Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File:                     6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier:          TfK4NBtpm0053gaRR0T7QT1C2/ieonWJh34bIx05YPk=
Subject key identifier:   34:1A:14:71:BA:47:A8:26:0C:29:71:62:D0:BA:B6:8C:38:B1:E2:5B
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer:       /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial:       019F18D631176F73A8F59FE1B2D868E412AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number:          1825
Signing time:             Tue 30 Jun 2026 14:01:57 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:57 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:57 +0000
Files and hashes:         1: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (hash: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs=)
                          2: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: wA1ila4u+bMGD55kNMsy+5o5usndy4dMkpOorbU9NP0=)
                          3: qn15DF9dZdW2bdgJiT7rD5khHDM.roa (hash: RGfq55w0LNg0TrYHY6hqYEXOyqvCL/sXZbzV7o33abs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:31:17:6f:73:a8:f5:9f:e1:b2:d8:68:e4:12:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
        Validity
            Not Before: Jun 30 14:01:57 2026 GMT
            Not After : Jul  1 14:01:57 2026 GMT
        Subject: CN=341a1471ba47a8260c297162d0bab68c38b1e25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:69:df:7e:bd:e5:e4:0e:18:a7:c8:49:10:
                    a5:2f:4b:c6:55:e3:bb:12:ab:22:3d:a3:73:06:42:
                    ab:42:db:2d:3f:ec:cb:0d:fb:5e:a9:2b:2a:5d:d1:
                    8b:1f:3c:22:23:9d:e5:34:f2:df:a6:ad:65:34:29:
                    a6:fc:b7:2a:72:23:1a:b6:2d:31:13:23:b7:c4:91:
                    5c:6a:29:f4:cb:9b:2a:a7:2d:5f:2c:cf:c2:d2:4a:
                    4d:90:1c:b7:69:2d:21:7f:0e:4a:8f:1c:18:a1:3b:
                    2b:a5:9c:dd:63:f8:85:8f:c0:68:e6:1c:4c:2f:ea:
                    bd:89:16:17:46:5c:2d:41:ed:44:db:1f:7f:4d:57:
                    75:09:93:f6:bf:90:c5:76:55:9a:7b:3a:3e:b5:d6:
                    fd:c1:9a:31:f7:a5:14:5e:dc:85:64:72:30:4d:72:
                    78:e1:03:ca:b8:0f:95:10:23:37:d9:b1:c2:64:fb:
                    a8:2a:82:d2:2f:e1:81:c6:c6:5a:be:70:f1:6f:c6:
                    c1:c3:81:a8:22:4f:4f:89:05:ae:01:f7:70:9e:e9:
                    49:73:d1:17:60:b2:e6:58:38:6b:f4:cb:84:51:d4:
                    f1:42:8d:d3:0c:1b:15:2a:9f:c9:aa:27:06:9f:ee:
                    02:5e:0f:3a:e2:56:b4:ee:8e:c9:b8:9b:0a:69:48:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1A:14:71:BA:47:A8:26:0C:29:71:62:D0:BA:B6:8C:38:B1:E2:5B
            X509v3 Authority Key Identifier:
                keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:0f:3b:df:88:3b:99:09:37:9f:95:f6:9d:39:82:9f:b1:
         03:46:26:ff:16:f3:19:f4:b2:13:fc:44:8a:d1:ce:ca:a3:33:
         ce:75:97:60:7d:8e:0c:6f:ec:54:e7:59:e4:90:be:8b:d1:a7:
         d9:7e:d8:a6:03:5d:31:ca:27:89:4e:3c:8f:4a:33:dd:49:22:
         86:b8:82:8a:e2:5d:03:1e:3f:df:8e:99:bb:59:19:57:fc:20:
         8d:54:a0:06:5b:f5:eb:04:a0:ce:f3:29:e0:ce:e7:e1:aa:d9:
         1f:bc:df:0f:59:8e:56:a2:fb:bc:aa:dd:21:93:fd:38:f3:38:
         a8:cf:9a:da:ad:44:2e:57:20:01:5c:11:25:35:71:45:26:b7:
         0d:58:92:fc:bc:11:13:4c:e2:21:c3:0a:af:4a:67:46:4e:9e:
         aa:26:05:6b:f7:7c:28:b3:2c:25:45:97:c7:88:5c:9e:b6:ee:
         a1:70:b0:37:b8:1f:3e:17:41:f3:7e:dc:03:90:3a:b6:ca:65:
         52:86:50:6d:e3:ab:f8:12:0a:ef:36:0a:34:96:e2:66:57:98:
         b4:ea:b2:b0:a1:a4:ba:27:02:bf:19:47:e8:d0:43:ac:78:12:
         8e:e7:5c:0e:d9:c8:32:f7:2c:0b:eb:82:17:ac:9f:13:8d:64:
         c4:b9:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:57 2026 by rpki-client