Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          nVEiYyoex/M5Jf2oTSqQpXSil3w8phAfBjHgxJlZKko=
Subject key identifier:   C0:93:9B:FE:DA:82:A6:2B:47:DD:58:5E:8F:36:62:D6:6D:90:32:14
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       019F19442D1011055CE2633DEB65152F7498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          11AF
Signing time:             Tue 30 Jun 2026 16:02:06 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:06 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:06 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: Fqexiga3qiPKqga1H5cyaIK9f063ppKNAnHgyOeQZYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:2d:10:11:05:5c:e2:63:3d:eb:65:15:2f:74:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Jun 30 16:02:06 2026 GMT
            Not After : Jul  1 16:02:06 2026 GMT
        Subject: CN=c0939bfeda82a62b47dd585e8f3662d66d903214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:73:31:53:0f:65:a4:01:1b:f8:49:4d:be:
                    5b:53:c0:23:11:e0:43:5e:fe:27:a4:22:a2:bf:9f:
                    e1:60:44:85:26:4c:94:84:83:8a:3a:2b:30:6c:c6:
                    c7:9f:40:21:53:2f:c6:86:d8:37:bd:52:24:91:46:
                    d1:41:1b:83:35:5e:2f:23:9f:93:b4:c2:ba:12:d8:
                    28:85:3f:62:6a:ad:84:0e:15:56:15:83:85:e8:3e:
                    03:bf:79:b9:15:5c:85:44:d7:89:ae:d2:28:17:9f:
                    eb:92:09:f5:b1:8b:6c:db:38:35:1a:0f:d6:0b:c9:
                    48:ab:1c:df:4b:af:68:e5:3f:c5:76:51:18:b1:f7:
                    2b:b6:35:2c:b8:46:7d:e6:dd:31:fa:59:c6:cb:51:
                    9b:1f:df:2d:ae:0c:29:91:fb:bb:a7:f2:f0:43:86:
                    5f:21:44:96:12:9b:bc:b4:e4:4b:8a:db:61:fe:0c:
                    a2:24:a2:3f:f1:39:84:8e:71:74:54:75:7b:e7:5c:
                    bb:c4:f5:64:0e:f2:98:8d:48:d2:fd:97:de:8d:b2:
                    4f:61:1d:6c:99:89:aa:56:a3:b5:5c:f7:29:1e:7b:
                    fd:7e:77:6f:e2:26:ed:48:6a:e4:92:fa:ab:91:9f:
                    e0:a1:6e:f4:4f:50:2b:c6:d0:93:ad:4d:fc:a2:d8:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:93:9B:FE:DA:82:A6:2B:47:DD:58:5E:8F:36:62:D6:6D:90:32:14
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:83:1c:5d:54:a4:8f:9a:54:63:63:23:0f:e0:99:af:d6:c5:
         f8:33:7c:d4:bb:ea:3c:ff:17:6e:a2:6c:64:c2:8b:a7:c6:b8:
         ff:e2:a6:65:93:5f:51:68:91:bd:1b:fa:96:6d:59:7e:57:81:
         5d:1a:6d:14:15:a8:39:7e:b5:78:c7:3e:48:8f:25:3b:cb:c9:
         25:4a:4f:fc:88:35:a6:8d:69:af:cb:d7:02:7e:05:bf:aa:b0:
         02:33:3e:44:53:0b:91:4f:3c:6b:a8:52:ae:50:c3:d9:09:1f:
         37:07:27:fc:86:10:88:e7:30:3d:8e:39:77:59:dd:00:43:5b:
         ba:68:9c:53:59:30:32:b4:a4:61:23:3c:c2:b7:b8:4b:b4:a7:
         73:8b:8b:4b:ed:94:a0:3c:03:e3:ce:c4:8b:86:fc:4e:d4:25:
         54:a4:ae:fa:7a:dd:36:33:55:cc:e2:b4:68:29:40:cf:50:d1:
         40:72:db:c5:97:0c:15:e1:ba:e6:51:4e:a4:84:d5:98:49:a8:
         02:42:e4:e4:14:fa:f1:bb:bd:3c:a9:08:15:ba:6b:38:59:f8:
         1f:b7:3c:da:c4:85:4a:12:e8:41:6d:03:8c:fd:14:0f:18:71:
         4b:bd:c3:2b:dc:31:b9:0c:90:fc:fc:89:69:1e:c1:de:9b:01:
         d8:9f:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:59 2026 by rpki-client