Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          7N2lqT1XrPse6oXhq+vimf3GDQf6d4mI/qoiPJY7QEg=
Subject key identifier:   A8:62:52:33:3F:65:19:4D:D6:9E:81:D5:DD:50:AA:FD:15:FF:3D:CD
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       019EBA6AF94DA8FBA758E15B970F9A06E2C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          115C
Signing time:             Fri 12 Jun 2026 06:00:33 +0000
Manifest this update:     Fri 12 Jun 2026 06:00:33 +0000
Manifest next update:     Sat 13 Jun 2026 06:00:33 +0000
Files and hashes:         1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: ra+NnEGEBWvkn/K2TjKpV8M+4K4z3DKfwsp2MyTiFA4=)
                          2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
                          3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:6a:f9:4d:a8:fb:a7:58:e1:5b:97:0f:9a:06:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Jun 12 06:00:33 2026 GMT
            Not After : Jun 13 06:00:33 2026 GMT
        Subject: CN=a86252333f65194dd69e81d5dd50aafd15ff3dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:df:53:52:3a:ac:d1:7f:90:c2:37:51:23:
                    8f:5d:91:c2:e3:78:42:86:f2:78:3f:33:85:61:0a:
                    1c:f2:52:15:12:75:61:d5:b4:17:bb:a6:17:37:c6:
                    9a:e0:a5:b1:5b:58:75:e6:9e:00:07:9e:e2:d5:c4:
                    74:97:01:39:55:cd:fd:d0:ac:8d:fd:b4:ca:77:50:
                    de:38:9e:44:7b:56:c8:c9:9c:7d:88:1d:fb:eb:bb:
                    39:67:7c:d7:a7:1e:21:c4:f0:50:98:4f:24:2a:8e:
                    9c:09:d9:23:85:23:21:e8:a1:5a:8c:6c:ae:73:fe:
                    5a:c6:b2:4a:64:aa:92:50:8e:8b:9e:b6:fc:87:32:
                    c0:a6:94:ab:e7:71:a8:82:1b:53:c0:78:45:f0:2d:
                    2f:2f:8e:ef:32:09:33:ca:e5:54:64:ef:70:b7:e7:
                    b1:bc:9d:e9:db:ca:69:17:61:18:bf:f1:c3:58:96:
                    d3:b8:6e:28:70:80:7e:f7:5f:0b:6a:fa:97:1c:d2:
                    4b:c8:e8:14:9f:ab:63:de:65:d1:d3:3c:c6:28:20:
                    b7:ac:76:fa:8e:a6:7d:f9:58:db:62:21:42:ed:dd:
                    ff:1c:89:2e:18:62:f8:f3:c0:60:6b:19:43:40:6b:
                    f2:c1:45:eb:b0:cb:8c:bc:51:74:03:92:e8:a5:b8:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:52:33:3F:65:19:4D:D6:9E:81:D5:DD:50:AA:FD:15:FF:3D:CD
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:1e:dc:75:f0:08:dd:7a:10:c7:a9:8f:e2:cd:33:a9:e4:
         4d:34:94:f3:73:5b:81:bd:17:ed:c1:c6:da:f1:48:3c:d6:a4:
         32:43:1c:2d:c8:db:3d:93:2d:81:7f:4d:62:10:e2:f2:e4:62:
         24:23:39:bb:93:99:89:3b:29:c8:1c:68:be:8e:fe:7d:86:24:
         7d:be:8f:a6:31:82:af:65:a3:a4:3e:50:46:3f:b3:51:4b:40:
         6e:c3:87:54:1c:dd:50:6b:d8:37:c2:13:fa:89:fb:9d:ca:4b:
         69:b1:bb:ff:25:cc:4e:d0:84:50:7e:77:91:6e:16:c3:1b:cd:
         b4:0a:c3:f5:49:1c:6e:5a:63:f7:96:5b:a0:9c:3d:7b:e3:b0:
         98:32:da:d5:d1:10:7c:73:b4:88:52:bf:d9:af:a2:34:71:0f:
         37:c3:cb:bf:29:c7:fa:06:b4:fe:a3:43:19:c7:a6:82:5a:fd:
         85:f6:12:d0:f0:a7:2a:ac:7f:b7:20:8c:8b:ad:8e:07:6f:4a:
         b6:2c:2c:74:e8:b9:65:10:11:fc:84:73:d2:3a:af:1a:b8:0c:
         21:bd:d9:a1:16:fa:b5:3b:0d:2d:f6:fc:e0:94:32:d3:0a:25:
         c8:7a:e0:e9:4c:6e:33:58:ca:f3:ed:38:65:44:0e:35:7c:24:
         6a:a8:db:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66avlNqPunWOFblw+aBuLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj
YzExMzYwHhcNMjYwNjEyMDYwMDMzWhcNMjYwNjEzMDYwMDMzWjAzMTEwLwYDVQQD
EyhhODYyNTIzMzNmNjUxOTRkZDY5ZTgxZDVkZDUwYWFmZDE1ZmYzZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsjfU1I6rNF/kMI3USOPXZHC43hC
hvJ4PzOFYQoc8lIVEnVh1bQXu6YXN8aa4KWxW1h15p4AB57i1cR0lwE5Vc390KyN
/bTKd1DeOJ5Ee1bIyZx9iB3767s5Z3zXpx4hxPBQmE8kKo6cCdkjhSMh6KFajGyu
c/5axrJKZKqSUI6Lnrb8hzLAppSr53GoghtTwHhF8C0vL47vMgkzyuVUZO9wt+ex
vJ3p28ppF2EYv/HDWJbTuG4ocIB+918LavqXHNJLyOgUn6tj3mXR0zzGKCC3rHb6
jqZ9+VjbYiFC7d3/HIkuGGL488BgaxlDQGvywUXrsMuMvFF0A5LopbiTFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhiUjM/ZRlN1p6B1d1Qqv0V/z3NMB8GA1UdIwQY
MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt
Zjc0Y2NjYzRlMGExLzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx
LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikAe3HXw
CN16EMepj+LNM6nkTTSU83Nbgb0X7cHG2vFIPNakMkMcLcjbPZMtgX9NYhDi8uRi
JCM5u5OZiTspyBxovo7+fYYkfb6PpjGCr2WjpD5QRj+zUUtAbsOHVBzdUGvYN8IT
+on7ncpLabG7/yXMTtCEUH53kW4WwxvNtArD9Ukcblpj95ZboJw9e+OwmDLa1dEQ
fHO0iFK/2a+iNHEPN8PLvynH+ga0/qNDGcemglr9hfYS0PCnKqx/tyCMi62OB29K
tiwsdOi5ZRAR/IRz0jqvGrgMIb3ZoRb6tTsNLfb84JQy0wolyHrg6UxuM1jK8+04
ZUQONXwkaqjbyw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:52 2026 by rpki-client