Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          jUfzIyCo6b32cgy9PHGp5gb1hCGEcnQ8PM1Fwqt1u1k=
Subject key identifier:   69:19:BF:CD:B1:1A:45:AD:EA:C0:E7:4E:CD:C3:BB:39:98:9B:E1:C7
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       019F18679518707E835331DC2148160BBE12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0CC3
Signing time:             Tue 30 Jun 2026 12:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:09 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: YyVGwMWhjTTGdrNzcMGRmYKdpT5yTRT3/jyVBid+bEI=)
                          2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:95:18:70:7e:83:53:31:dc:21:48:16:0b:be:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Jun 30 12:01:09 2026 GMT
            Not After : Jul  1 12:01:09 2026 GMT
        Subject: CN=6919bfcdb11a45adeac0e74ecdc3bb39989be1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:eb:eb:de:50:44:2f:a8:a7:49:41:92:41:
                    8c:9e:54:e1:b4:45:ec:0a:c1:36:1c:16:80:3a:33:
                    b9:05:ec:f4:82:ab:ba:54:25:d5:81:2a:f3:f7:40:
                    31:c1:06:e1:25:e4:b0:1d:51:e8:18:91:38:9c:c8:
                    92:ef:03:68:17:90:3d:2e:ab:df:bd:82:91:15:cc:
                    4d:63:b5:2c:92:62:ca:ef:da:01:10:95:b3:8a:90:
                    b4:d7:15:98:94:c2:2f:be:42:1b:77:f0:b0:73:5e:
                    f0:d3:88:97:80:af:6e:c2:29:75:26:53:42:3a:2e:
                    3d:33:bb:c7:a0:04:c4:eb:a5:9a:84:6c:4f:70:2b:
                    f5:ad:85:90:cb:f2:ac:c0:84:32:f6:9e:fe:15:bf:
                    83:03:d4:43:44:47:b1:69:f5:8d:ed:37:5d:90:1c:
                    cf:04:93:2a:b3:d3:d6:f1:5c:01:37:18:bb:bf:11:
                    51:41:fb:1a:01:4b:c4:8f:9a:c9:fd:1a:b6:15:d9:
                    84:8e:0a:a1:2e:6f:90:06:f2:ad:32:de:79:ca:56:
                    52:ac:e2:fc:88:27:1e:93:7e:9d:d2:1e:11:79:54:
                    23:7a:95:98:38:b2:db:30:b1:c0:5b:cb:6f:fa:59:
                    ff:83:e6:94:ce:48:70:ff:83:a0:b8:ac:8f:ac:71:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:19:BF:CD:B1:1A:45:AD:EA:C0:E7:4E:CD:C3:BB:39:98:9B:E1:C7
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:27:ce:d8:dc:c2:a8:34:98:64:e0:1e:54:6f:53:30:ca:9f:
         38:d4:a0:69:44:a2:fb:e8:7f:88:7d:38:00:b3:ff:e8:ce:ab:
         c3:3a:9d:78:8e:e2:bd:10:a7:eb:97:fe:5c:dd:e8:0c:2c:23:
         7b:63:3d:46:93:8e:3f:80:1b:a7:42:ce:5d:50:95:50:47:a8:
         44:89:f1:1f:84:a9:fe:8d:2a:22:b6:b8:49:69:3e:30:e5:65:
         95:b4:10:b0:ff:ff:57:28:82:c9:ef:8b:bb:28:a8:45:15:95:
         7d:2d:46:c3:a3:fe:36:e7:d8:a8:53:9a:a8:43:29:ab:34:94:
         be:1e:a1:0c:40:3b:2a:18:c6:51:0c:4f:25:32:1b:3d:2d:9f:
         58:63:4c:3b:a1:44:ca:62:a5:03:3a:29:be:f6:e5:76:36:f0:
         01:79:21:ec:a9:b1:00:77:81:b6:07:37:8f:07:d0:c8:c2:1e:
         9e:e4:68:e7:8c:4e:29:d3:b9:46:48:42:ec:be:9d:18:c8:03:
         35:4c:35:34:48:64:72:7f:1d:43:1c:26:dc:7b:6f:77:30:1e:
         a7:ba:34:6c:73:86:e2:a7:84:0e:f0:50:17:44:d5:fe:81:3f:
         99:c5:43:8d:66:b0:89:b7:ec:b2:72:7b:39:41:07:1d:5a:81:
         ea:7e:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:01 2026 by rpki-client