Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File:                     6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier:          m4LS2WAi2Vw8vc7XC2hbCZhOfrvwBTLEH0v/al4QADM=
Subject key identifier:   AF:F5:16:2A:9B:7A:E8:29:49:83:9C:72:C0:8F:DF:61:9C:AF:16:11
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer:       /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial:       019EBF5B3D9A5E1DC5CB355E36486E8FFB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 05:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:28 +0000
Files and hashes:         1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: b+NIG4yT75ZTNK4b8BfdnGzmAPPkPkJtG2Fk3NO0ooM=)
                          2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:3d:9a:5e:1d:c5:cb:35:5e:36:48:6e:8f:fb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
        Validity
            Not Before: Jun 13 05:01:28 2026 GMT
            Not After : Jun 14 05:01:28 2026 GMT
        Subject: CN=aff5162a9b7ae82949839c72c08fdf619caf1611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:bf:d6:3a:7c:8e:78:b4:27:cc:79:7c:15:
                    6d:51:d6:9a:ef:88:0e:51:e2:e2:51:79:88:ab:1a:
                    0d:11:44:ff:20:76:b6:50:49:55:77:6d:20:1e:03:
                    93:c4:d2:8a:78:99:d7:b7:81:66:b7:9b:13:64:a0:
                    06:57:71:a6:77:d8:70:10:6e:40:b4:55:cb:0e:d8:
                    62:78:6b:c9:5f:21:3e:3e:7d:9f:b3:cd:aa:28:ff:
                    4f:2e:5b:71:f3:be:04:f1:99:21:b4:92:5d:cf:67:
                    25:77:17:54:3d:c6:32:60:92:7a:ec:0e:3f:0d:97:
                    54:9f:3d:24:1c:26:57:c3:92:10:1e:19:1e:d1:d8:
                    f4:2f:16:7a:20:b2:d4:dd:c2:78:a4:8a:61:ee:ea:
                    54:e7:54:ab:07:5a:84:e9:73:14:69:ef:6b:be:36:
                    9d:8c:be:7b:59:93:90:0a:94:8c:1f:72:8e:b3:81:
                    fa:e6:eb:f7:d9:0e:a7:25:a5:7a:ca:a4:45:ab:6b:
                    1f:e1:08:a5:b5:7a:6c:9b:a9:44:af:a4:54:15:b1:
                    de:f4:e5:14:16:9d:fe:64:bb:73:9d:3d:d1:25:fc:
                    8f:47:83:be:de:ca:a3:2a:e5:4b:51:09:30:a8:67:
                    55:cf:48:71:b5:0a:93:72:a7:45:ce:d1:cc:fe:ce:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:16:2A:9B:7A:E8:29:49:83:9C:72:C0:8F:DF:61:9C:AF:16:11
            X509v3 Authority Key Identifier:
                keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a6:d8:19:ce:db:02:3c:8e:37:1a:dd:05:59:de:58:28:bb:
         77:c9:15:5f:f4:68:c1:e3:e0:94:db:d3:3e:5f:f6:ee:d1:12:
         9e:2d:51:d8:33:6f:30:0f:f8:09:6f:48:d4:b0:5b:3a:2d:0f:
         b6:b2:0b:32:a6:e0:e1:f2:bd:03:a5:86:65:0d:88:50:4b:09:
         a4:8f:62:d5:de:ce:f2:55:88:00:4d:32:91:44:03:42:9f:ad:
         15:21:a9:d4:a1:6e:06:f4:97:25:b5:5f:f3:62:08:b8:0e:f4:
         d7:bc:27:02:ef:f8:39:6b:bf:38:d5:6c:14:fb:d2:a5:bd:c8:
         08:2f:9b:81:54:50:53:a3:ff:07:3d:f6:23:10:01:fc:8f:f7:
         fb:a4:2d:c6:f0:46:5a:f4:38:00:e1:fa:34:9f:a0:2d:78:0d:
         4d:4f:61:56:b1:42:7c:cd:96:b4:77:43:40:a5:49:40:1c:fc:
         03:8a:90:ca:2e:ac:0c:c1:68:46:9a:5d:8d:9f:4d:07:08:e0:
         ad:14:af:d3:01:c4:57:5f:c1:62:d5:22:bb:7d:e6:26:98:12:
         09:51:bd:d1:3a:ed:7e:86:58:ca:86:e2:e3:ad:8f:be:6b:da:
         1b:f2:a2:62:a6:b8:1f:9e:58:2c:e6:a7:b0:fb:0f:e0:45:5d:
         0a:06:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:17 2026 by rpki-client