Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File:                     6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier:          tglUPKJ470rTa0tFkWSKz+HFLyz7NyrXaHL7vsYFayQ=
Subject key identifier:   E2:8F:09:C4:60:8E:28:1E:98:18:C0:2A:26:A9:66:B3:9C:9C:DD:D1
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer:       /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial:       019F111C0C5E8C5F53367CE3FC25FA370C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number:          0215
Signing time:             Mon 29 Jun 2026 02:01:18 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:18 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:18 +0000
Files and hashes:         1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: elGd6FfOudykyQbvyTCi+aJp5Oxa9c+10aPAUqFMd90=)
                          2: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (hash: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1c:0c:5e:8c:5f:53:36:7c:e3:fc:25:fa:37:0c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
        Validity
            Not Before: Jun 29 02:01:18 2026 GMT
            Not After : Jun 30 02:01:18 2026 GMT
        Subject: CN=e28f09c4608e281e9818c02a26a966b39c9cddd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:ef:68:c3:01:1f:eb:25:59:07:bd:17:76:
                    57:9a:94:37:45:c7:93:67:82:34:c7:37:d1:33:a8:
                    f1:bd:67:83:e5:41:db:fb:bb:df:bd:b5:fe:a4:da:
                    78:15:ff:72:27:81:84:3e:94:be:c4:bd:53:61:3c:
                    55:7c:fe:74:e4:f9:3f:2f:37:ab:a3:65:f2:9e:b0:
                    fa:e9:4a:fa:aa:f4:c4:9b:c5:61:90:34:0d:91:87:
                    02:33:7f:45:97:35:47:57:98:e6:b5:87:b2:81:78:
                    89:30:6c:66:fd:5c:cc:b9:24:63:03:54:2f:1d:db:
                    d5:73:c0:86:27:d3:19:fd:96:e2:df:61:53:5f:fb:
                    11:da:39:9e:d7:3b:15:17:c9:b7:a6:1b:ca:5d:0d:
                    16:81:26:b5:f2:e1:03:cd:80:46:0f:52:77:3f:67:
                    fa:44:4f:19:78:96:70:39:20:c1:35:6b:eb:67:51:
                    54:95:df:52:d0:bb:39:25:ff:c4:99:79:59:49:65:
                    e4:9e:46:64:80:95:69:51:1f:00:51:43:a2:0d:a4:
                    8c:8b:ac:25:d4:db:0e:89:28:e7:09:8a:9c:5b:eb:
                    ed:4b:1c:5a:ac:5d:f6:d2:8e:a1:ac:7d:18:5c:4d:
                    89:92:42:a9:4d:90:dd:da:51:7b:09:34:e6:be:67:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:09:C4:60:8E:28:1E:98:18:C0:2A:26:A9:66:B3:9C:9C:DD:D1
            X509v3 Authority Key Identifier:
                keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:15:b8:a8:82:b1:30:64:db:e6:89:0f:98:45:8d:d2:df:75:
         49:be:02:1b:e1:e9:8f:40:e5:d8:25:e3:fb:44:a4:00:f9:8a:
         24:a1:fb:1a:ab:eb:1b:b4:4b:44:db:7b:06:ab:8e:52:3f:02:
         9c:49:14:67:ec:d9:01:ee:65:db:4b:f0:0d:28:73:fb:2c:f7:
         e6:26:78:67:79:ed:e2:22:3e:33:c8:e0:9c:a7:74:7a:34:14:
         57:86:16:eb:63:e5:0f:00:69:09:a8:3f:5c:e9:e4:2a:d9:78:
         0f:1d:6b:06:1e:bc:bc:2a:91:54:c3:af:32:71:6e:17:5d:d5:
         1b:80:a8:37:e0:f7:df:c4:82:c0:cf:71:0d:b7:ef:b3:eb:6e:
         5f:aa:61:c8:31:9d:e9:f2:b3:94:14:7b:05:0b:f2:87:98:eb:
         72:c5:11:22:71:27:6e:dc:67:24:b8:74:1e:49:d8:e4:82:9a:
         23:26:e8:de:b6:16:fd:9e:87:c0:6f:a3:23:fa:aa:ca:b6:43:
         5c:3b:62:24:bb:47:d4:06:0b:67:b7:42:90:cf:9f:29:63:87:
         67:02:96:cc:03:1f:b9:fa:08:35:06:a9:c3:a8:8e:e7:20:e4:
         a3:ee:ad:23:c2:ac:cb:2b:ee:1e:2f:87:52:8c:d5:9a:87:6a:
         08:1d:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:58 2026 by rpki-client