:50:69:5b:17:16:
                    be:cd:2a:b3:5b:33:aa:da:c8:78:2d:3c:6d:f5:52:
                    d7:d3:9a:86:9e:ae:37:dd:98:19:aa:a3:e4:a5:b9:
                    a2:42:70:d7:ca:9e:28:fa:53:3d:a1:09:c3:bb:b2:
                    56:89:5b:70:c2:67:e7:d4:26:70:e5:c2:a9:8d:56:
                    5e:0e:48:3a:82:fd:8a:05:0d:2a:d8:e7:5a:1a:49:
                    ed:23:68:39:22:f9:5e:d0:ce:f4:7e:4c:33:e5:43:
                    28:42:8a:1d:af:ac:7e:91:bd:06:b4:fc:ba:ae:e1:
                    5c:20:ce:ff:06:f6:11:4a:b1:c5:66:0f:de:08:e9:
                    a2:d7:16:37:c2:3d:5f:fe:d4:1b:87:c9:25:44:e2:
                    c5:6f:ef:8b:35:46:00:ea:45:0f:3e:ac:3a:d8:40:
                    ce:ed:54:14:f2:5b:fa:b8:80:78:5a:60:24:0f:dd:
                    64:0a:6d:80:58:93:25:75:2b:6b:24:fa:8a:38:17:
                    53:2f:21:0d:6e:5c:f3:e1:56:88:e7:1b:5a:8b:65:
                    12:06:3e:23:d5:f2:71:d8:b4:ff:79:89:e6:8b:f2:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1A:66:93:D4:0B:92:7C:CB:37:B3:C8:8D:AE:E3:E4:5B:DA:29:58
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3a:78:5e:79:7e:5c:6c:7c:93:c5:70:57:9d:bf:61:6b:d9:
         82:4b:2a:1a:fc:24:19:68:0e:ab:c6:f4:1d:9d:21:5e:7c:88:
         8f:8c:e1:c2:f4:0c:d9:85:79:e0:ee:e2:47:1e:b7:e9:09:87:
         90:f8:25:4a:bd:fe:71:91:fc:1f:5d:e8:95:2e:89:36:51:c7:
         9a:b7:ca:df:88:10:3a:b3:8b:cb:53:1d:d0:5c:94:95:a1:1b:
         06:c6:08:7c:c9:b3:2e:80:8f:68:1f:96:21:ac:64:b0:5d:03:
         30:55:83:b3:77:37:73:d3:e2:91:74:95:2b:eb:9b:29:e2:db:
         84:7f:8a:c4:35:5a:cd:f8:8f:1d:e0:79:ba:19:04:a9:5c:fb:
         9e:b8:c6:49:f3:87:1d:df:2f:db:ac:cb:90:8c:65:73:1e:8c:
         de:5d:71:16:5b:29:46:86:a6:0e:b5:64:2a:34:ea:00:e9:91:
         8b:26:fe:46:9a:8f:6f:e1:c0:4c:e2:14:ae:05:ae:72:0e:64:
         89:07:92:7c:6d:5b:a3:7c:08:6e:bf:21:c0:35:a3:c2:57:07:
         e7:b2:20:fd:f2:d4:b2:63:b5:16:1e:2b:61:6b:ae:c9:1b:42:
         17:0c:b4:d7:47:69:fe:fc:32:6c:91:b1:ee:f1:db:12:81:0d:
         07:3c:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:43 2026 by rpki-client