Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File:                     6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier:          1cjhPLoPzEh8TO0fBi4g2eyr9nj00iZxA8KSasCFElM=
Subject key identifier:   EC:13:6B:ED:FF:6E:F4:EB:5D:18:0F:47:DB:58:E3:7B:95:CF:01:EA
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       019EB9C68699DEB4815F571260C674FEAD2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number:          18F7
Signing time:             Fri 12 Jun 2026 03:00:55 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:55 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:55 +0000
Files and hashes:         1: 3V-oI545qzWJJ_b9C5qCJ8LoZ70.roa (hash: dBqoxgKCcb3Bb3rl4SUwmiuxUnl7cOt7xFGOUiVmfSc=)
                          2: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: PSC/MSEkJY75U/wKRNAsrQ6B6mDtbVX5q0V1Oh4GSGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:86:99:de:b4:81:5f:57:12:60:c6:74:fe:ad:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Jun 12 03:00:55 2026 GMT
            Not After : Jun 13 03:00:55 2026 GMT
        Subject: CN=ec136bedff6ef4eb5d180f47db58e37b95cf01ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:6c:3d:6b:93:6a:ae:57:59:73:f7:0f:31:
                    37:bf:a9:8f:1d:92:8f:fe:63:b4:69:cb:9e:46:c2:
                    a8:83:ec:a4:e5:91:62:3c:71:d4:bc:a0:58:53:66:
                    d3:b2:e7:0d:ca:0f:83:b8:17:1b:b2:ec:6d:38:43:
                    a5:c9:99:ad:1e:d8:07:fe:db:03:09:ed:31:7b:23:
                    94:f7:c8:b9:c6:20:05:d9:34:f2:5e:6e:be:a7:b6:
                    06:36:1f:cf:9d:14:12:ba:3b:2a:bc:ad:97:4d:fc:
                    ae:63:24:1a:9f:d9:90:56:71:02:b8:73:8c:35:78:
                    e3:77:91:8b:15:14:59:66:a9:9f:cd:6f:f7:5c:2a:
                    0d:c3:11:24:dc:e9:2d:a0:50:04:56:da:a6:5e:a6:
                    a3:9f:c6:ba:b2:eb:d2:a7:47:8f:26:4d:a2:f7:55:
                    90:be:b6:b0:d1:78:9e:a8:c4:0e:0b:0e:9d:2d:ef:
                    0c:2b:ca:06:2e:2d:23:32:27:93:91:1d:74:35:e2:
                    4d:13:43:98:51:4e:0c:d6:38:f0:2f:ef:c6:96:26:
                    66:b9:6a:3a:3b:51:0e:0e:3f:cd:14:b3:7f:da:f3:
                    2e:8b:7f:2b:b6:f4:13:d9:d9:f5:c1:d0:f7:93:14:
                    d3:5b:2e:6f:9d:e2:51:a1:25:f9:95:ea:80:11:3d:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:13:6B:ED:FF:6E:F4:EB:5D:18:0F:47:DB:58:E3:7B:95:CF:01:EA
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ec:21:ff:2a:78:71:07:44:76:9b:0a:e6:a8:71:4f:83:fc:
         44:90:c8:3b:c6:e4:eb:89:66:36:5a:9b:d9:71:5c:cd:cf:6a:
         4d:3a:60:ae:43:10:c8:f1:cb:c4:a0:7d:33:7a:54:55:b6:63:
         be:77:72:a0:0a:f6:23:27:76:5d:4d:63:c4:e7:d1:e4:6c:93:
         bb:52:6e:a3:27:b8:3a:e4:83:58:24:ca:95:68:b6:77:2b:ca:
         a4:41:6f:4b:59:43:0f:66:a7:ef:f8:bb:fb:5d:65:f2:fa:da:
         c7:dc:e2:b6:3f:76:8e:71:29:01:16:5d:04:fd:52:14:b3:76:
         28:be:49:38:ed:af:c5:59:58:d7:a5:01:17:92:f9:0f:13:82:
         3a:10:60:d2:cd:86:a4:2c:96:bf:de:e2:53:67:f2:67:ab:c2:
         fe:d0:7f:38:d5:88:b2:4b:2d:96:90:c3:9e:eb:43:23:7f:d9:
         ad:51:47:64:ba:3c:23:3c:46:05:82:b4:2a:18:6c:d7:3e:13:
         25:b9:b3:87:37:37:e2:a1:1a:29:4f:51:4d:df:cd:7a:4a:8a:
         07:e7:f9:c0:33:eb:41:4d:6f:4b:02:d6:d3:4e:0d:95:5c:62:
         44:05:dd:5c:74:ab:bd:8b:bb:7e:93:34:cb:a3:40:75:44:1b:
         9b:7a:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:46:17 2026 by rpki-client