Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
File:                     6GtO0zF8kqNLdsj60prpcID5Hzs.mft (raw, json)
Hash identifier:          czcrBMehnIRxTOXIpj7K4vsbG5yG8in10Hyjih8u+cw=
Subject key identifier:   FC:BC:11:EC:A8:9C:61:18:B8:6E:05:8E:CE:F2:7E:8B:6B:DF:B2:3A
Authority key identifier: E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B
Certificate issuer:       /CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
Certificate serial:       019F1867B8B13C64C7E5DB7C4EF93CF6ACC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
Manifest number:          1667
Signing time:             Tue 30 Jun 2026 12:01:18 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:18 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:18 +0000
Files and hashes:         1: 6GtO0zF8kqNLdsj60prpcID5Hzs.crl (hash: M0BLI+1v02j3kbDVDzP7B1JuyN7Jmzm12I+Qh0fE04w=)
                          2: fCJFqaSmlEUaHeJe6Nl29f553VQ.roa (hash: DBZpQG6cNb9N4NIAzi7S93mTg5IouP9LV1gaJIWMDnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:b8:b1:3c:64:c7:e5:db:7c:4e:f9:3c:f6:ac:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86b4ed3317c92a34b76c8fad29ae97080f91f3b
        Validity
            Not Before: Jun 30 12:01:18 2026 GMT
            Not After : Jul  1 12:01:18 2026 GMT
        Subject: CN=fcbc11eca89c6118b86e058ecef27e8b6bdfb23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6f:67:01:3c:e3:99:8d:41:d1:c0:80:52:53:
                    05:ec:27:31:45:0d:c6:fd:9f:b2:1c:10:1e:ee:5d:
                    83:54:c6:79:a7:10:90:4e:80:e3:ff:ad:13:c0:5a:
                    cf:02:3a:06:25:16:c2:c1:39:d4:6b:16:a4:15:00:
                    be:46:c1:aa:a0:d2:66:64:02:65:77:34:b2:a6:a4:
                    d6:28:1b:ed:f6:85:25:be:f5:5b:8b:30:8d:48:bf:
                    5d:64:27:34:2b:c2:d9:14:e1:b1:dd:fa:36:59:9a:
                    6c:8c:8a:0e:aa:14:ba:99:d6:0c:7e:0c:36:c4:36:
                    e9:ee:0c:fa:f3:c2:07:b8:50:42:ae:51:29:ef:d9:
                    4d:27:22:3a:bc:9d:6a:7b:bc:91:82:bc:1f:8f:2e:
                    3c:66:9d:a4:ed:95:2f:3f:75:c1:00:61:54:86:98:
                    07:e9:91:8b:a5:c7:b1:b0:fa:90:c7:2e:42:71:36:
                    6c:06:5d:ba:60:ca:4c:b0:96:89:e9:fb:a6:e6:79:
                    4c:9d:24:14:dc:30:45:0c:95:72:13:08:ba:65:29:
                    90:ac:85:71:d8:06:79:15:ba:bb:11:95:7c:d0:75:
                    ee:cf:07:3b:8f:eb:31:4b:17:e8:6b:93:65:ed:90:
                    04:8a:dc:72:e2:65:6b:dd:47:09:b3:79:9d:f4:99:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:11:EC:A8:9C:61:18:B8:6E:05:8E:CE:F2:7E:8B:6B:DF:B2:3A
            X509v3 Authority Key Identifier:
                keyid:E8:6B:4E:D3:31:7C:92:A3:4B:76:C8:FA:D2:9A:E9:70:80:F9:1F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GtO0zF8kqNLdsj60prpcID5Hzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6c5eaf-9c44-4a5a-baa1-325aadd733c3/1/6GtO0zF8kqNLdsj60prpcID5Hzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:24:1e:09:4f:1b:77:93:58:76:3e:55:41:69:bd:1e:05:
         da:71:1e:67:fb:63:89:ab:4e:6d:ee:91:52:ed:7c:70:c2:46:
         01:46:bf:eb:94:d1:84:7b:6b:3e:9a:de:58:44:54:d0:54:fd:
         c0:9c:46:cf:f1:59:9f:a7:7c:cc:c1:cc:ea:8a:f1:1f:8b:d2:
         4c:c4:85:ca:97:8e:65:65:cc:eb:94:c1:56:91:30:ce:eb:b7:
         15:e2:ad:29:31:2e:1d:6f:c1:0e:8e:10:27:cf:43:a7:b3:1f:
         f4:55:9d:25:f0:a0:9c:db:e3:f4:1d:d6:e3:1a:3c:67:18:4f:
         37:1e:24:b0:99:68:b5:5e:48:12:9a:c8:ec:64:8e:d6:cb:84:
         ba:47:3c:bb:21:f8:46:1e:6e:d2:4b:c3:39:95:ae:9e:3a:99:
         aa:2f:c0:20:13:52:83:c6:a6:c2:ed:fd:ce:19:ea:a7:e7:36:
         44:82:3e:1b:18:fa:6d:76:5e:22:86:af:6a:40:67:45:4a:ff:
         b7:5e:2a:b4:9d:87:3b:15:c3:36:f7:b2:e8:12:43:30:fd:9d:
         90:aa:6e:d9:83:97:38:c3:95:d0:c3:7a:a6:81:15:d3:be:41:
         fa:8b:b1:35:b3:a0:fa:8e:24:6c:16:cd:a7:f0:30:4b:6f:f3:
         26:a5:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:58 2026 by rpki-client