Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          67DMjHNhaamUs29k3ZHUCGUf2iy0opQLpKPrYIwGxfY=
Subject key identifier:   E3:5F:91:31:2B:88:D8:F4:A8:E6:D5:14:64:25:8F:FB:1A:92:2F:2D
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019EBE481906A5FB101E1F8BF31774F41552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          156E
Signing time:             Sat 13 Jun 2026 00:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:56 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: O3cDyuIU2ZQTJdIj5xyo47T5I/QwBbL4pktozrS5qyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:19:06:a5:fb:10:1e:1f:8b:f3:17:74:f4:15:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Jun 13 00:00:56 2026 GMT
            Not After : Jun 14 00:00:56 2026 GMT
        Subject: CN=e35f91312b88d8f4a8e6d51464258ffb1a922f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:13:84:1b:b6:38:e6:42:ac:c5:97:7b:8e:
                    33:d7:45:df:57:dd:de:29:a6:23:a7:e8:a5:49:b4:
                    92:b4:33:bf:7a:a2:c4:ac:0d:ab:01:16:3f:a0:f4:
                    30:5b:d7:06:ef:4b:83:a1:99:4b:45:76:de:e3:3c:
                    89:65:50:fa:15:41:38:31:98:2c:84:70:b8:39:4d:
                    9d:4a:65:2b:de:3c:af:e3:72:53:a9:f3:4a:dc:ad:
                    21:12:2f:86:99:49:f3:97:67:97:c2:c0:af:74:d1:
                    0b:03:d4:da:8c:32:13:49:50:13:f3:2d:50:49:4e:
                    e8:7a:b6:9a:18:49:0a:39:59:35:4e:29:49:4d:30:
                    1a:88:41:64:39:da:3d:1f:a0:43:83:e6:86:0b:d7:
                    cc:d1:ad:ce:4c:87:ee:ed:56:45:55:44:7e:1a:d7:
                    a2:2d:cf:25:1a:37:ac:a4:bf:46:b3:6c:50:01:13:
                    e4:88:f2:df:8a:48:81:7d:3a:e8:12:40:d6:49:7b:
                    47:fc:7b:52:6a:8b:5c:88:6a:3f:32:21:02:b4:bb:
                    53:16:07:d3:c8:35:c0:3a:3b:7e:c7:6a:a9:ae:1e:
                    d9:80:1d:6f:1e:ae:ee:f7:af:53:01:a3:8d:1d:2a:
                    d7:23:fd:cc:7c:18:10:f9:7e:ad:70:ad:51:d8:f3:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5F:91:31:2B:88:D8:F4:A8:E6:D5:14:64:25:8F:FB:1A:92:2F:2D
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:fb:cd:94:03:23:40:a1:e3:fd:4b:3f:43:44:13:15:32:
         f0:36:e5:42:f1:c4:03:29:19:f2:66:36:30:b9:d3:2d:43:d3:
         71:31:e5:ef:b2:7b:83:d9:dd:42:2a:f4:05:65:61:e7:4e:b7:
         75:21:40:fd:df:a0:c9:22:df:da:72:dd:73:7e:c3:fe:19:1c:
         7b:74:12:57:7c:08:f4:bd:00:b1:df:89:8a:02:0e:27:fd:fe:
         51:77:0c:ed:e6:53:dc:62:5e:42:3f:53:ab:27:ab:49:28:cd:
         cc:69:a5:53:e1:bd:5c:44:6d:60:52:bd:b4:76:fb:c8:75:d6:
         5c:fd:38:dd:47:f2:66:75:6b:4c:3f:03:7b:70:78:59:0d:45:
         b3:de:31:85:e7:ad:c2:a8:fc:01:8b:9e:22:6a:2e:b1:57:f8:
         b4:85:4b:90:d5:05:34:73:95:66:e7:13:a3:ae:73:cf:a6:7e:
         2a:b5:9d:24:d4:4d:ef:57:f1:09:e2:ae:2b:66:11:f0:f5:d4:
         cb:bb:d3:08:7b:7f:4b:58:0d:ba:ec:4a:56:6c:43:fd:ed:eb:
         eb:4e:4a:99:d6:47:50:df:47:57:d6:cb:56:e1:7b:6d:d9:86:
         f8:4b:ae:b6:95:82:3c:98:6a:ee:1a:b9:32:56:ae:ba:f3:45:
         e4:25:5a:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SBkGpfsQHh+L8xd09BVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGIzNWY1OTllZjFjMjZmMjQ5ODNmOTE1YTdlYWVjNjc5
N2M3ZmEwHhcNMjYwNjEzMDAwMDU2WhcNMjYwNjE0MDAwMDU2WjAzMTEwLwYDVQQD
EyhlMzVmOTEzMTJiODhkOGY0YThlNmQ1MTQ2NDI1OGZmYjFhOTIyZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkThBu2OOZCrMWXe44z10XfV93e
KaYjp+ilSbSStDO/eqLErA2rARY/oPQwW9cG70uDoZlLRXbe4zyJZVD6FUE4MZgs
hHC4OU2dSmUr3jyv43JTqfNK3K0hEi+GmUnzl2eXwsCvdNELA9TajDITSVAT8y1Q
SU7oeraaGEkKOVk1TilJTTAaiEFkOdo9H6BDg+aGC9fM0a3OTIfu7VZFVUR+Gtei
Lc8lGjespL9Gs2xQARPkiPLfikiBfTroEkDWSXtH/HtSaotciGo/MiECtLtTFgfT
yDXAOjt+x2qprh7ZgB1vHq7u969TAaONHSrXI/3MfBgQ+X6tcK1R2PObLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONfkTEriNj0qObVFGQlj/saki8tMB8GA1UdIwQY
MBaAFOiLNfWZ7xwm8kmD+RWn6uxnl8f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjIt
NzcwNTk1MzYzZTY1LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjItNzcwNTk1MzYzZTY1
LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPT7zZQD
I0Ch4/1LP0NEExUy8DblQvHEAykZ8mY2MLnTLUPTcTHl77J7g9ndQir0BWVh5063
dSFA/d+gySLf2nLdc37D/hkce3QSV3wI9L0Asd+JigIOJ/3+UXcM7eZT3GJeQj9T
qyerSSjNzGmlU+G9XERtYFK9tHb7yHXWXP043UfyZnVrTD8De3B4WQ1Fs94xheet
wqj8AYueImousVf4tIVLkNUFNHOVZucTo65zz6Z+KrWdJNRN71fxCeKuK2YR8PXU
y7vTCHt/S1gNuuxKVmxD/e3r605KmdZHUN9HV9bLVuF7bdmG+EuutpWCPJhq7hq5
MlauuvNF5CVamw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:02 2026 by rpki-client