Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          eYoqQZ7XCpMpj+iP6TOQAfeDpD5+5OBxIo+Ouk+Qqd0=
Subject key identifier:   35:D3:2E:7A:AE:85:8C:EB:04:15:F3:67:F9:C5:83:43:A1:20:90:63
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       019F17F9967E2D18C8716B4B0BCA31DA3390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 10:01:00 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:00 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:00 +0000
Files and hashes:         1: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: Imr7uDtNHeSKiZl1k+pCCeOflyA6J8pY8U9wnNtM/L8=)
                          2: 9uLCR93AsvcbHhfo_LRBoViZJEw.roa (hash: 6EciUB7X3+hHMgVRkJbEMXyOPOOet2xSMxTp/Z+84Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:96:7e:2d:18:c8:71:6b:4b:0b:ca:31:da:33:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Jun 30 10:01:00 2026 GMT
            Not After : Jul  1 10:01:00 2026 GMT
        Subject: CN=35d32e7aae858ceb0415f367f9c58343a1209063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:11:cd:f2:a4:b6:9e:86:84:cb:3f:8f:d1:
                    07:85:34:38:96:83:19:14:f0:59:c2:27:e5:56:83:
                    64:e6:78:2d:97:5b:b7:34:f9:79:26:23:17:70:1b:
                    11:dc:78:24:95:9a:47:c8:c2:47:3c:cc:36:b4:71:
                    a4:e7:bc:f7:43:40:9f:cc:d6:87:6e:e5:dd:9b:7f:
                    9c:0a:dc:0e:65:9c:8f:38:87:7c:4d:e7:d9:13:5b:
                    81:ae:8d:66:d8:0b:4b:33:36:79:c0:94:14:e8:b8:
                    cd:82:20:d7:cf:09:1a:75:0d:6e:35:93:f5:6e:fa:
                    c2:58:f4:ad:3d:aa:54:81:28:08:f2:d2:1a:f4:08:
                    06:d3:c0:1f:1c:61:a4:de:03:6a:4c:c6:76:63:2d:
                    b9:fa:d7:70:af:a5:ef:2d:85:34:0c:38:54:f3:d8:
                    8d:5e:81:7f:b8:af:8a:98:aa:9c:1f:cb:e2:33:41:
                    f1:a4:42:40:9a:49:2c:54:6b:70:4a:e1:34:de:bd:
                    78:40:20:5c:2d:83:85:24:89:0d:41:44:0f:6d:48:
                    6b:db:ca:dc:15:f2:47:19:1b:35:73:68:8f:dd:fc:
                    b4:5c:de:2a:fb:2c:30:36:1c:28:5b:9a:70:07:29:
                    4a:97:ac:b8:c5:22:15:8c:5d:19:fb:16:17:3a:44:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D3:2E:7A:AE:85:8C:EB:04:15:F3:67:F9:C5:83:43:A1:20:90:63
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:d4:37:0b:a3:11:d2:d7:3e:83:5d:ac:bd:0f:59:a8:1b:91:
         a3:b5:73:96:1c:cb:df:28:85:b0:58:04:e8:f9:ef:db:bf:53:
         8a:a2:ef:53:67:e4:e7:e2:06:a5:dd:56:84:d1:8b:44:71:5e:
         a8:30:97:73:b5:a7:e9:f3:38:12:68:5d:e1:f6:b1:3e:39:4e:
         3d:96:be:8b:8c:c1:ab:e4:ee:65:6d:ba:7b:70:09:11:34:8c:
         53:86:23:cc:52:ae:e9:fd:58:3d:66:80:4f:02:05:df:36:87:
         b4:61:b3:00:dc:ef:b2:49:9e:94:5a:67:a7:85:04:fc:15:c3:
         23:ff:f7:2c:03:14:cb:71:70:8a:1b:14:4f:64:e8:26:5d:7f:
         7d:02:91:25:fa:bc:4c:0f:c0:2f:78:c0:87:fd:54:2c:aa:3a:
         b8:e1:5a:dc:06:99:99:72:1a:76:f8:46:0d:6c:56:8f:40:27:
         37:8c:09:6e:63:dc:c7:f4:a1:7c:78:bf:b7:5f:80:35:fc:7f:
         60:1d:f2:39:0f:46:45:0f:57:09:f1:00:fb:39:8a:bf:e4:20:
         62:eb:af:49:86:79:56:1f:93:9c:4e:37:b4:c6:a3:b7:e9:44:
         d8:b7:ae:48:16:a8:5a:db:8d:16:3b:00:78:64:80:e7:a1:a8:
         84:9a:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:02 2026 by rpki-client