Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          7zDri9jvpl4gffEdutKzCszxak/AAXh/h6e2iWr4nKU=
Subject key identifier:   46:83:44:A1:53:F0:F7:FE:79:E5:64:78:10:A5:92:3F:F2:73:A2:4D
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       019EE7E96BC79CE820A31F9339A887F0D1C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          1050
Signing time:             Sun 21 Jun 2026 02:01:34 +0000
Manifest this update:     Sun 21 Jun 2026 02:01:34 +0000
Manifest next update:     Mon 22 Jun 2026 02:01:34 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: yxs+Btt/SQyVlcM5Nhf3X93m4AsBd8wyBs3XifoY62I=)
                          2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:e9:6b:c7:9c:e8:20:a3:1f:93:39:a8:87:f0:d1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Jun 21 02:01:34 2026 GMT
            Not After : Jun 22 02:01:34 2026 GMT
        Subject: CN=468344a153f0f7fe79e5647810a5923ff273a24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:ca:35:02:cf:e1:71:17:10:f7:ce:d3:11:
                    f9:f7:68:de:53:ce:56:26:98:cd:8a:45:24:55:b3:
                    8b:60:fa:b5:e5:ba:67:cd:ec:06:c5:fb:04:d3:28:
                    0f:f0:27:cc:17:8e:46:0f:30:ae:ef:47:d5:68:06:
                    0f:6b:75:d3:c8:f7:95:36:84:13:82:82:25:f3:70:
                    65:b8:92:1a:5e:72:2d:0f:b2:51:67:83:a5:9e:96:
                    ad:cf:10:0f:82:65:59:4c:70:d3:e1:55:76:28:2b:
                    8b:b4:70:62:da:bf:0a:a6:28:ef:62:4f:db:44:10:
                    d7:33:53:d2:d1:aa:cf:7d:74:1f:ff:d3:ec:b1:40:
                    05:77:6d:f5:07:87:66:b0:99:a0:f0:c6:83:a3:f9:
                    83:2c:c8:a9:01:49:5c:48:ad:3b:85:ef:aa:5c:90:
                    40:45:ce:ae:28:b8:88:30:31:00:17:fa:36:07:be:
                    af:91:37:f1:5a:a0:38:dd:83:ff:8e:21:1f:c5:d6:
                    f4:24:c1:08:01:eb:6f:e2:7f:c6:7d:e0:75:df:3a:
                    6f:91:59:8f:37:17:ed:16:f5:80:8e:b9:8f:15:5c:
                    fd:be:9f:88:d2:97:c2:60:00:10:b4:e4:6f:7c:62:
                    ba:58:8c:96:51:a3:77:98:d5:1b:8d:cd:b1:b7:af:
                    92:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:83:44:A1:53:F0:F7:FE:79:E5:64:78:10:A5:92:3F:F2:73:A2:4D
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:86:60:14:4c:55:ac:c7:85:d8:0b:73:25:55:c8:f0:fc:0e:
         59:80:f8:90:51:3a:39:65:12:e8:a8:e3:a7:e1:f2:e6:f0:0c:
         0f:8c:4f:15:fd:4e:51:69:18:b0:b0:40:2a:6e:df:9d:b1:ab:
         6f:49:9e:61:c6:83:2d:79:f2:0e:1f:be:30:e4:d2:84:22:b1:
         2f:7e:3a:fa:4d:2c:bc:ba:e7:02:97:12:04:85:4d:e6:4c:3f:
         68:e5:35:b3:f4:19:96:0c:9c:ac:62:ae:bc:86:74:5c:3d:f2:
         1f:b6:9e:ad:26:6a:b2:2e:21:4e:ba:c7:15:71:1d:b1:a5:ab:
         81:17:d9:12:3a:b9:ff:ba:50:a3:3d:fd:ba:5a:a5:6c:2a:6c:
         5c:99:a8:b9:d0:11:13:8b:aa:36:a4:8e:d3:10:dc:4b:ba:e1:
         98:90:87:48:2a:18:97:9d:b0:6f:3f:9d:c9:da:84:83:bd:59:
         0e:82:4f:a1:1c:34:e6:e6:d9:ba:6e:a6:86:db:3b:7d:69:93:
         33:3b:de:b7:b5:02:a7:de:5b:60:6a:a9:35:c8:65:4f:c0:66:
         18:20:91:36:41:76:69:2a:d3:eb:97:1d:8d:46:82:7b:16:53:
         55:b0:ce:5d:e6:67:a8:78:fc:92:0b:3e:14:cf:ea:a7:85:45:
         0e:2e:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:12:21 2026 by rpki-client