Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File:                     B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier:          sKsye4IW2Ws+teDv5WItaMvjVa6wU5lmdnrERDhvgsk=
Subject key identifier:   2D:4E:0C:3E:E6:E9:EC:2F:68:7A:FC:2B:D1:D1:FA:4A:A7:E2:82:64
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer:       /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial:       019F1943EB1A20FF5025441BFBC90EC8FA6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number:          1985
Signing time:             Tue 30 Jun 2026 16:01:49 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:49 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:49 +0000
Files and hashes:         1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: GXQRiHDz/PKY6OpBL0VF4IfLyUp0BpgoxDanubVYyNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:eb:1a:20:ff:50:25:44:1b:fb:c9:0e:c8:fa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
        Validity
            Not Before: Jun 30 16:01:49 2026 GMT
            Not After : Jul  1 16:01:49 2026 GMT
        Subject: CN=2d4e0c3ee6e9ec2f687afc2bd1d1fa4aa7e28264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:95:f2:27:06:b5:84:74:bf:8b:ac:76:fe:
                    0c:e9:ab:96:0b:8d:40:1c:35:44:15:b3:2c:00:02:
                    1b:59:bb:93:11:38:da:51:1a:47:6b:ee:ba:3b:22:
                    54:d6:9a:c3:5c:b9:c9:99:a8:77:2a:44:7f:50:b8:
                    7e:b9:fe:05:f1:23:9b:3f:0a:00:b5:bd:b7:e6:66:
                    28:ee:6a:f3:a3:b5:20:81:eb:89:08:58:09:23:0b:
                    f8:b6:55:b4:da:57:85:fe:95:ac:3b:0c:cf:39:19:
                    8a:10:5b:62:56:17:ee:19:4f:6a:d7:c8:2f:9c:8b:
                    9a:d4:62:0f:f7:3f:24:df:5c:4e:cd:a7:a2:26:9c:
                    ff:a6:2e:80:a0:9b:d0:bf:55:ad:33:ea:54:a1:70:
                    61:4c:14:d2:a4:b1:2a:3f:2d:28:fa:dd:21:38:a9:
                    f6:d1:4f:2e:a2:96:d6:99:88:ce:9a:1b:dd:3b:7c:
                    a0:28:8a:40:e2:0d:0f:77:91:e9:2e:14:93:a2:24:
                    b8:5e:11:80:cd:8c:55:b2:59:56:d7:6b:db:28:eb:
                    17:dc:07:fa:f2:2a:b0:ba:d7:28:62:0f:67:13:48:
                    16:ca:1f:44:5f:0d:b8:97:ed:79:6f:09:19:b8:8b:
                    02:f3:d9:05:bd:07:eb:d3:8f:e6:20:35:dc:4f:76:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:0C:3E:E6:E9:EC:2F:68:7A:FC:2B:D1:D1:FA:4A:A7:E2:82:64
            X509v3 Authority Key Identifier:
                keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:95:23:ca:a4:f3:8c:c6:94:71:c5:cc:aa:5b:a4:ab:ed:
         b5:1e:95:ef:64:b3:0c:db:a6:f1:89:09:17:7f:37:70:b2:21:
         76:d8:c2:fe:a1:36:5c:33:8b:68:b3:ef:d8:ba:d9:4c:63:e6:
         1f:c1:95:53:c1:95:e3:58:5a:57:c8:58:27:49:dd:61:ec:3e:
         a5:5f:34:ea:82:33:dc:2a:97:41:84:74:06:62:07:91:d8:b5:
         23:ba:07:d4:be:a9:91:de:1d:57:cd:dc:c9:0c:47:20:b8:25:
         39:0d:6f:4f:04:a6:ba:8d:08:3b:96:d6:01:5d:21:a2:b5:4b:
         e4:90:fb:e8:7c:8c:a0:fd:fe:ed:25:35:20:f3:cf:d6:d2:7e:
         b4:6b:4c:6b:1a:12:95:cb:bc:1d:25:b5:01:4d:37:1d:28:bc:
         9e:c3:d4:85:41:bb:f4:bc:93:fe:cd:64:73:61:06:7d:8d:bc:
         5b:d0:81:8d:10:2a:5a:97:85:77:4a:29:61:f4:4e:3e:d1:2b:
         6c:28:59:18:03:e5:91:77:3f:cf:57:72:2e:ed:84:82:d4:70:
         92:c7:34:08:e0:26:b4:59:72:7e:8c:5e:c2:81:e1:03:a5:06:
         ae:09:ae:ad:1f:d1:13:51:d4:58:69:43:1e:a0:93:84:0a:c5:
         a3:40:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:55 2026 by rpki-client