Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
File:                     6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json)
Hash identifier:          hgy8TzeNj5paGy1FbqvYYh4REoWE3f7p4GF0aRNvzgU=
Subject key identifier:   E5:A3:02:85:CF:A8:E9:0A:74:11:53:2B:13:82:9B:3A:21:EB:D9:85
Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
Certificate issuer:       /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Certificate serial:       019EC06DFB3047F0894F8FD101ECF893D758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
Manifest number:          073B
Signing time:             Sat 13 Jun 2026 10:01:33 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:33 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:33 +0000
Files and hashes:         1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: MuMDGA7ntLeilFbmdsaIRXkme7fpwCyGakVA2Lr4BE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:fb:30:47:f0:89:4f:8f:d1:01:ec:f8:93:d7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
        Validity
            Not Before: Jun 13 10:01:33 2026 GMT
            Not After : Jun 14 10:01:33 2026 GMT
        Subject: CN=e5a30285cfa8e90a7411532b13829b3a21ebd985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:ed:26:a1:89:db:43:cf:b3:e4:c3:4d:50:
                    40:fa:cc:d9:df:f0:17:1a:88:c0:39:db:33:2d:17:
                    96:fa:7e:7c:6b:78:e5:08:85:4b:c4:30:17:b9:d0:
                    36:1a:6b:e9:28:b7:2d:ae:4c:f6:89:cd:61:81:22:
                    64:90:a3:db:2b:ac:7d:c6:b9:f7:41:bd:5c:1a:e8:
                    06:bf:a9:d9:d0:29:bb:89:e7:c2:5d:fc:57:0e:7a:
                    80:e9:cb:c9:18:3e:dd:f4:72:a6:68:46:8b:f7:74:
                    64:d6:1f:67:40:e6:8c:35:82:c3:df:a3:59:70:e9:
                    01:b7:80:f2:85:b8:58:d9:27:a1:c2:45:53:8e:49:
                    8a:82:d2:20:94:05:5a:b1:d5:a1:e4:ba:88:41:4b:
                    07:4d:97:82:db:6e:34:a3:0c:c6:84:bb:65:15:dc:
                    c8:ff:92:00:be:e5:76:63:c4:52:81:d5:bb:26:23:
                    41:94:35:be:bb:5b:7c:1e:8d:60:0e:22:92:79:cb:
                    bd:5f:b3:59:45:43:c9:30:2f:86:72:bb:9b:b9:91:
                    f8:00:96:aa:93:7c:77:f7:dc:86:af:01:5a:37:47:
                    52:4c:d8:6a:e9:9d:4a:ce:d5:1a:94:4d:4d:6c:b4:
                    f5:76:72:a7:a7:82:7a:bf:b2:0c:74:2b:f0:27:2d:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A3:02:85:CF:A8:E9:0A:74:11:53:2B:13:82:9B:3A:21:EB:D9:85
            X509v3 Authority Key Identifier:
                keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:37:1f:0d:f2:f5:72:c6:7a:26:17:08:4f:6e:22:8a:62:
         c4:78:81:3f:fb:04:b4:0d:ad:6d:92:14:a0:1c:ca:9b:1b:e0:
         03:51:84:2e:7f:ce:a4:16:0e:fb:76:2a:b2:3d:43:6b:ee:4e:
         fa:23:2c:e0:d9:6e:29:1c:69:64:a8:41:f5:d0:4b:1b:9e:89:
         e5:04:ac:8e:6f:33:39:26:69:21:32:27:d4:dc:03:35:13:f1:
         3f:e4:94:bf:25:3d:ea:96:f4:59:9a:5d:d5:16:62:b0:1b:f6:
         1a:68:6b:59:53:0c:2d:9a:3d:74:13:db:f7:ff:8f:3f:1e:12:
         e6:0f:c0:b7:68:9c:74:a5:05:c9:54:7f:7a:6b:05:7d:00:aa:
         72:11:98:8e:47:cf:7d:2e:4d:78:ed:b7:0d:7f:e6:69:a4:35:
         39:87:90:0f:b1:70:12:38:41:88:cb:e6:db:28:7b:7a:d4:df:
         eb:5d:b2:ec:4b:02:d9:df:99:00:4b:a7:6d:b8:76:2f:18:62:
         0f:ad:f0:59:39:08:2b:2f:c6:97:fb:72:64:7a:0e:17:e5:bf:
         28:bb:21:73:8e:52:8d:4a:5b:18:d9:2b:64:15:ed:aa:7b:c1:
         53:e7:02:b7:a9:07:54:a9:49:f6:54:e1:c6:a6:8c:da:9b:58:
         64:e2:6c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbfswR/CJT4/RAez4k9dYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ODMxZmQwZTdiMTViMTdlMGEwYTdkY2NmY2FiYjA2M2Q3
YzQ3Y2EwHhcNMjYwNjEzMTAwMTMzWhcNMjYwNjE0MTAwMTMzWjAzMTEwLwYDVQQD
EyhlNWEzMDI4NWNmYThlOTBhNzQxMTUzMmIxMzgyOWIzYTIxZWJkOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrHtJqGJ20PPs+TDTVBA+szZ3/AX
GojAOdszLReW+n58a3jlCIVLxDAXudA2GmvpKLctrkz2ic1hgSJkkKPbK6x9xrn3
Qb1cGugGv6nZ0Cm7iefCXfxXDnqA6cvJGD7d9HKmaEaL93Rk1h9nQOaMNYLD36NZ
cOkBt4DyhbhY2SehwkVTjkmKgtIglAVasdWh5LqIQUsHTZeC2240owzGhLtlFdzI
/5IAvuV2Y8RSgdW7JiNBlDW+u1t8Ho1gDiKSecu9X7NZRUPJMC+GcrubuZH4AJaq
k3x399yGrwFaN0dSTNhq6Z1KztUalE1NbLT1dnKnp4J6v7IMdCvwJy10PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWjAoXPqOkKdBFTKxOCmzoh69mFMB8GA1UdIwQY
MBaAFOmDH9DnsVsX4KCn3M/KuwY9fEfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQt
MDE0N2UxM2E5OTNlLzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85NGZkOGEtM2I2NS00YWY3LTg4NWQtMDE0N2UxM2E5OTNl
LzEvNllNZjBPZXhXeGZnb0tmY3o4cTdCajE4UjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6Q3Hw3y
9XLGeiYXCE9uIopixHiBP/sEtA2tbZIUoBzKmxvgA1GELn/OpBYO+3Yqsj1Da+5O
+iMs4NluKRxpZKhB9dBLG56J5QSsjm8zOSZpITIn1NwDNRPxP+SUvyU96pb0WZpd
1RZisBv2GmhrWVMMLZo9dBPb9/+PPx4S5g/At2icdKUFyVR/emsFfQCqchGYjkfP
fS5NeO23DX/maaQ1OYeQD7FwEjhBiMvm2yh7etTf612y7EsC2d+ZAEunbbh2Lxhi
D63wWTkIKy/Gl/tyZHoOF+W/KLshc45SjUpbGNkrZBXtqnvBU+cCt6kHVKlJ9lTh
xqaM2ptYZOJsMA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:13 2026 by rpki-client