Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          uPu7faAj283o0EFoQN2ESAjuQRs9mhuDLJsMHpY7Thc=
Subject key identifier:   C2:52:46:9D:67:50:F8:2D:B1:6A:2C:14:91:74:95:DA:7A:0E:DF:D2
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       019EBFC911A7438E5EFB80709E7668D190AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 07:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:25 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: 0dWlLgMhHj/Qva8hR8gtHxR+z4dQygxowu91fX2nbO8=)
                          2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:11:a7:43:8e:5e:fb:80:70:9e:76:68:d1:90:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Jun 13 07:01:25 2026 GMT
            Not After : Jun 14 07:01:25 2026 GMT
        Subject: CN=c252469d6750f82db16a2c14917495da7a0edfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:db:83:c8:bb:b9:da:26:cd:9e:ad:7f:c4:
                    82:31:da:53:f8:34:b3:8d:e7:96:e8:8c:2a:df:39:
                    b2:80:6e:56:7c:6b:89:79:f0:8a:fe:09:f4:9a:42:
                    bc:bd:05:45:4e:c3:43:3e:6e:43:e7:70:d8:0a:2c:
                    7a:77:4a:a0:a7:57:3c:22:99:09:51:22:c1:24:78:
                    9c:02:25:65:47:98:d5:f9:83:2f:76:a1:27:07:06:
                    8c:26:c9:5e:6c:fa:2c:c3:14:2e:86:11:ef:06:45:
                    04:c5:8e:b2:54:94:74:9f:c9:e1:fd:da:67:e9:d4:
                    bb:2f:7e:07:74:e6:93:3b:94:0d:c0:80:6c:1b:17:
                    0b:27:ff:14:66:7e:59:73:d3:84:04:dc:86:a3:e9:
                    90:6f:8c:ab:a3:c0:bd:03:04:c6:b1:21:62:14:c3:
                    24:ff:1d:58:da:63:8a:61:f5:9e:c2:d7:2f:ae:88:
                    2b:19:50:33:64:89:1a:1c:4e:c9:d5:68:08:91:6d:
                    b5:4e:b8:63:fd:b1:2c:8e:43:d2:11:6b:b0:6c:1c:
                    4f:d2:62:08:c1:5c:7e:66:12:d6:52:c9:20:3a:23:
                    44:f2:8d:c2:73:54:2a:ba:c5:68:7a:5d:fc:f4:9c:
                    06:8e:14:31:b4:0c:a9:20:40:4f:cd:e7:d3:aa:93:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:52:46:9D:67:50:F8:2D:B1:6A:2C:14:91:74:95:DA:7A:0E:DF:D2
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:44:51:6a:84:d3:c0:ff:3b:da:d6:6d:14:e5:78:d7:93:88:
         e1:56:57:70:92:7e:93:cc:0e:05:a4:24:12:db:28:f5:a2:09:
         34:8f:96:90:a2:cb:43:51:2c:d4:e2:b2:ac:8b:80:8c:6e:25:
         e9:24:8c:b2:5b:38:45:f2:44:34:9f:38:20:d4:8b:ca:07:a1:
         9e:b1:69:37:de:ca:f2:8e:fb:78:fa:ce:cb:fd:5c:5b:13:14:
         4e:15:ca:3f:80:b1:26:92:b5:a4:c4:7f:33:f1:aa:2c:8d:d1:
         28:ec:6e:8f:db:68:28:77:74:7b:e1:64:0a:f5:d0:1e:4d:02:
         9b:5a:3d:ae:65:00:57:3f:a9:71:ad:71:4f:72:76:6a:d4:df:
         21:30:37:16:38:42:8f:d6:77:6a:02:0a:70:56:6c:1c:db:a9:
         b4:4e:36:f6:62:b6:97:1c:12:e3:10:49:06:91:25:e6:85:ad:
         84:21:48:b4:44:e5:8e:22:f1:21:c8:7f:3f:5d:4c:b4:1e:05:
         99:93:82:0e:87:a0:21:dc:2b:7b:89:ea:d1:f4:95:f1:9e:10:
         f4:23:2a:f8:43:74:09:b6:2c:37:88:2e:c6:15:33:60:90:64:
         f2:8c:3c:03:74:7c:80:30:da:4e:09:59:5a:72:cd:35:3a:88:
         3a:63:96:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:33 2026 by rpki-client