Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
File:                     6suWQTrI8sFrlHlWiRdNenIgHvU.mft (raw, json)
Hash identifier:          9TS8Ff30THZUqnA59F2lxXJAS2SjZbgOiaqfltrOS+g=
Subject key identifier:   D8:BF:40:7B:FD:8B:A9:F6:48:E2:E1:3A:0D:EB:EC:70:E7:56:E0:0D
Authority key identifier: EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
Certificate issuer:       /CN=eacb96413ac8f2c16b94795689174d7a72201ef5
Certificate serial:       019F189ED20221B2A45293463BEE04C85784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 13:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:29 +0000
Files and hashes:         1: 6suWQTrI8sFrlHlWiRdNenIgHvU.crl (hash: 95OMGKuKbUjvI8AaHUsP5Xz2vTeV6Atotbgat/hiQZI=)
                          2: FwjQJ3o4_f5_kIRJPL1fhc8wPs0.roa (hash: b+lMbH7aGqXO1dA4OC3I2proSJvRuAwpdIs6UIwXrBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:d2:02:21:b2:a4:52:93:46:3b:ee:04:c8:57:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacb96413ac8f2c16b94795689174d7a72201ef5
        Validity
            Not Before: Jun 30 13:01:29 2026 GMT
            Not After : Jul  1 13:01:29 2026 GMT
        Subject: CN=d8bf407bfd8ba9f648e2e13a0debec70e756e00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:e2:15:1e:60:f7:2d:c8:60:6f:a5:0c:16:
                    64:ba:54:f0:68:59:6e:17:85:e3:fd:cb:0a:be:48:
                    49:6a:c2:e7:ce:64:db:de:da:13:ad:9d:d9:b8:f9:
                    93:08:ea:22:dd:96:82:b7:c5:89:4e:fb:4d:c4:7d:
                    f9:fc:44:35:1d:09:73:02:6b:90:5d:2f:5a:37:36:
                    51:ca:6a:53:2a:01:3d:1a:72:51:f1:76:77:4d:00:
                    33:d8:5d:0a:9e:ad:33:99:fa:33:8a:c7:8f:75:e8:
                    50:fb:22:e1:93:18:27:a8:b7:f0:26:d6:cc:21:f3:
                    16:d7:4c:21:00:08:d7:57:bd:6e:51:b5:f7:ba:c8:
                    5b:08:b7:21:66:6b:b4:57:26:dc:ea:35:1d:a4:57:
                    ab:ed:ba:f6:54:e2:32:a9:f7:28:3f:50:69:9b:81:
                    85:0a:96:3d:5c:cc:2e:29:8f:65:62:12:63:e9:4a:
                    36:b5:e7:10:27:05:04:4d:0f:bf:a8:4c:ac:60:04:
                    31:f2:47:05:6e:3c:48:4d:89:04:6e:6b:a3:83:61:
                    be:c8:60:41:cb:c0:99:90:3c:ca:17:46:2e:46:72:
                    74:98:d5:a1:79:5a:28:a1:fb:82:15:7c:52:a6:c3:
                    c2:23:18:a3:b2:a0:ee:da:a6:97:39:e3:4a:0d:b8:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BF:40:7B:FD:8B:A9:F6:48:E2:E1:3A:0D:EB:EC:70:E7:56:E0:0D
            X509v3 Authority Key Identifier:
                keyid:EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:37:e4:43:0d:11:b6:30:cf:72:2b:68:2f:c9:2e:1d:2a:
         b8:85:9f:4e:94:1b:9a:dc:3e:41:70:39:04:18:07:0e:2e:69:
         ce:63:a3:43:5e:b5:b8:96:67:26:92:20:f2:48:be:aa:d9:95:
         6a:63:c7:45:20:dd:b4:47:44:66:1d:ab:29:2f:6d:c5:a9:5b:
         62:9a:78:99:ec:d1:e7:d6:f7:20:b4:00:3e:14:3e:ab:0a:9f:
         7b:03:b3:bf:cb:14:1e:87:b8:fe:76:63:73:22:1a:52:0a:0a:
         a5:ae:d9:74:0b:e4:6b:d8:b9:b8:bb:1f:20:8f:c4:de:bc:6f:
         75:58:8e:1b:c6:c7:21:a1:6f:fc:7f:7d:81:6b:f8:98:41:e3:
         5d:4f:12:04:90:7d:61:0b:64:38:c4:f2:20:d1:70:4e:61:e4:
         f8:09:ec:c3:06:bc:86:c2:fd:4e:3d:24:7e:34:c0:ef:f3:39:
         ac:61:1e:65:cd:ea:46:d3:94:46:9e:17:80:26:d3:a1:ef:a8:
         35:cd:44:7c:d7:16:b4:76:7b:cc:78:53:51:01:57:17:71:c6:
         82:eb:df:4f:08:13:9c:3b:f9:fe:61:38:0b:b1:1f:6e:77:2e:
         67:bb:24:d4:76:69:21:65:20:f7:db:75:8e:03:2e:0a:50:3d:
         c6:9d:5f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:25:25 2026 by rpki-client