Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
File:                     e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft (raw, json)
Hash identifier:          fRATLKxQB2zO7ximYtp6eMH/BwKs/3v3cGo2vmdKqo8=
Subject key identifier:   DC:C6:88:5C:AF:68:AE:6F:15:86:D8:56:7D:69:3E:43:F1:09:47:6F
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Certificate issuer:       /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial:       019EDC5305F89599777CE44533135D15E864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
Manifest number:          1527
Signing time:             Thu 18 Jun 2026 20:01:28 +0000
Manifest this update:     Thu 18 Jun 2026 20:01:28 +0000
Manifest next update:     Fri 19 Jun 2026 20:01:28 +0000
Files and hashes:         1: e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl (hash: 3pRO5UG7dfUoX54LxIWOSEl59fdhG2i8Rzprs3PadsU=)
                          2: okhAMfz0WaGGOHXHCGovIHlTyKw.roa (hash: 7Vnu9sTM6wsooj/f9YqOP0/u4l20pcaLe53Lq6zoivQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 15:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:53:05:f8:95:99:77:7c:e4:45:33:13:5d:15:e8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
        Validity
            Not Before: Jun 18 20:01:28 2026 GMT
            Not After : Jun 19 20:01:28 2026 GMT
        Subject: CN=dcc6885caf68ae6f1586d8567d693e43f109476f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:bf:a6:61:33:4a:b8:c9:a6:85:d2:58:ed:
                    76:33:ba:fa:88:7d:8b:55:65:2c:b6:48:9a:8c:44:
                    2d:55:67:c3:ff:b2:96:33:72:cf:e0:5e:d0:07:52:
                    68:f2:a0:65:14:e7:93:e1:3b:9b:6c:a7:c6:c9:57:
                    b3:58:53:bd:52:bb:61:7e:02:21:51:f8:05:40:a7:
                    f8:a0:b5:37:cf:5a:d5:fb:41:10:41:3a:54:d7:f8:
                    d7:5a:41:3f:79:c0:01:6e:77:cc:07:fd:8e:01:e0:
                    a7:df:25:0a:6d:68:ce:e9:4e:7c:9a:e7:f9:ed:42:
                    92:26:eb:dd:95:9f:81:17:6b:19:cc:c2:d4:d9:09:
                    1b:93:b6:77:ea:08:f6:29:98:94:9a:d7:0c:f2:0f:
                    a3:3e:25:98:2b:96:09:6c:35:72:47:5a:53:52:e0:
                    5c:bd:4c:60:e2:13:76:25:c9:c5:20:90:d0:aa:83:
                    14:c2:4d:32:6d:93:30:cb:c9:4c:05:da:a0:49:d5:
                    0d:fc:85:25:fb:71:cd:6b:b6:46:a6:2a:25:a9:c7:
                    36:2a:6c:20:52:a3:ac:80:f4:5a:76:4d:8a:82:c9:
                    41:0e:89:5b:cc:34:ba:2c:90:a4:fd:c8:9b:e9:71:
                    1f:ea:a1:11:a7:4a:94:5a:f7:69:aa:79:f6:1b:1e:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C6:88:5C:AF:68:AE:6F:15:86:D8:56:7D:69:3E:43:F1:09:47:6F
            X509v3 Authority Key Identifier:
                keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:79:d5:91:d1:25:42:e0:02:a4:bd:6d:df:c0:f8:bf:16:70:
         dd:3e:9e:b1:72:ee:a8:19:31:79:0a:a9:bb:53:58:2e:95:eb:
         6b:23:e6:75:9e:96:be:eb:50:7e:65:53:f5:c3:5d:6e:2a:10:
         96:18:56:13:3a:e7:6c:3a:48:53:ad:f4:07:6d:bf:b5:81:ee:
         7d:d8:e4:b7:fc:82:c3:be:67:06:2f:00:07:f2:c5:18:20:10:
         aa:65:d8:7f:4c:1e:61:1f:20:6c:77:81:f6:ed:b9:d8:b4:f7:
         e1:3e:9b:25:2d:0f:71:bd:50:9d:40:c6:11:91:26:a9:3e:56:
         d1:df:e0:c1:a2:cc:e1:9c:6b:25:97:a5:b6:2a:e4:95:ac:a0:
         0a:2a:c9:07:02:49:60:74:76:a7:31:d2:b3:0a:2d:ef:c9:97:
         04:d7:e8:cd:bc:48:f2:e3:ea:fb:98:c9:f8:fa:e3:20:80:92:
         5b:66:20:12:19:ee:1d:21:15:01:aa:5e:7a:7a:02:f8:0d:26:
         aa:a3:6f:04:1c:2b:50:1b:aa:b9:7c:75:6b:f2:44:8b:b9:21:
         66:e7:a5:8a:a4:50:49:a5:70:b0:e7:4c:87:9e:90:67:d7:a8:
         a4:23:af:bb:d5:56:3b:9f:a5:89:92:48:cc:1d:3b:d5:1f:94:
         b0:6d:da:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 01:11:52 2026 by rpki-client