Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
File:                     cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft (raw, json)
Hash identifier:          SXTc/6Eewq1eF9KEHEL6l8sDtXnTRx3zxFR5UseGhbs=
Subject key identifier:   6C:89:F6:10:F7:DC:DD:E7:30:E2:4A:86:73:35:95:F9:BE:0F:C5:25
Authority key identifier: 72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4
Certificate issuer:       /CN=720c6323cf730930a03b0e44607f6fedf527a8c4
Certificate serial:       019EC0A3E326F6B8B9A768B4ADE689F5D052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
Manifest number:          0277
Signing time:             Sat 13 Jun 2026 11:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:26 +0000
Files and hashes:         1: cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl (hash: cPVOfNjbQU8D945jcjRqlwamnrFSpkXkgDE+kvf/wg0=)
                          2: xEYU-K7wenXyYwuEUiZnmFrMZac.roa (hash: gWNLlP9RhlookRQsci7JBvafArIbz1TL4llsI2fvdA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:e3:26:f6:b8:b9:a7:68:b4:ad:e6:89:f5:d0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=720c6323cf730930a03b0e44607f6fedf527a8c4
        Validity
            Not Before: Jun 13 11:00:26 2026 GMT
            Not After : Jun 14 11:00:26 2026 GMT
        Subject: CN=6c89f610f7dcdde730e24a86733595f9be0fc525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:1a:df:5e:d7:c9:ad:24:34:30:03:73:ec:
                    7b:ca:65:e5:a0:83:10:b5:b5:70:07:9f:58:c8:5f:
                    65:d1:ca:bd:5b:b8:67:5d:89:ad:3e:66:fe:53:93:
                    e1:b8:3c:86:1c:8a:e7:af:84:f0:82:8e:d1:ac:31:
                    1d:0f:20:45:a5:c2:11:23:70:26:da:cf:7b:89:30:
                    8a:46:c5:4d:32:dc:77:51:20:9e:4b:9f:a9:08:1b:
                    20:51:46:ce:dc:9d:56:6b:6e:ab:cd:e6:ee:12:2e:
                    81:93:87:51:93:c8:fa:5f:7f:ac:6f:4e:b0:ac:eb:
                    15:2f:e9:05:54:1b:47:72:de:92:ca:37:07:cc:f5:
                    5f:9a:3c:2e:9f:e4:b5:56:0f:2f:fa:dd:a3:04:b3:
                    70:a7:0d:07:c9:8b:b4:e7:d1:0c:4a:b8:bd:11:d1:
                    3b:30:c8:2a:dc:14:70:28:9f:07:b0:eb:fe:5d:82:
                    10:6e:7f:0b:8d:13:26:71:41:4a:dd:ca:59:7b:8f:
                    c2:60:c1:27:ad:25:0e:e4:d3:cf:e9:88:9b:f3:5d:
                    74:ad:c4:61:d3:ce:bf:f2:bc:0c:29:f6:f3:b7:4e:
                    47:55:dd:b9:1d:ab:43:1a:01:c4:be:5e:01:40:a7:
                    2c:93:62:7d:cb:2b:49:e5:26:22:c8:c9:90:92:5e:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:89:F6:10:F7:DC:DD:E7:30:E2:4A:86:73:35:95:F9:BE:0F:C5:25
            X509v3 Authority Key Identifier:
                keyid:72:0C:63:23:CF:73:09:30:A0:3B:0E:44:60:7F:6F:ED:F5:27:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgxjI89zCTCgOw5EYH9v7fUnqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a6dae8-d98e-4aa0-b4ad-4281e38a9bf2/1/cgxjI89zCTCgOw5EYH9v7fUnqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:3d:1d:89:c9:27:c3:5e:ef:30:e8:52:6e:33:0f:29:30:
         ce:8e:ed:d6:7a:07:77:3c:df:08:b4:49:98:c2:b8:f9:a3:b0:
         5b:a4:6c:ef:36:a5:d9:f6:04:04:8f:fe:32:ba:b0:7a:6f:03:
         05:31:ef:b2:7e:c8:b4:f0:60:6c:ac:ca:60:4b:d5:e4:28:83:
         96:68:56:4e:a9:d1:2f:8b:f3:66:46:f8:bd:42:bf:55:5d:8c:
         0d:1c:d6:30:53:a3:65:cf:c4:8f:6a:61:44:db:92:63:4c:61:
         bf:ee:7e:5d:27:04:41:e9:32:d7:29:1e:93:a8:a7:98:a8:1e:
         32:14:b5:1b:6a:87:91:44:21:7e:4f:68:7f:80:5c:07:da:5c:
         57:81:ec:76:e8:09:dd:7a:00:96:c4:ba:29:d3:bb:c2:33:58:
         1f:7a:0e:f3:b7:08:2f:5a:0e:49:01:9a:d1:21:0e:04:ac:62:
         4d:e7:8f:37:c0:be:5c:17:39:cb:5c:46:09:68:0d:4e:a0:c3:
         d2:7c:23:e1:30:92:65:fc:88:a0:2f:c5:21:16:7e:97:a0:8f:
         22:eb:fa:95:03:0e:01:fa:07:a9:49:71:c0:fc:c5:06:af:3c:
         d5:7e:98:5b:50:00:17:e1:1b:54:db:d7:40:56:07:81:27:46:
         5a:0a:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:19 2026 by rpki-client