Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File:                     6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier:          LkuRICYZAwu0JlH60cl/MmNRMK5y4BRv5qv1hPlzYwo=
Subject key identifier:   D5:95:7B:74:89:38:8C:E5:FB:40:6F:C7:AB:BB:3D:3B:C4:B0:3C:BD
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       019EBF914E0A7A4590CFEA729494B1176D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number:          18FA
Signing time:             Sat 13 Jun 2026 06:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:31 +0000
Files and hashes:         1: 3V-oI545qzWJJ_b9C5qCJ8LoZ70.roa (hash: dBqoxgKCcb3Bb3rl4SUwmiuxUnl7cOt7xFGOUiVmfSc=)
                          2: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: 3VajSiJrrTnkGx2hbz6iDdguRJgA94kUz79zpbfvFV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:4e:0a:7a:45:90:cf:ea:72:94:94:b1:17:6d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Jun 13 06:00:31 2026 GMT
            Not After : Jun 14 06:00:31 2026 GMT
        Subject: CN=d5957b7489388ce5fb406fc7abbb3d3bc4b03cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9b:e0:bb:5f:66:4f:d1:50:2d:e5:a7:03:e0:
                    ae:6b:d3:e7:f9:fc:81:aa:bf:f7:f9:28:33:32:87:
                    b7:dd:e0:02:54:77:34:8e:bf:bc:81:73:82:4f:05:
                    b9:5d:30:c5:71:dd:d7:70:7c:8d:f2:65:19:29:d0:
                    1f:c4:d8:6f:1a:d6:a1:5e:d1:86:e1:9d:0d:4b:26:
                    40:32:f6:93:8b:39:57:95:4c:38:0e:bc:6f:22:a0:
                    c5:6f:3f:f7:0a:89:39:5d:5a:c1:3f:de:02:40:4e:
                    1e:f5:c9:80:52:6d:b5:1e:82:d8:1b:6c:c2:c7:0d:
                    06:47:fb:f4:a8:cd:d5:9b:51:f5:e7:30:fa:de:fa:
                    e6:6d:4a:9e:30:da:33:79:3b:c7:3b:01:06:18:52:
                    9e:88:29:0a:a2:6d:52:92:ac:35:d0:b5:9b:e8:ea:
                    2a:71:16:91:da:60:7b:77:5f:b4:10:b8:27:8f:cb:
                    19:f7:00:e9:ac:8a:80:d5:e2:d3:f2:f8:69:a7:d7:
                    25:27:e1:50:b6:88:5b:5f:20:93:d7:14:f8:48:ef:
                    5b:ed:5b:c5:25:66:ac:85:3d:f6:7e:96:d2:ea:26:
                    15:bd:06:04:fb:05:58:25:62:a0:56:06:83:4d:75:
                    82:00:06:ce:9c:f0:dc:85:0a:94:82:7b:35:dc:02:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:7B:74:89:38:8C:E5:FB:40:6F:C7:AB:BB:3D:3B:C4:B0:3C:BD
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:b1:81:9c:87:22:b4:34:7c:a6:f2:22:d5:3f:39:c9:69:
         40:67:1b:33:b1:5d:ff:a1:25:ad:ca:4b:83:19:86:56:2d:f2:
         7d:7e:11:fa:a3:e9:71:e1:87:da:43:09:0a:02:03:74:1b:83:
         a6:90:82:83:ce:12:ee:07:c0:c0:01:c3:60:be:13:ff:37:0f:
         0b:80:91:0c:5e:fd:43:46:23:8a:43:93:09:bb:0f:f6:1b:20:
         41:9a:da:c1:39:0f:c2:98:14:4f:48:23:86:3a:b4:58:f0:e1:
         9a:34:02:a2:5b:a7:c5:1f:50:67:84:1a:1a:04:e2:95:a4:ba:
         98:41:07:eb:49:4f:31:ff:b3:dc:b3:2b:41:f5:81:11:16:71:
         57:0d:9f:ed:6c:98:a3:c5:92:4e:bd:26:45:92:8e:6c:77:dc:
         23:f5:5d:34:38:0b:e0:3b:e2:44:65:f1:e6:1b:52:69:87:fa:
         29:e1:51:b9:57:31:95:14:0b:77:5c:9d:a3:8e:a6:df:ed:b0:
         78:8f:1d:5f:de:bc:f8:ab:d5:1c:ca:f0:44:99:88:7b:09:1e:
         9d:29:77:f4:c2:3b:f9:ea:3b:28:1c:4e:e3:e1:17:cf:92:a2:
         df:3d:42:bf:f3:ef:af:b8:e2:77:48:48:16:e1:76:6e:f7:93:
         72:5b:56:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:42 2026 by rpki-client