Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
File:                     6SgMSHGyv5r8M1H99qV936fa9Iw.mft (raw, json)
Hash identifier:          yoZL/hyjRuJU2g22MyNHkGDxchEgeqFC5KVVUi95x04=
Subject key identifier:   75:AC:94:58:C4:AB:31:E9:00:26:DB:BC:3F:75:4F:13:72:9F:1F:CB
Authority key identifier: E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C
Certificate issuer:       /CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
Certificate serial:       019EC0367220FE9AEAB5D1904126ABEEFA17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
Manifest number:          2A
Signing time:             Sat 13 Jun 2026 09:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:54 +0000
Files and hashes:         1: 6SgMSHGyv5r8M1H99qV936fa9Iw.crl (hash: oxn2uHMlpgNMMoYL2h5LRyKqRDKW/tCwOIAYKptCkEw=)
                          2: Wkka_V42HxWorxdgZD9_NFgsaJA.asa (hash: FPyTcbsiLtsSTSgovrUqEmWyP291dinoJqAUbHPLikc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:72:20:fe:9a:ea:b5:d1:90:41:26:ab:ee:fa:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
        Validity
            Not Before: Jun 13 09:00:54 2026 GMT
            Not After : Jun 14 09:00:54 2026 GMT
        Subject: CN=75ac9458c4ab31e90026dbbc3f754f13729f1fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:89:47:ab:1c:62:de:7c:ee:f5:7c:67:f4:
                    68:09:36:4a:7f:51:1f:b4:3c:9b:34:88:2b:da:bc:
                    31:75:35:55:8b:fa:cd:a4:98:8c:d0:60:8f:98:02:
                    df:e8:54:a6:eb:52:2b:23:6d:c7:f2:ca:0a:22:58:
                    44:b4:ae:6d:ac:a7:47:53:b3:f9:d3:eb:2b:4b:31:
                    4b:ab:0d:05:8b:a5:98:8f:73:ad:fa:d7:0e:b3:9c:
                    b1:c4:49:c1:b8:10:e7:ba:dd:b8:ce:ef:03:3f:7e:
                    74:e0:b4:e3:24:db:9b:6d:89:d5:1c:4c:92:bd:85:
                    85:fd:ef:a4:08:30:0a:29:93:76:84:72:1d:f1:3e:
                    89:d8:1d:6c:6b:bd:73:73:8d:af:6b:4e:0e:ee:15:
                    bf:3b:f1:cd:50:d6:15:b2:fd:f4:10:db:47:07:00:
                    7c:8e:7e:a2:98:22:ef:73:02:fe:aa:00:2a:0e:62:
                    ac:59:08:df:4a:f1:14:6f:49:d0:52:7e:78:ea:0f:
                    5d:a9:8d:9c:31:50:ea:dd:b4:66:80:33:52:c5:4c:
                    d6:bb:86:36:d3:a9:02:5b:74:39:22:69:78:59:e0:
                    c2:74:76:a3:17:b6:c8:5c:40:2a:15:1f:35:dd:fa:
                    fb:da:e1:3e:35:25:02:66:e4:19:79:95:18:c4:4a:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:94:58:C4:AB:31:E9:00:26:DB:BC:3F:75:4F:13:72:9F:1F:CB
            X509v3 Authority Key Identifier:
                keyid:E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d6:b7:e6:a2:90:6d:7e:9b:26:76:51:b3:e8:62:6c:73:e8:
         a2:19:2b:4f:5f:eb:f3:82:75:29:79:d2:36:96:62:50:92:a4:
         2f:b0:69:49:fa:4c:10:af:dc:9e:48:0d:5c:2a:25:62:3e:12:
         24:40:fe:f8:cf:a7:1b:50:98:6c:b8:bf:9e:60:5b:7e:fc:8e:
         13:59:56:53:44:eb:fd:ff:07:52:4e:52:c2:c6:da:ac:06:60:
         46:f5:57:cd:d6:ef:c8:ed:c2:64:b1:f5:96:c3:27:0e:b9:3a:
         18:2b:4e:72:b3:0a:50:d4:7c:e2:c8:2b:45:a7:3a:ff:99:6a:
         2b:44:24:d4:c5:43:2f:ee:5a:34:64:3e:66:59:a1:ee:8b:75:
         bc:cd:83:f3:94:9e:f2:b5:5b:5d:31:0f:11:c2:a2:df:c7:96:
         cb:ba:8f:b4:a5:26:08:01:aa:40:0b:d5:31:17:43:3a:35:8b:
         1f:60:10:8d:cd:89:5a:5a:d6:f6:4a:c8:88:8e:0e:67:23:e3:
         cd:28:5e:04:0e:b4:e9:4d:be:c9:e3:a5:85:85:ea:52:ab:11:
         5c:31:16:83:0a:85:4c:82:8f:8e:9b:9d:ee:ce:aa:8d:b3:1a:
         4d:46:2d:a9:7a:8e:71:15:8e:55:ee:1f:bb:f4:53:db:3e:41:
         24:0d:96:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:08 2026 by rpki-client