Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
File:                     6TGKUZjc0_ysJJgFU4XZryEQprQ.mft (raw, json)
Hash identifier:          NARs+NYGqLwSFQygfvHLJDczDMWOrGGOc5Novg4Dzm8=
Subject key identifier:   13:9F:7A:83:30:55:D8:96:27:08:72:3C:E0:1F:46:35:99:13:B5:80
Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
Certificate issuer:       /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Certificate serial:       019F18675C8DA7F5824D6C8D7D74137BFBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
Manifest number:          08D1
Signing time:             Tue 30 Jun 2026 12:00:54 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:54 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:54 +0000
Files and hashes:         1: 6TGKUZjc0_ysJJgFU4XZryEQprQ.crl (hash: JKgXsFWjRiHhFmKdunORhO4sk2hhoAkouZgFygVPBnQ=)
                          2: EykCnR69Z2FCA4Ya_yadUJioFWg.roa (hash: pgJbZrv9GUjC+Qwk/eM7sGIHn68DSmx8Yyl/K3tmpv8=)
                          3: nvqn9Sh2i2lWg6Hwialk_8ZJzDk.roa (hash: 6lPfxX/n9LNcIDr5UXSvVe33ZTrPhgW6L/X4P6452WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:5c:8d:a7:f5:82:4d:6c:8d:7d:74:13:7b:fb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
        Validity
            Not Before: Jun 30 12:00:54 2026 GMT
            Not After : Jul  1 12:00:54 2026 GMT
        Subject: CN=139f7a833055d8962708723ce01f46359913b580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:c2:bf:0d:fa:12:94:23:9f:70:1b:9f:cb:
                    5b:b1:c5:13:dc:cd:fc:50:f2:df:c0:bc:61:e7:21:
                    25:98:93:3f:8c:17:aa:4c:d6:ec:76:8c:d9:c3:76:
                    0c:46:d2:ff:c7:7b:b0:0a:b6:07:71:26:88:22:c1:
                    09:69:93:23:8a:b3:15:76:f7:bc:34:34:ab:9d:b9:
                    af:50:97:c4:37:ff:24:8a:69:3d:31:00:da:89:ec:
                    8c:ce:08:8a:41:d8:6a:9b:d4:f7:84:1d:9a:6b:5c:
                    5f:d2:08:36:12:01:e4:d8:14:17:6b:13:24:1e:dc:
                    30:b0:ff:c9:d6:52:69:f6:ce:50:cf:65:0c:4e:3e:
                    49:06:87:fa:d9:e9:d6:7c:60:0e:49:b9:0c:43:8f:
                    62:8d:3e:bd:29:2f:b1:85:5f:c7:7d:dc:a3:86:3b:
                    26:33:a3:44:e1:7a:9c:42:72:dc:f2:13:c8:a4:d9:
                    fc:e0:05:73:ee:02:08:03:9e:ad:a2:52:9d:4f:8a:
                    84:da:b9:87:e0:5b:df:b2:b2:88:14:54:69:3b:59:
                    98:e3:34:46:94:6e:c6:11:91:c4:57:cc:10:d5:9a:
                    63:2d:49:18:0a:c1:9c:1a:a2:0f:de:bf:9e:3a:35:
                    c6:7b:dc:b1:f0:6f:f4:5e:1d:81:4d:01:55:92:ba:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9F:7A:83:30:55:D8:96:27:08:72:3C:E0:1F:46:35:99:13:B5:80
            X509v3 Authority Key Identifier:
                keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:30:a1:44:d9:ac:e2:37:35:51:d4:a9:ad:1c:7b:95:88:d3:
         e3:d4:c9:82:4e:e7:16:4c:b9:b5:18:9d:6e:5e:b7:2d:cc:a7:
         96:0f:66:fa:53:e8:28:2d:95:06:ee:af:07:99:0e:b2:2e:a8:
         69:fe:c2:56:a0:00:ad:6b:33:79:df:59:a5:d5:7f:94:4f:5c:
         e2:e4:d2:00:d2:80:1e:18:b1:19:66:89:68:55:21:b9:7f:64:
         c1:04:d3:f0:50:d5:2e:c1:42:a9:ec:12:dd:01:09:1c:60:42:
         81:74:60:a1:2d:96:04:ab:44:0a:ce:46:df:96:46:cc:d8:02:
         85:cc:67:61:bd:5d:95:90:ea:b5:b0:06:c0:13:1c:68:a6:4e:
         80:8c:69:6a:eb:ab:7b:34:ae:df:54:25:c2:46:70:64:d0:58:
         c5:41:98:c6:cb:3f:7d:10:df:0f:de:11:a0:a9:4d:62:4f:63:
         af:78:89:66:34:19:21:22:c1:24:59:c6:7b:00:b5:b2:50:22:
         fa:c7:a1:07:70:d0:1d:92:01:65:fb:0b:a7:15:03:fb:10:8a:
         fd:8c:af:8f:dc:e3:9c:a4:a0:b3:fa:16:d6:ea:3d:ea:d3:5b:
         3d:c5:1f:09:db:08:c4:ed:f6:8a:51:af:b6:f2:96:85:5e:bd:
         b7:16:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:32 2026 by rpki-client