Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
File:                     6fxsgWY89vzpLoPl1mKLwOtqlNI.mft (raw, json)
Hash identifier:          NDbKwdqUuhHPxOXJqVjTgsInUaxRjMHghR53f+qzIPM=
Subject key identifier:   B6:0D:74:EB:82:65:C4:FA:68:22:57:57:BD:A9:17:4B:C3:05:9C:EF
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Certificate issuer:       /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial:       019F183111B978E591711BB7BD0FFFF4940C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
Manifest number:          0713
Signing time:             Tue 30 Jun 2026 11:01:36 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:36 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:36 +0000
Files and hashes:         1: 6fxsgWY89vzpLoPl1mKLwOtqlNI.crl (hash: tHvo21SfopUXtSwut3koTDG7U09HIHyWlNkHEEYw/bk=)
                          2: vatD6IyOJfXLFso-oQNdkHZ0B5A.roa (hash: CF8afvvRrtxwksEOb+htGDBoa1bLNCvDnWuii8t0Lrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:11:b9:78:e5:91:71:1b:b7:bd:0f:ff:f4:94:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
        Validity
            Not Before: Jun 30 11:01:36 2026 GMT
            Not After : Jul  1 11:01:36 2026 GMT
        Subject: CN=b60d74eb8265c4fa68225757bda9174bc3059cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:19:5d:00:60:90:77:6c:67:3f:43:d3:18:
                    cf:a6:97:06:48:2c:60:10:eb:5d:a7:96:51:53:3b:
                    89:6c:08:78:6a:63:76:47:b0:74:04:00:37:bd:18:
                    ff:72:75:f8:35:ef:79:90:ca:9a:8c:e3:74:d2:a6:
                    53:63:65:46:dc:2c:e8:1d:00:db:b1:dc:5b:0b:73:
                    8b:aa:40:6f:a1:57:b4:e3:6b:50:96:cd:2e:bf:17:
                    37:60:ee:a0:de:a8:7d:34:28:bf:da:99:1d:f3:ae:
                    fe:b3:04:39:46:42:b4:03:7b:9f:e0:b8:e8:34:25:
                    1f:22:7b:c7:91:9f:8f:d2:9f:fd:00:0d:f2:7f:17:
                    fe:bf:e7:fc:ff:b7:ee:5d:a8:c4:b8:9a:a9:45:d3:
                    25:01:d5:1e:54:c0:0c:fe:e5:e3:6c:6c:a4:1a:80:
                    10:dc:38:40:e4:fe:c9:dd:a2:4f:d9:91:cd:16:02:
                    60:ad:de:d6:ad:77:a1:8a:13:f9:e8:61:df:da:f2:
                    18:55:44:93:2e:32:3e:db:21:12:eb:c3:ec:05:4d:
                    d4:f6:9a:29:a2:cc:33:5c:47:e5:0a:90:3c:07:66:
                    e6:ad:16:a1:a4:6c:34:97:11:84:86:77:cb:53:91:
                    4f:ca:12:17:3d:40:bd:fb:93:4b:bc:cb:62:ef:89:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:74:EB:82:65:C4:FA:68:22:57:57:BD:A9:17:4B:C3:05:9C:EF
            X509v3 Authority Key Identifier:
                keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:24:fa:18:c5:11:ff:8f:25:ed:55:89:4a:1d:f1:91:be:a5:
         d8:e7:46:6a:1d:fa:c4:e7:e3:79:1f:90:ab:93:89:99:ec:26:
         18:9d:1b:74:16:c0:9a:f5:f3:d5:b8:95:c1:7d:a8:8f:9e:a7:
         b9:32:96:5d:ca:10:64:3c:53:d5:18:39:1a:28:ea:24:7d:7e:
         4a:a0:2d:38:23:fd:f0:40:e8:20:b9:07:3f:42:0b:08:5c:18:
         ef:8d:da:9d:cc:12:40:8f:c7:05:51:4b:07:98:78:47:23:87:
         e1:e8:aa:20:99:86:85:5e:ef:60:13:aa:9c:76:05:3f:d9:be:
         a7:bd:eb:44:ab:08:6e:1f:5a:c1:83:9d:18:12:4d:45:8a:76:
         9a:ce:ac:e7:54:57:9d:10:6f:a7:82:5f:b9:4c:dc:aa:1c:67:
         09:c5:be:cd:85:0b:62:3b:23:e7:45:1e:6b:d1:d4:7a:80:cd:
         c7:b2:97:41:33:01:6e:6e:6f:73:b4:29:9e:be:10:4a:b8:91:
         15:fd:3f:79:af:33:62:bb:57:e9:ce:d5:ed:ed:a2:9a:3d:85:
         d3:e6:5a:b0:e0:93:79:2c:9e:e4:e4:68:2c:59:d8:69:37:b2:
         f2:ec:f1:e7:ec:36:fa:30:f6:e4:95:34:43:35:e2:cf:60:36:
         93:28:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:25:58 2026 by rpki-client