Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File:                     gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier:          ZAHPrFEMjfq42kgisQqbU2sA1brIhcgwIKvpXKQ5vlk=
Subject key identifier:   14:FA:3B:62:B4:96:85:1F:CA:0A:57:E2:05:D5:71:8E:CC:DC:AD:C3
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer:       /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial:       019ECA8CF4016BAE0381645F9C0200B6C9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number:          6A
Signing time:             Mon 15 Jun 2026 09:11:35 +0000
Manifest this update:     Mon 15 Jun 2026 09:11:35 +0000
Manifest next update:     Tue 16 Jun 2026 09:11:35 +0000
Files and hashes:         1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
                          2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: N/rvc4S9mCLqG624rlQV5yr/9FC+dZ/OUElhYf6aunw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ca:8c:f4:01:6b:ae:03:81:64:5f:9c:02:00:b6:c9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
        Validity
            Not Before: Jun 15 09:11:35 2026 GMT
            Not After : Jun 16 09:11:35 2026 GMT
        Subject: CN=14fa3b62b496851fca0a57e205d5718eccdcadc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:05:d0:88:fe:3e:98:df:c8:92:16:50:8f:
                    f1:9d:40:d3:5c:91:c1:0e:71:61:17:f7:2f:06:de:
                    fd:09:dc:0a:7f:86:76:f1:b0:a5:fb:89:a3:73:8d:
                    57:b5:b0:d3:9a:74:7d:0e:ff:94:bb:cc:02:dd:6f:
                    2e:23:e6:21:9e:bd:f3:d9:10:cf:b3:74:4d:e9:ad:
                    82:b3:ae:a8:96:38:4d:80:df:34:0b:d4:09:17:90:
                    9c:5b:e4:d9:5d:3b:94:65:ca:33:20:2e:59:e1:c6:
                    9c:04:c4:58:d4:a8:b7:d7:8c:26:c1:fe:40:cb:83:
                    46:a6:20:12:8a:2f:3a:50:07:30:a8:5d:a4:97:2e:
                    35:18:d7:68:15:ff:76:a4:aa:1c:d6:18:7c:4f:e0:
                    31:ec:f5:fc:54:a2:a5:54:c6:fd:0f:da:5d:e5:e0:
                    f3:1c:56:78:4c:2f:dc:d1:5c:96:7b:20:a0:68:40:
                    a8:e2:b4:46:40:1c:1b:4d:71:20:cd:b1:2b:75:36:
                    6a:24:a0:de:db:3e:50:6f:fa:37:c7:74:d6:b1:c9:
                    d3:34:3d:6d:2a:1d:dc:44:ef:27:cb:44:c0:6c:09:
                    54:85:13:cd:5a:94:ad:1d:71:31:ba:99:d7:74:cb:
                    f6:4c:89:39:5a:52:e4:5b:ad:ba:33:80:d2:f9:69:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FA:3B:62:B4:96:85:1F:CA:0A:57:E2:05:D5:71:8E:CC:DC:AD:C3
            X509v3 Authority Key Identifier:
                keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:8a:2e:78:21:d9:a0:db:32:58:ad:45:d0:74:8b:91:6d:
         71:b8:67:ca:1c:ed:70:d9:a6:d9:69:8c:ef:f1:95:f5:d6:91:
         5c:bd:e5:17:50:85:09:e8:48:c0:19:d3:93:8e:85:c8:97:8d:
         c7:60:8d:e4:59:75:d9:e6:e7:2f:1c:44:03:e3:1f:d7:1a:1c:
         5e:bb:b5:0b:13:75:b1:45:94:57:f5:28:5d:a0:82:86:8f:b2:
         b7:57:fc:79:66:0a:3a:38:f9:b2:30:10:22:15:26:61:c4:d7:
         26:c1:77:5b:24:24:f9:4c:68:75:e6:b7:5d:5d:2b:b5:e2:a8:
         09:97:bf:45:ce:c1:5b:52:16:b6:ca:d8:10:81:b4:ed:46:80:
         d0:ad:3f:96:37:02:61:93:f5:d8:5d:07:f1:c4:06:b8:63:14:
         4d:6e:36:f2:08:1e:40:71:da:1d:6b:9e:dc:34:a0:21:4b:57:
         b8:18:7f:2d:46:bc:87:6e:7f:45:8d:71:33:8c:8d:2b:dc:f7:
         77:e4:69:48:e5:30:b7:e0:88:ce:a9:d2:75:84:30:89:9d:61:
         00:3d:fb:95:aa:c2:d8:c1:74:d5:38:4c:12:41:1e:c5:87:48:
         4f:8b:03:8f:73:4e:c1:93:a0:12:1e:c7:20:05:c8:1b:75:4c:
         9b:35:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 14:12:31 2026 by rpki-client