Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File:                     6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier:          WB0rL+ubmJs6tsjdKvWcSGpDl1u3fdFbbnYpboYddJU=
Subject key identifier:   CC:EF:FD:3F:44:DF:D3:8D:33:A5:15:A4:0E:02:AA:FA:8B:CE:03:0D
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer:       /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial:       019EB98F4D7DB699CAAFD185238238C6A8A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number:          0C60
Signing time:             Fri 12 Jun 2026 02:00:36 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:36 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:36 +0000
Files and hashes:         1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
                          2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: SlQLmSxX19QqYveIF5B/zha5wrn3ZDT6JFf4EOTdMUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:4d:7d:b6:99:ca:af:d1:85:23:82:38:c6:a8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
        Validity
            Not Before: Jun 12 02:00:36 2026 GMT
            Not After : Jun 13 02:00:36 2026 GMT
        Subject: CN=cceffd3f44dfd38d33a515a40e02aafa8bce030d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:99:09:09:51:a1:18:3c:61:68:a5:c5:91:
                    a7:fc:2b:52:34:04:d8:f6:85:5e:47:8c:0c:4f:b3:
                    03:b5:b4:85:7f:cd:bf:8d:e5:36:98:23:d1:e5:5b:
                    c2:26:ae:20:25:6c:33:dc:f4:17:c4:ea:e6:42:cd:
                    1f:1c:78:6a:7c:90:53:33:9a:cb:b5:2b:78:c6:09:
                    a4:aa:e1:34:66:41:16:47:33:93:2f:5d:e9:59:56:
                    89:af:cd:d1:a2:dc:3f:3b:00:0e:5b:fa:55:1b:54:
                    68:6b:03:33:cd:a9:75:52:14:9a:5f:d1:bf:8f:d1:
                    e4:a3:60:1f:8c:e2:a3:78:c3:9c:13:b4:44:81:ce:
                    cc:bb:fd:b3:ee:71:85:75:80:1a:68:fc:d7:bc:1c:
                    de:a6:b2:23:30:c5:49:20:f2:5d:bb:fc:72:fe:df:
                    c9:6b:2c:02:de:e8:af:f4:9f:f5:d8:4e:88:c1:87:
                    72:81:fd:dc:19:af:d7:08:25:48:2c:c9:c2:ea:bc:
                    db:48:51:c1:1d:00:03:09:1d:d7:5f:91:3d:ad:53:
                    a7:04:f4:71:59:53:bd:83:b5:e0:0d:5f:af:58:3c:
                    c0:3a:de:de:c4:44:f8:4f:3e:79:ab:ef:e9:b0:55:
                    a8:c1:ca:e4:34:78:9d:3c:ae:53:02:8f:2c:c2:2e:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EF:FD:3F:44:DF:D3:8D:33:A5:15:A4:0E:02:AA:FA:8B:CE:03:0D
            X509v3 Authority Key Identifier:
                keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:30:9c:70:08:68:f6:1d:cc:a1:cf:9f:f5:66:3b:a3:23:
         73:4f:10:91:96:89:59:29:b4:aa:b8:7f:7c:87:b1:4d:72:c5:
         39:8f:21:3a:78:19:c6:c9:ee:19:92:9c:82:a9:27:c4:02:a7:
         e3:bb:56:88:29:94:a1:e6:10:2f:5c:cb:e6:5a:3a:77:4c:3a:
         fa:b7:60:71:7d:6c:43:b2:44:59:7e:ae:75:c8:6a:16:f5:ee:
         ba:b5:d7:08:02:b5:fc:81:d7:6a:c5:de:9f:81:c0:ff:f9:9b:
         ab:38:65:41:70:bd:fb:ff:5d:35:ae:cc:fa:55:d7:92:25:d5:
         c0:e7:b7:4b:d4:16:3c:0c:5c:05:e8:2a:14:6f:72:bd:b9:ed:
         a7:9a:3c:ff:d6:2e:25:97:af:e5:5f:cc:c8:0f:27:bd:97:8a:
         21:65:b3:64:53:8e:37:db:f5:47:93:15:ba:39:69:7f:25:8a:
         53:a9:a0:f7:e5:aa:eb:4b:c1:e5:45:35:64:fe:43:ff:26:db:
         cf:eb:29:45:d3:12:b0:d4:7f:ee:44:d7:87:ee:83:3c:50:bb:
         94:0a:d2:bc:53:eb:30:99:01:12:62:b6:2e:17:1d:6f:79:93:
         85:63:0f:90:df:ee:59:24:32:d8:43:50:fb:53:b5:c9:8f:c8:
         87:d5:8f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:52:33 2026 by rpki-client