Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File:                     6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier:          2BHi3MttHriPaGGxFSv6mIfJmJFNbSoOI4juF9geUvE=
Subject key identifier:   5A:4C:4F:DF:3D:2B:93:07:6C:71:DF:55:23:AD:D4:D6:4F:45:D9:0A
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer:       /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial:       019EBE7F64BE5C1D6B7FA80ADB6CCCB07B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number:          0980
Signing time:             Sat 13 Jun 2026 01:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:20 +0000
Files and hashes:         1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: mzI3sGCiPjtJT32tlJcOCoBwTeTz+j8ULyZeoSj/sc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:64:be:5c:1d:6b:7f:a8:0a:db:6c:cc:b0:7b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
        Validity
            Not Before: Jun 13 01:01:20 2026 GMT
            Not After : Jun 14 01:01:20 2026 GMT
        Subject: CN=5a4c4fdf3d2b93076c71df5523add4d64f45d90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:e5:d0:77:15:7b:ba:90:4e:bf:e1:ce:0b:
                    a7:bc:37:09:fa:4e:ff:78:f4:4e:1d:63:8c:d7:6c:
                    50:f6:bf:10:0e:c9:ac:81:b4:8c:b1:c6:97:44:52:
                    ff:36:eb:7b:76:62:31:2f:95:5e:89:a3:a9:83:d5:
                    bd:ac:dd:dc:82:49:36:d3:81:90:fc:65:79:75:c2:
                    bc:0a:54:6d:05:2b:cf:17:ff:32:e1:21:6f:d9:b1:
                    88:a5:cb:d3:17:b0:dd:ce:9f:2b:c9:b9:c8:a0:6f:
                    96:b3:6c:13:6d:d3:ce:5b:41:d1:02:3e:b0:17:b8:
                    6f:24:af:6f:19:90:02:63:25:ba:06:b1:dd:53:be:
                    78:77:7e:9a:b8:5b:6b:17:be:89:d3:af:8f:09:1d:
                    54:03:02:f3:d5:c4:b2:c3:69:aa:64:d3:72:44:19:
                    3d:ce:c2:8a:ed:7d:f8:d1:e9:14:d5:04:98:3a:a4:
                    2a:30:63:4b:a7:91:31:45:24:52:75:dd:48:18:7d:
                    99:0d:af:bb:7b:6e:11:a4:28:bc:ee:b0:60:1f:0b:
                    53:76:4a:b3:74:6a:72:b4:8f:91:7e:85:be:8e:4e:
                    f3:72:ea:15:8a:e1:16:9f:62:ae:0f:82:30:a6:c5:
                    02:73:e3:1a:62:6d:4a:c0:0b:fc:62:98:25:d4:15:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4C:4F:DF:3D:2B:93:07:6C:71:DF:55:23:AD:D4:D6:4F:45:D9:0A
            X509v3 Authority Key Identifier:
                keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:0f:c9:2d:e6:8b:b4:b6:2f:df:ad:b1:22:64:78:17:eb:
         c0:32:e7:8a:7d:67:e2:ea:22:dd:cc:4e:df:6a:9a:97:52:72:
         61:fd:f8:c8:22:d3:5e:de:3a:1f:0f:f2:82:b4:b9:08:56:4a:
         b4:80:ff:e8:43:66:d9:c7:3d:10:32:37:fe:12:5b:f8:dc:15:
         ed:80:45:b5:10:91:70:f1:bd:49:a8:a5:82:9a:7a:81:a7:6a:
         5d:c0:86:e5:1e:0e:40:4d:d8:15:e6:7c:d5:1d:0b:c1:b2:8e:
         32:4c:9b:1b:32:ba:09:13:e1:1e:a6:15:28:4f:f4:7f:b3:61:
         e1:88:1d:6d:26:0e:16:bd:db:fa:9f:c0:6a:2b:8e:9f:c2:9f:
         3d:20:1d:1e:af:20:24:a9:91:4d:71:58:17:f7:91:cd:76:b5:
         76:11:e0:ea:99:81:e4:db:dc:bf:2a:8a:dd:e4:62:5c:3b:b7:
         75:fa:a7:18:c2:63:98:89:aa:48:43:6d:ab:a1:31:fa:ff:f5:
         71:0b:c7:36:aa:b9:09:81:3f:c9:ab:a7:c3:8e:8d:2c:b0:54:
         62:ab:ec:8b:1b:1a:14:dc:36:3c:a5:cb:ca:91:b8:7e:a9:68:
         b7:a2:38:ac:94:42:b2:9a:ee:4c:a9:40:6c:fb:c8:d0:ca:66:
         de:af:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:21 2026 by rpki-client