Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          B50gxgA9WW0pG67ziPnvDvtUC58m6c42tF3U+Bf1qYA=
Subject key identifier:   90:E0:A3:2F:3C:40:1C:6B:4E:F2:52:97:96:14:2C:F5:C5:9F:43:A4
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       019EBF5AD4E54B26FB3F232BF093DA4E57D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          18E1
Signing time:             Sat 13 Jun 2026 05:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:01 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: J+aX7jS/lUBoqGrrcTSag9ykLcRj0hK+HybpmDhE+nE=)
                          2: dqmaHvknKqQBSGx8vkJB5GIkMu8.roa (hash: eq7/0vS6xbSn3q6IVW/vVMX2uGZHddMDolDzXZEf0pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:d4:e5:4b:26:fb:3f:23:2b:f0:93:da:4e:57:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Jun 13 05:01:01 2026 GMT
            Not After : Jun 14 05:01:01 2026 GMT
        Subject: CN=90e0a32f3c401c6b4ef2529796142cf5c59f43a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:19:4f:7a:96:9f:5e:2a:13:64:70:e4:87:
                    78:c5:72:ea:58:20:6a:54:55:5d:8e:cd:71:d9:d2:
                    e4:df:1e:bb:43:79:75:ca:d8:06:d4:05:bd:f3:2e:
                    4d:8a:8f:eb:d0:ff:a6:ff:66:de:a4:06:87:a0:22:
                    8f:8b:b7:13:6f:23:ab:32:6f:ea:a4:7e:69:2d:a2:
                    f7:72:cf:ef:b0:1a:e2:72:ef:8f:0c:6e:70:7a:d3:
                    c1:65:3b:a5:e9:51:4d:fc:c6:46:09:be:fe:cc:6a:
                    00:a1:f5:9a:73:84:14:47:ac:77:50:92:84:11:d2:
                    ed:10:c4:8b:1d:37:37:39:79:a1:fb:59:b0:19:29:
                    68:e1:cd:02:60:83:33:11:67:48:5f:b4:41:ae:ef:
                    d2:ae:f3:e7:57:80:2f:ba:6a:20:34:70:66:81:c0:
                    44:07:72:7f:03:45:85:25:c7:be:4b:58:c3:85:40:
                    06:a5:4e:a5:57:1e:d8:18:62:c8:ca:2c:a6:42:b7:
                    d6:51:d6:00:b8:9f:e5:8e:9e:36:b1:dc:13:7b:a7:
                    3f:b7:14:ad:d6:ef:b6:12:57:99:c6:17:09:3e:03:
                    f2:cb:ea:ac:43:44:40:c1:4f:86:a8:3a:58:40:8d:
                    a3:59:dc:0a:95:15:d2:44:a3:98:8e:e2:98:98:97:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:A3:2F:3C:40:1C:6B:4E:F2:52:97:96:14:2C:F5:C5:9F:43:A4
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:74:67:cd:62:27:d4:fb:35:58:eb:04:f2:97:43:df:70:fd:
         84:8d:a1:fd:64:4c:a9:bd:a1:cc:63:df:1c:6b:08:79:32:7b:
         06:4a:31:04:2c:38:6c:be:b5:42:3c:43:18:fc:bf:95:f6:7a:
         2a:ad:a8:ad:79:29:90:00:73:03:b2:bb:c9:81:f4:8e:77:a0:
         1b:a6:c5:32:ee:39:af:3c:1c:51:b3:80:53:c5:fc:fe:ec:e8:
         6d:79:44:af:96:87:56:24:90:60:83:c9:cd:1c:aa:0f:c2:c0:
         93:fe:16:5b:9d:c5:56:5f:82:ce:68:09:11:33:31:15:b6:75:
         db:76:9d:cc:40:11:ba:2d:48:81:a4:07:55:00:48:12:6b:9a:
         4d:19:f9:b4:c5:57:70:85:62:38:9d:0b:98:03:df:8a:dd:4a:
         59:0d:e3:20:9a:f3:8f:79:b2:18:fb:8e:70:5c:6d:23:b8:60:
         24:e9:05:f0:13:c3:a0:5d:4c:04:e1:22:cd:8a:db:a4:b1:bd:
         e2:86:c9:04:9d:dd:d9:7d:63:f3:74:2b:21:78:21:7e:f0:eb:
         1b:32:5c:13:b3:90:ff:b4:f6:af:93:dd:3c:90:5f:28:25:75:
         87:cc:c6:c6:44:95:90:4e:19:2a:8c:a9:f8:e0:7a:aa:05:f6:
         fd:20:c1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:30 2026 by rpki-client