Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          z8Bv7OcOIpq85HGxSNx2M3tsaMldlk+PRsl2m7FoPRA=
Subject key identifier:   E9:9A:E1:BE:AC:B6:8F:CD:39:3D:DD:77:62:20:84:F6:51:23:DF:31
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       019EC25C32B7BB26A67D16EDA1C0909B3841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0E8B
Signing time:             Sat 13 Jun 2026 19:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:22 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: Q+kgwy+iEyxMGRciZa3gbGw0J+62wi+uyRHqtbwoM08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:32:b7:bb:26:a6:7d:16:ed:a1:c0:90:9b:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: Jun 13 19:01:22 2026 GMT
            Not After : Jun 14 19:01:22 2026 GMT
        Subject: CN=e99ae1beacb68fcd393ddd77622084f65123df31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:9e:4a:ec:57:ad:55:66:35:14:a5:64:aa:
                    c7:42:c9:1c:0c:44:4b:e4:fa:e1:a0:fe:d2:99:ca:
                    40:da:80:53:85:7b:bc:3b:32:73:66:10:63:85:9d:
                    59:06:4a:19:a9:69:44:3c:50:65:51:ce:56:d1:45:
                    f2:84:03:25:c9:58:5c:7a:cc:31:10:42:58:c0:2d:
                    f2:3e:cd:34:47:0d:9a:ad:ff:68:26:00:eb:61:99:
                    f2:61:a6:c4:39:a7:54:85:1b:ed:52:12:58:b7:eb:
                    0f:e2:26:17:7e:0c:da:2a:6c:fd:9b:8e:d2:e0:39:
                    1b:7c:7f:7c:75:6d:82:c1:1e:92:6b:3f:32:6c:ce:
                    d2:46:9b:9e:00:60:23:e8:c7:fa:0f:ef:a0:3d:41:
                    15:7c:fd:cd:da:84:23:79:25:1a:8e:85:a2:eb:eb:
                    cf:60:dd:a5:41:cb:37:cf:c8:37:56:36:34:e6:1e:
                    a5:ae:59:14:41:0c:16:0b:12:ff:dc:29:98:13:d1:
                    7a:70:c9:31:5e:0d:a8:a6:87:70:b0:92:cb:2e:91:
                    30:d3:9c:48:f5:81:24:f8:e6:96:43:ae:5e:6f:8e:
                    b6:55:43:50:19:85:73:90:03:7e:31:44:96:ae:23:
                    f9:86:c3:f0:70:1c:76:f8:b6:78:e6:9b:dc:45:48:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9A:E1:BE:AC:B6:8F:CD:39:3D:DD:77:62:20:84:F6:51:23:DF:31
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:61:19:4a:8a:77:e0:a7:3f:c8:4e:47:11:fd:ce:9e:b8:
         1d:c6:bb:3e:bf:67:bc:f3:fc:e0:84:12:e6:86:38:bf:22:8b:
         80:29:80:b9:48:c1:8f:4d:f4:a7:75:a4:34:52:83:e5:cc:10:
         f7:d7:48:4c:35:0b:5d:c2:eb:9a:72:92:57:91:8e:2a:81:fc:
         56:41:f7:51:54:ac:9f:c8:fe:36:cf:16:6a:cf:d5:57:ea:76:
         4b:6b:11:01:41:56:ab:cb:e4:5e:1e:09:b0:cd:e9:f3:74:77:
         17:da:0e:bd:b3:d2:a0:34:bd:05:a2:d6:83:ea:cf:b5:e1:cd:
         36:f0:4a:68:f1:c0:f9:53:9e:95:2a:19:d6:b1:a6:ea:b7:10:
         64:0f:86:64:18:57:12:1a:d8:0a:54:02:9f:e6:e3:f9:44:1a:
         73:17:d7:19:76:4f:e3:cb:07:ed:30:e9:ca:e2:81:3f:60:e2:
         6b:7b:9a:23:d4:1b:88:bf:f7:8c:ea:6a:34:f2:4d:73:f7:af:
         a4:9c:7a:75:29:1f:07:cf:ee:14:69:d4:a7:88:27:27:30:6a:
         66:13:ad:ef:9a:7e:e7:1e:1e:49:6e:c6:4d:b0:44:3b:5a:6a:
         99:3f:09:c0:0a:25:ec:e0:8c:e0:da:93:8a:44:9e:db:e3:a1:
         1c:92:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:04 2026 by rpki-client