Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          OxpOSFQvl0MbXWOacAg1/uuOKogQWtEW5gtwXl/NElQ=
Subject key identifier:   BD:07:39:4F:4D:2B:C6:EA:14:EA:A5:F4:E3:F0:0D:18:40:A7:54:C1
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       019EB76AAA3E7D7CAD35513D26255EF5B715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          18E4
Signing time:             Thu 11 Jun 2026 16:01:21 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:21 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:21 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: KcpA6J/cIpv1OwXUtGkIsJ8d+rDB4g2oOsYd6+R6y4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:aa:3e:7d:7c:ad:35:51:3d:26:25:5e:f5:b7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Jun 11 16:01:21 2026 GMT
            Not After : Jun 12 16:01:21 2026 GMT
        Subject: CN=bd07394f4d2bc6ea14eaa5f4e3f00d1840a754c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:31:40:19:ae:04:59:bf:c7:39:ff:c6:ea:
                    90:86:7a:02:a2:eb:5a:a6:b8:f6:a7:d7:c7:5d:92:
                    f6:3f:8e:ef:8a:e8:bc:d3:55:d9:ff:dd:3e:a8:aa:
                    e6:9b:0b:ad:08:79:6d:95:df:0b:9d:85:0a:e7:2d:
                    be:d2:75:90:15:e2:cc:ef:5c:5f:e5:ca:6d:e0:15:
                    85:10:ff:48:6e:35:95:e3:b1:11:97:a1:8f:94:8d:
                    67:f8:2e:09:37:3a:de:4e:c1:0d:96:a4:83:b7:7b:
                    b2:f9:27:97:bb:64:99:fd:59:82:aa:b4:04:3e:6d:
                    6d:e4:6d:ee:a0:9e:06:9b:65:de:2f:1d:47:89:66:
                    91:d5:b7:7b:bc:40:1c:5b:17:52:d3:d7:0d:4b:00:
                    a6:62:4f:97:31:f0:14:c7:40:ef:c0:88:af:04:ed:
                    fd:b0:6e:53:8b:62:da:1a:cc:9e:8c:73:51:76:2d:
                    d2:73:e0:b3:f2:b1:90:ed:39:24:d6:95:1e:25:6b:
                    a4:11:6c:1a:34:5d:dc:31:25:43:08:e5:90:b6:79:
                    15:b8:e2:5c:b7:bd:83:12:fc:b8:b0:9b:2a:ac:56:
                    89:d2:67:e3:b4:0d:7d:2b:fe:46:5e:cf:6a:6f:e0:
                    3e:66:0d:97:df:96:f9:ac:06:bb:05:c3:0c:b1:b9:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:39:4F:4D:2B:C6:EA:14:EA:A5:F4:E3:F0:0D:18:40:A7:54:C1
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d9:bf:9a:a1:4a:37:cf:70:6f:8d:7a:e1:76:df:d5:d8:d0:
         12:9d:d8:ca:b0:94:78:5a:76:24:4b:ac:74:3d:e0:30:88:b2:
         5b:7f:6b:af:bd:22:e6:83:ff:dc:83:99:e9:a2:9e:9b:a7:6e:
         68:69:51:ee:f2:2f:55:a2:df:f0:8b:12:66:c1:4a:ca:2f:8b:
         0a:92:3e:f8:c6:88:2a:35:01:48:9e:a9:cb:e2:0c:58:0e:38:
         23:05:6e:c3:21:fa:84:fb:97:6c:88:7f:da:01:2d:e4:1c:f5:
         97:d2:bc:94:52:d9:84:97:b5:55:d3:c7:19:87:c9:41:92:8f:
         8d:f5:6b:cc:01:8b:02:8d:84:5b:6d:9a:3d:df:3c:f9:10:15:
         b3:99:69:07:3c:8e:4e:a2:20:60:5c:f7:dd:27:6e:82:c6:a1:
         4c:98:e6:8b:bd:e3:5c:5c:40:a4:9a:f8:e6:c5:f7:df:01:85:
         58:d5:97:4e:31:93:e3:cf:5d:53:05:d3:c6:86:a8:ad:67:e4:
         eb:1f:b9:a8:82:d0:b4:61:bd:a5:a8:36:87:67:1a:21:76:c6:
         00:ef:c5:9e:46:e9:d7:f0:2b:d1:68:7a:c7:04:a8:40:53:c3:
         40:4a:6e:cf:61:7d:4f:8b:56:06:19:22:4a:d7:ec:c2:0e:f4:
         9a:74:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:44 2026 by rpki-client