Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
File:                     6u6iC7vbml0c3HEU4q9RjnaxQm4.mft (raw, json)
Hash identifier:          BhhsSqWF44kjKSfZPf44tawlYcJJE+kk+wH9akpriBc=
Subject key identifier:   01:79:51:CE:5B:2F:99:F3:02:BB:21:06:92:00:30:79:C2:D6:89:18
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Certificate issuer:       /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial:       019EBF5A9A40908871B0A028CA1B42256BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 05:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:46 +0000
Files and hashes:         1: 6u6iC7vbml0c3HEU4q9RjnaxQm4.crl (hash: 4fWhiAhSf7+Ll98wQn44bLI9zZBhdF9NBWftzowLs7o=)
                          2: LZEBPluhCoborF_O0Fk61GdYTw8.roa (hash: zfbx+QvXX+SeMAX2wWC1OWFd4i1WRuUBcXy9UiFHCF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:9a:40:90:88:71:b0:a0:28:ca:1b:42:25:6b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
        Validity
            Not Before: Jun 13 05:00:46 2026 GMT
            Not After : Jun 14 05:00:46 2026 GMT
        Subject: CN=017951ce5b2f99f302bb210692003079c2d68918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:02:8c:59:60:32:e4:26:68:6c:d6:b3:d9:
                    94:f3:a8:cf:ae:ed:49:55:f6:f2:30:ea:19:be:0d:
                    26:a6:74:14:40:de:23:93:01:88:9e:b7:ba:1a:c7:
                    3f:15:c6:82:2e:16:b5:ef:8e:7d:99:2b:6d:aa:55:
                    43:7e:9a:06:29:e9:4f:48:b7:25:78:b5:22:f1:d6:
                    5d:7f:2f:6f:4d:a8:cf:19:c8:c4:3d:90:d9:cc:0d:
                    6a:17:e7:4b:73:25:7e:b4:5f:d1:2f:07:68:2d:35:
                    88:f7:a3:61:c8:64:97:fd:1a:86:f9:1d:14:ea:24:
                    25:99:b0:a4:2c:63:0e:06:ee:70:56:9c:04:58:7b:
                    32:41:59:08:92:72:58:9f:a4:2f:d6:c3:17:39:b7:
                    34:8e:ad:e3:c5:76:ab:a4:45:75:af:63:02:fa:3b:
                    e8:30:7a:7b:7a:54:54:5e:94:19:2b:2e:bf:97:b5:
                    e4:49:34:96:37:59:68:3d:cc:84:71:43:19:85:dd:
                    2f:c3:64:7f:89:4c:83:9f:1c:0b:9d:de:c5:3b:6a:
                    fe:1b:eb:33:55:ad:4e:b3:8f:b3:eb:3a:71:d5:12:
                    e5:9c:f6:6b:7b:23:5c:5b:a5:25:f9:0a:fc:b3:f2:
                    ba:ff:db:0a:cd:8d:e5:1b:c7:23:68:ad:b7:a9:08:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:79:51:CE:5B:2F:99:F3:02:BB:21:06:92:00:30:79:C2:D6:89:18
            X509v3 Authority Key Identifier:
                keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:37:4d:6c:e6:6d:33:aa:e9:12:e4:03:a6:a9:9d:76:5e:56:
         39:d2:ad:5a:81:63:ab:a3:c9:d3:62:1f:fb:f1:4d:7e:8f:44:
         e1:cf:7e:50:9d:b7:cc:68:fa:b5:5b:8e:33:14:f0:58:17:4f:
         57:4e:32:7a:2b:80:40:bc:f3:fc:50:03:38:43:e4:94:18:7d:
         1e:10:11:2c:00:ea:20:7b:6d:84:c2:5a:e1:b4:61:ba:8e:fc:
         05:06:a7:5e:48:74:67:33:a0:65:e3:05:25:f2:9d:7c:e1:60:
         45:32:48:f6:97:c4:10:21:3c:d6:e4:02:ba:9d:f5:f5:a7:8b:
         9b:ca:02:e6:43:0e:b4:82:b0:05:e6:f6:95:f2:8e:4f:e7:8d:
         81:f3:61:27:d0:b0:78:0f:db:b8:84:be:6e:05:83:5c:b4:7e:
         f7:f9:fb:8d:d9:51:fb:af:bd:96:64:a8:95:8a:56:f1:a4:31:
         51:b1:76:c1:63:46:06:35:dd:58:31:2a:51:29:ae:b4:2d:46:
         05:73:3b:8d:66:b6:24:0c:26:33:42:65:e9:04:d0:ba:2f:a2:
         0e:2a:a4:0e:a9:18:ab:45:46:b8:da:2a:71:35:50:47:0e:c9:
         bc:6c:ac:8e:37:2b:8b:f4:5c:8b:32:ec:aa:34:ea:47:2a:44:
         19:ab:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:45 2026 by rpki-client