Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File:                     6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier:          QYJuPIOCkcxoheNrWNVuCBpxfspvPzwqeBU6gi7Tf5Q=
Subject key identifier:   66:8C:96:02:38:73:76:57:86:C2:A4:E2:A2:CC:17:C3:F6:06:26:FD
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer:       /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial:       019EC1490C06B6B6FE054D391FC8B5C5FB42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number:          0C64
Signing time:             Sat 13 Jun 2026 14:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:50 +0000
Files and hashes:         1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
                          2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: 5Pvgdar7Yq9VbJecHbs/pqO0QVbbixgboUC23J3nRJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:0c:06:b6:b6:fe:05:4d:39:1f:c8:b5:c5:fb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
        Validity
            Not Before: Jun 13 14:00:50 2026 GMT
            Not After : Jun 14 14:00:50 2026 GMT
        Subject: CN=668c96023873765786c2a4e2a2cc17c3f60626fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:38:ce:f0:9f:44:83:40:a8:34:80:5c:c6:
                    0e:e9:d4:dd:0d:3c:28:2c:9e:b6:34:80:e4:a0:73:
                    34:c8:a7:30:1c:2a:37:b0:69:ae:f3:e1:77:65:a3:
                    1a:ff:8b:9e:d7:4b:06:15:93:35:dd:6e:14:a4:f3:
                    d9:f3:51:02:b7:58:f2:c9:52:77:db:b4:28:c2:2e:
                    24:8e:18:8a:51:a9:f7:5c:0b:83:2c:16:a5:7c:f3:
                    cd:43:fc:1f:4f:48:36:33:bd:a9:8f:1d:da:64:71:
                    55:a4:8f:2d:70:85:f0:b0:38:13:92:09:48:1b:37:
                    d8:66:79:de:93:3a:ad:22:4e:45:de:3c:20:e3:e8:
                    7c:66:84:1f:a5:4c:cc:40:c6:36:db:47:fd:35:87:
                    d4:11:2d:a7:36:fb:5e:33:8d:b2:4f:f9:0f:77:04:
                    91:f2:be:70:03:bc:00:06:44:e6:36:89:21:1a:19:
                    63:70:f4:87:ad:2c:b3:2e:8b:fa:fd:7d:f6:64:e8:
                    8b:2b:62:e4:66:55:c7:01:ca:46:54:42:98:8f:19:
                    cf:6a:c9:1b:17:85:fa:9c:36:36:d9:8a:02:68:d1:
                    a6:9e:c7:05:d7:06:32:b6:8d:26:e9:04:06:31:2a:
                    ea:25:53:2d:34:e0:73:39:42:1c:de:61:a8:d9:d0:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8C:96:02:38:73:76:57:86:C2:A4:E2:A2:CC:17:C3:F6:06:26:FD
            X509v3 Authority Key Identifier:
                keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:1e:3b:2d:ed:9b:ff:ce:dd:a7:0a:a9:7d:26:40:74:a2:
         b3:2a:ad:58:94:6f:40:40:50:83:c1:cf:1d:c5:f1:c8:e6:5d:
         40:9b:93:55:ac:02:b8:72:b9:77:8a:51:54:a3:1a:71:10:fc:
         8f:df:49:15:8a:a9:25:1c:a6:62:23:58:bd:23:74:55:92:53:
         af:d5:f6:11:0a:c8:7c:a8:0d:3f:00:63:c9:20:44:47:3c:c6:
         0a:da:ea:b4:f5:c0:a3:11:f2:46:3f:cd:89:0f:66:56:d4:b3:
         2d:f8:f7:fc:fe:b4:f6:97:82:4f:ad:3c:83:4c:38:d9:90:3f:
         29:43:60:1e:cd:b4:51:76:3c:ea:65:22:b0:ce:6d:5e:49:6f:
         85:29:f8:6d:ca:ea:26:07:7a:81:34:bc:bb:db:2f:73:5f:6d:
         55:19:7b:25:51:60:85:6c:ec:ff:9d:cd:be:cb:bd:c0:c4:6b:
         65:87:1d:b6:0c:8f:ca:87:61:19:1d:53:17:dd:12:57:8d:a6:
         72:80:82:08:b6:39:49:d7:fb:0a:39:44:93:6a:fc:8b:6d:07:
         7e:21:48:f3:bc:8d:86:9a:7a:82:b9:de:96:2c:3d:72:06:8a:
         d2:9e:c4:00:c1:3a:47:28:72:84:93:df:06:7a:df:28:a0:f1:
         ce:43:01:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSQwGtrb+BU05H8i1xftCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MzkzYmQxMzA1ZjZjYzQ0MzkxOTIxMTljNjA1ZjQ0YmJm
MDliYzkwHhcNMjYwNjEzMTQwMDUwWhcNMjYwNjE0MTQwMDUwWjAzMTEwLwYDVQQD
Eyg2NjhjOTYwMjM4NzM3NjU3ODZjMmE0ZTJhMmNjMTdjM2Y2MDYyNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbE4zvCfRINAqDSAXMYO6dTdDTwo
LJ62NIDkoHM0yKcwHCo3sGmu8+F3ZaMa/4ue10sGFZM13W4UpPPZ81ECt1jyyVJ3
27Qowi4kjhiKUan3XAuDLBalfPPNQ/wfT0g2M72pjx3aZHFVpI8tcIXwsDgTkglI
GzfYZnnekzqtIk5F3jwg4+h8ZoQfpUzMQMY220f9NYfUES2nNvteM42yT/kPdwSR
8r5wA7wABkTmNokhGhljcPSHrSyzLov6/X32ZOiLK2LkZlXHAcpGVEKYjxnPaskb
F4X6nDY22YoCaNGmnscF1wYyto0m6QQGMSrqJVMtNOBzOUIc3mGo2dA/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaMlgI4c3ZXhsKk4qLMF8P2Bib9MB8GA1UdIwQY
MBaAFOg5O9EwX2zEQ5GSEZxgX0S78JvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUt
YjA2ZmRhMDFmNDZjLzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80NTgwMTEtNWRlMS00NjgwLTgyNTUtYjA2ZmRhMDFmNDZj
LzEvNkRrNzBUQmZiTVJEa1pJUm5HQmZSTHZ3bThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU0eOy3t
m//O3acKqX0mQHSisyqtWJRvQEBQg8HPHcXxyOZdQJuTVawCuHK5d4pRVKMacRD8
j99JFYqpJRymYiNYvSN0VZJTr9X2EQrIfKgNPwBjySBERzzGCtrqtPXAoxHyRj/N
iQ9mVtSzLfj3/P609peCT608g0w42ZA/KUNgHs20UXY86mUisM5tXklvhSn4bcrq
Jgd6gTS8u9svc19tVRl7JVFghWzs/53Nvsu9wMRrZYcdtgyPyodhGR1TF90SV42m
coCCCLY5Sdf7CjlEk2r8i20HfiFI87yNhpp6grneliw9cgaK0p7EAME6RyhyhJPf
BnrfKKDxzkMBTg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:43 2026 by rpki-client