Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
File:                     6ILCYEFZvDDAW58M9unYNhAuqUs.mft (raw, json)
Hash identifier:          z86Kw09cCaT/RiW/C0V4nGqPOJufkIMPVos0zL4kElY=
Subject key identifier:   16:AD:C1:48:78:80:8C:BA:74:C6:E3:AC:D2:CF:9D:22:5D:A3:F6:15
Authority key identifier: E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B
Certificate issuer:       /CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
Certificate serial:       019F194308275E015B3B081B683454B616A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
Manifest number:          164A
Signing time:             Tue 30 Jun 2026 16:00:51 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:51 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:51 +0000
Files and hashes:         1: 6ILCYEFZvDDAW58M9unYNhAuqUs.crl (hash: lWjU9riPOlhI+cRR1jMOPKha6rwSUDco7ghQcjMNm/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:08:27:5e:01:5b:3b:08:1b:68:34:54:b6:16:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e882c2604159bc30c05b9f0cf6e9d836102ea94b
        Validity
            Not Before: Jun 30 16:00:51 2026 GMT
            Not After : Jul  1 16:00:51 2026 GMT
        Subject: CN=16adc14878808cba74c6e3acd2cf9d225da3f615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:9b:00:5a:f8:66:e0:4d:a3:6b:fe:26:e9:
                    b9:7d:91:79:e6:ce:04:c2:55:92:7a:ae:3f:bc:d2:
                    84:5b:dd:74:ae:f4:c8:03:28:6c:3f:b9:a9:f7:b6:
                    a3:ee:53:ce:1d:26:52:66:78:3d:53:eb:46:9a:6e:
                    77:7b:85:b2:c8:0f:1a:fd:3a:7f:89:1e:af:66:d4:
                    95:7c:29:92:a8:76:d4:85:b8:37:30:e8:d9:eb:80:
                    6b:a7:82:22:d1:1e:95:b4:71:e1:b4:97:5f:7f:2e:
                    93:c1:c0:f8:73:ef:c2:a7:a9:6b:b7:fd:41:97:c1:
                    84:cd:a2:1a:68:8f:aa:91:f8:d7:1c:00:f9:be:af:
                    43:05:5b:81:46:ab:d0:ab:12:c7:98:33:08:6b:a1:
                    22:b1:e4:6b:9a:0a:1d:3e:18:4c:15:cb:0a:a9:d8:
                    7c:c9:b8:9b:02:23:0e:2c:c0:c9:22:cb:93:49:7c:
                    fc:94:e8:0c:ef:3a:66:a6:ea:c4:42:b6:a3:e7:5c:
                    48:3c:e4:5e:92:59:d6:7e:4d:75:0f:83:6a:54:bb:
                    2a:30:dd:ab:c3:50:9e:ab:41:44:6d:c8:6d:83:ee:
                    49:ed:0d:c4:03:8c:ab:1b:15:0b:a9:96:a1:3c:85:
                    e3:3c:e0:c5:13:32:7b:4c:ce:db:74:64:15:1e:20:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:C1:48:78:80:8C:BA:74:C6:E3:AC:D2:CF:9D:22:5D:A3:F6:15
            X509v3 Authority Key Identifier:
                keyid:E8:82:C2:60:41:59:BC:30:C0:5B:9F:0C:F6:E9:D8:36:10:2E:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ILCYEFZvDDAW58M9unYNhAuqUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b9dc40-5470-4568-bbb9-630589c68889/1/6ILCYEFZvDDAW58M9unYNhAuqUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:a4:b5:83:44:e6:09:69:91:4e:c1:b4:47:d9:18:08:93:
         15:d2:04:3c:67:d7:ea:af:3b:07:43:cb:16:9b:e9:a6:31:72:
         d2:6b:b2:fd:49:20:29:18:70:28:50:60:59:1c:95:9b:5f:f0:
         77:00:46:49:56:52:47:d8:73:c9:3c:2d:05:e9:15:6c:4c:ea:
         2c:5e:62:a9:b5:1c:49:8a:fb:94:18:df:d9:03:ff:6a:39:c7:
         60:95:4a:4a:e3:0f:35:4e:7a:be:32:e4:0a:cd:0f:ca:9d:cd:
         50:2e:33:40:72:09:ce:d7:b7:c6:de:7f:5d:57:91:76:70:26:
         fe:3a:e9:41:32:aa:0d:25:a6:38:dc:f9:c6:4b:1a:e9:a7:e8:
         af:ea:7b:a6:42:f9:1c:ca:28:23:97:bd:82:b0:90:6b:62:cc:
         65:49:80:ce:67:41:fd:28:71:47:ab:93:fd:f1:70:41:cd:a3:
         be:2c:07:5e:8a:f5:9a:a9:48:c2:de:57:92:8a:f8:3a:9a:d6:
         09:47:5c:6d:61:cd:09:92:78:cc:26:64:53:09:20:f1:36:3a:
         ac:a9:1a:ad:4a:91:73:46:0a:69:6e:ca:8b:86:64:87:10:a8:
         4f:9b:5a:3c:eb:16:9f:8f:d9:ea:31:14:73:65:17:ce:b2:10:
         25:14:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:44 2026 by rpki-client