Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft
File:                     6B2ZuoeSKLH-N9In78u1EA0mnB0.mft (raw, json)
Hash identifier:          Pq9GXrZK7xBucM8ECHqFEZUVhQNrUVtJTJhXBgu/qs8=
Subject key identifier:   32:AF:D4:2A:D1:73:FD:04:D0:75:9F:89:26:F3:F6:43:1A:BE:DD:74
Authority key identifier: E8:1D:99:BA:87:92:28:B1:FE:37:D2:27:EF:CB:B5:10:0D:26:9C:1D
Certificate issuer:       /CN=e81d99ba879228b1fe37d227efcbb5100d269c1d
Certificate serial:       019F10E4AC2A5536E77F991AA53973A83841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft
Manifest number:          11
Signing time:             Mon 29 Jun 2026 01:00:49 +0000
Manifest this update:     Mon 29 Jun 2026 01:00:49 +0000
Manifest next update:     Tue 30 Jun 2026 01:00:49 +0000
Files and hashes:         1: 6B2ZuoeSKLH-N9In78u1EA0mnB0.crl (hash: ZRa8rgrsCV7g3qgx1NLzdmumZ4/rUD8eeGftdrzj4K0=)
                          2: LrxveVVI1YbXzHui487dzYZC2jQ.asa (hash: z7CEZnwFSLmmQ03u7S1qRBf60T8X4+W9oWYTAWpl4jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:ac:2a:55:36:e7:7f:99:1a:a5:39:73:a8:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d99ba879228b1fe37d227efcbb5100d269c1d
        Validity
            Not Before: Jun 29 01:00:49 2026 GMT
            Not After : Jun 30 01:00:49 2026 GMT
        Subject: CN=32afd42ad173fd04d0759f8926f3f6431abedd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:6a:70:08:da:00:9b:c5:e4:5b:bc:51:44:
                    b3:e6:74:41:c7:a8:59:74:80:63:a8:98:5b:89:23:
                    d0:b8:f3:19:82:e4:02:a4:9c:d0:a8:d0:d7:58:53:
                    a2:f2:3e:fe:e3:0b:09:cd:93:6a:fc:19:bb:36:d2:
                    5c:dd:18:aa:a0:90:23:c1:4f:a9:18:09:76:ef:cd:
                    9c:60:c2:91:3a:2b:0e:03:80:a9:17:69:b6:e4:01:
                    b9:44:a0:95:92:c2:a3:83:07:d0:b8:74:8f:e8:e1:
                    60:79:1f:7f:e3:7a:2c:cf:3f:5b:1e:f6:7f:95:39:
                    50:64:32:4c:b6:67:6a:40:14:0a:ee:88:66:a4:96:
                    b0:24:34:06:91:9b:dc:ec:c9:2d:0b:fd:fd:a0:74:
                    74:26:45:32:12:2e:42:1c:20:c6:8b:0f:15:87:b9:
                    59:79:e0:4a:3e:9a:18:4b:d5:e6:8f:ee:5b:4c:6e:
                    84:aa:f0:95:3f:74:95:f4:f6:08:3f:b1:9d:45:ed:
                    b2:17:a6:b1:26:8d:a8:3b:60:a4:5a:67:1e:f0:4d:
                    1f:26:f8:11:1a:99:cb:4d:be:63:83:bf:2d:5e:8f:
                    0c:42:b8:06:b8:c6:1c:5d:c8:41:9d:8b:d0:04:2c:
                    47:29:1e:af:a1:6d:a9:fa:a8:8a:74:09:ac:a5:bb:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AF:D4:2A:D1:73:FD:04:D0:75:9F:89:26:F3:F6:43:1A:BE:DD:74
            X509v3 Authority Key Identifier:
                keyid:E8:1D:99:BA:87:92:28:B1:FE:37:D2:27:EF:CB:B5:10:0D:26:9C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B2ZuoeSKLH-N9In78u1EA0mnB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e4039b-3610-4fa2-8bb9-a3219c094286/1/6B2ZuoeSKLH-N9In78u1EA0mnB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:19:59:99:34:2f:0a:e3:69:ad:71:a4:2a:a0:7b:48:3f:1c:
         9c:43:f4:41:02:4e:51:45:41:aa:6b:3c:1a:61:81:3e:81:10:
         77:83:b8:46:87:1c:28:66:de:8f:09:a8:a1:cf:0f:77:0c:cb:
         5f:be:13:c6:b7:92:34:cb:4d:2d:05:f6:11:b4:ef:c2:a9:f4:
         60:19:2a:c3:02:a6:4b:06:18:c4:7e:2c:31:c5:80:03:48:9b:
         22:9e:e9:7c:12:27:81:f1:f2:b3:bb:33:3e:6c:62:43:94:f9:
         08:66:79:eb:44:78:b4:63:ac:0f:59:fb:a7:40:82:2b:d2:c2:
         7d:0e:6c:f9:3f:b0:5c:c8:46:a0:95:38:5e:1e:97:7a:54:6b:
         3a:87:ef:7f:91:85:79:d3:da:b6:c5:73:70:7b:3f:6b:38:13:
         f2:dd:29:37:c6:8a:fc:17:c8:e9:54:d3:fd:73:53:fd:84:7c:
         0d:1a:b6:e5:ca:ee:2b:ff:da:92:4b:25:94:fd:57:42:76:ea:
         90:b2:14:a8:cf:59:de:51:13:ae:3c:d8:19:6d:c2:0d:1b:fc:
         03:40:95:63:09:ca:45:97:ea:02:37:41:eb:fb:3c:cd:a9:1e:
         06:32:eb:0c:31:16:47:56:01:a5:d0:3d:78:d3:53:e6:8d:e0:
         2f:36:30:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5KwqVTbnf5kapTlzqDhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MWQ5OWJhODc5MjI4YjFmZTM3ZDIyN2VmY2JiNTEwMGQy
NjljMWQwHhcNMjYwNjI5MDEwMDQ5WhcNMjYwNjMwMDEwMDQ5WjAzMTEwLwYDVQQD
EygzMmFmZDQyYWQxNzNmZDA0ZDA3NTlmODkyNmYzZjY0MzFhYmVkZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjtqcAjaAJvF5Fu8UUSz5nRBx6hZ
dIBjqJhbiSPQuPMZguQCpJzQqNDXWFOi8j7+4wsJzZNq/Bm7NtJc3RiqoJAjwU+p
GAl2782cYMKROisOA4CpF2m25AG5RKCVksKjgwfQuHSP6OFgeR9/43oszz9bHvZ/
lTlQZDJMtmdqQBQK7ohmpJawJDQGkZvc7MktC/39oHR0JkUyEi5CHCDGiw8Vh7lZ
eeBKPpoYS9Xmj+5bTG6EqvCVP3SV9PYIP7GdRe2yF6axJo2oO2CkWmce8E0fJvgR
GpnLTb5jg78tXo8MQrgGuMYcXchBnYvQBCxHKR6voW2p+qiKdAmspbsxgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKv1CrRc/0E0HWfiSbz9kMavt10MB8GA1UdIwQY
MBaAFOgdmbqHkiix/jfSJ+/LtRANJpwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkIyWnVvZVNLTEgtTjlJbjc4dTFFQTBtbkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lNDAzOWItMzYxMC00ZmEyLThiYjkt
YTMyMTljMDk0Mjg2LzEvNkIyWnVvZVNLTEgtTjlJbjc4dTFFQTBtbkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lNDAzOWItMzYxMC00ZmEyLThiYjktYTMyMTljMDk0Mjg2
LzEvNkIyWnVvZVNLTEgtTjlJbjc4dTFFQTBtbkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhlZmTQv
CuNprXGkKqB7SD8cnEP0QQJOUUVBqms8GmGBPoEQd4O4RoccKGbejwmooc8PdwzL
X74TxreSNMtNLQX2EbTvwqn0YBkqwwKmSwYYxH4sMcWAA0ibIp7pfBIngfHys7sz
PmxiQ5T5CGZ560R4tGOsD1n7p0CCK9LCfQ5s+T+wXMhGoJU4Xh6XelRrOofvf5GF
edPatsVzcHs/azgT8t0pN8aK/BfI6VTT/XNT/YR8DRq25cruK//akksllP1XQnbq
kLIUqM9Z3lETrjzYGW3CDRv8A0CVYwnKRZfqAjdB6/s8zakeBjLrDDEWR1YBpdA9
eNNT5o3gLzYw6g==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:31:27 2026 by rpki-client