Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          NdPAAPR7sVF02SGvGyOPMEi+8us33Rna8JpxZgDKc/s=
Subject key identifier:   55:76:6B:22:9A:2E:BB:D7:0B:74:00:74:90:35:06:14:84:59:CD:CA
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       019EBFFFA1F8E40742F5D78F6D12BA8F7D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0EB5
Signing time:             Sat 13 Jun 2026 08:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 08:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 08:01:01 +0000
Files and hashes:         1: 5s94JKAXDJrQpueM4W0HRuRUXqQ.roa (hash: CzNnEJOva2qyeDIKL4O8DARiGLjA2TNz7kBujtqjE84=)
                          2: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: LmcVVYnIPXSugRMDt/CbsAiJah8f4sgoSMnRtQzYGJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:a1:f8:e4:07:42:f5:d7:8f:6d:12:ba:8f:7d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: Jun 13 08:01:01 2026 GMT
            Not After : Jun 14 08:01:01 2026 GMT
        Subject: CN=55766b229a2ebbd70b740074903506148459cdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:3a:f8:79:ac:59:b7:4b:8c:ac:e7:2c:c5:
                    0d:cd:e3:89:08:fc:be:ed:8f:1b:65:98:08:58:1c:
                    ce:d1:07:74:a4:5c:f3:b6:49:07:69:bc:a9:84:c0:
                    7b:bf:fa:6a:40:b3:53:c4:48:6d:cf:86:d2:ee:53:
                    47:af:c5:de:45:04:df:0a:65:61:87:05:8f:a2:06:
                    be:43:27:db:94:39:40:33:75:dc:56:5c:ca:e1:c6:
                    93:26:54:b9:01:74:c4:e7:a3:15:9e:9d:a3:db:14:
                    fc:d6:c2:c1:44:ba:65:87:6a:95:72:43:df:b4:e7:
                    9d:84:ad:7a:dc:e6:2c:a2:b7:b6:e5:65:85:61:e2:
                    70:75:7e:45:c7:6c:f1:37:de:a5:e4:3f:49:2f:f7:
                    f6:36:e9:65:2b:9c:f4:4c:63:d3:98:fe:e0:9e:15:
                    72:37:2d:38:60:24:55:a5:1f:44:16:83:a7:bc:2f:
                    21:e6:52:62:0d:05:e4:01:d4:27:bd:00:20:e3:4a:
                    c9:a1:dd:25:64:47:5a:66:bd:63:45:95:78:5d:b6:
                    bd:d2:bf:a3:9c:b6:5a:34:4d:49:e9:7d:2f:69:98:
                    a5:24:b5:8c:0c:47:6d:3f:bf:ab:23:6e:70:f8:a2:
                    da:dc:24:79:93:42:e4:d0:d0:90:85:81:73:03:fd:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:76:6B:22:9A:2E:BB:D7:0B:74:00:74:90:35:06:14:84:59:CD:CA
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:7b:9b:66:62:62:ee:4b:c9:4d:a2:b8:58:1e:a9:88:25:
         69:29:84:67:c8:82:14:b5:88:c2:c4:5f:ae:5c:d8:fc:90:d7:
         ba:14:a2:48:70:89:c5:52:7b:8a:c8:42:75:93:4b:af:6f:9c:
         94:2d:e2:b3:c6:6d:5d:aa:4f:bb:cb:9d:e4:df:85:d9:28:90:
         c4:ab:8e:ae:35:0c:cc:89:6b:1c:4d:c1:62:10:f0:1d:b9:df:
         29:ae:95:e6:7f:1d:dc:42:2c:c9:6b:82:04:c2:79:ae:06:19:
         7c:61:5c:f3:c7:24:c6:5e:d8:3e:55:dd:06:dd:fb:ed:06:ba:
         11:11:99:b9:48:39:44:f2:e7:f9:b4:21:93:04:c5:f8:f4:2e:
         a5:1b:0a:2f:14:81:63:24:3c:c3:9e:e7:40:88:d7:f7:ea:b0:
         78:5f:ac:11:d4:a9:b0:31:a0:e0:51:2d:09:f4:cc:79:b6:df:
         d5:6b:fc:d8:24:20:28:e7:80:bc:5e:b6:c2:ce:9d:79:93:87:
         45:61:52:a8:a8:5c:84:a9:5f:44:8d:1a:7e:7e:e5:8c:94:7f:
         fa:79:79:79:7f:be:8a:c9:e6:10:01:c5:67:7c:20:f0:ff:53:
         fd:ba:19:14:0c:78:ed:c5:a9:6b:e4:fc:ec:ba:dc:fc:45:8d:
         4c:43:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:26 2026 by rpki-client