Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
File:                     t6j-qPyoAMH8Se8thckuMjdSsO0.mft (raw, json)
Hash identifier:          XIQ5gfmgA7Pavg7YwyaGPHQT8stkehplK6h913Cif9E=
Subject key identifier:   05:17:5C:D9:64:FE:D2:73:74:86:65:B2:B7:72:D3:B3:7C:6B:46:B0
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019EB98F5C8A2DE0D8EB5BFEBE321C569B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
Manifest number:          1924
Signing time:             Fri 12 Jun 2026 02:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:40 +0000
Files and hashes:         1: EadvWoNQk_Njor8ut2EuvMgsWZA.roa (hash: 272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=)
                          2: t6j-qPyoAMH8Se8thckuMjdSsO0.crl (hash: T11XdH2tJ/sMidQPYlRO1GJHbmZkeSxQfxdAOURhkYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:5c:8a:2d:e0:d8:eb:5b:fe:be:32:1c:56:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Jun 12 02:00:40 2026 GMT
            Not After : Jun 13 02:00:40 2026 GMT
        Subject: CN=05175cd964fed273748665b2b772d3b37c6b46b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:4f:c1:ed:d5:df:43:a1:8e:52:d0:f1:7f:
                    82:8a:d9:e0:8f:22:c9:74:04:0e:ae:9e:3f:60:3f:
                    14:96:30:fb:f4:0b:f4:55:0b:55:4c:ae:46:e7:7a:
                    db:7f:bd:a3:2e:c7:93:ad:69:76:10:56:24:6a:1f:
                    51:8e:a0:ce:12:4d:55:8a:04:ea:e6:b2:9b:2c:e3:
                    d5:f3:28:2a:6f:a1:a8:64:29:c4:4c:58:bd:88:d2:
                    0c:3d:d1:f3:d8:f2:48:7e:a3:7d:24:4d:de:81:b3:
                    57:1e:35:fc:6f:d5:59:83:f3:57:4b:49:c7:49:3a:
                    57:99:1c:54:ae:b8:a1:09:f1:14:2c:26:0c:2e:76:
                    1f:8c:96:11:95:30:24:9e:b5:8f:b7:8e:70:bb:8f:
                    78:8a:af:da:73:74:f1:a1:1e:73:33:07:f9:66:ac:
                    58:e3:02:bf:b5:e4:3d:fc:cd:da:f8:1f:93:97:00:
                    79:5a:05:c6:02:67:97:36:c9:ff:ad:ae:be:84:17:
                    16:9e:fd:0b:d3:86:39:47:62:6d:c8:d8:54:b2:06:
                    ff:5b:33:44:c6:18:44:88:17:1d:35:19:b8:3c:13:
                    80:1d:fc:56:1d:96:ed:16:7d:fc:59:ac:68:a2:aa:
                    89:5b:e5:6f:2c:03:df:e2:f6:68:4b:03:a9:f0:0e:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:17:5C:D9:64:FE:D2:73:74:86:65:B2:B7:72:D3:B3:7C:6B:46:B0
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:09:25:ba:47:fb:ba:a8:53:fb:05:83:86:ea:5f:54:1c:
         29:a3:50:39:a9:64:fa:c5:7c:06:03:37:04:02:62:41:ab:5e:
         b1:59:d2:bd:c4:85:fd:2d:52:00:26:82:fa:70:eb:54:6e:3e:
         9c:68:0c:41:37:8b:38:20:5e:77:1a:0a:8b:15:59:c6:e8:9f:
         a5:de:47:c6:af:7a:57:00:ed:a9:4a:7c:ed:73:68:3a:a9:64:
         2e:ac:0f:95:0a:79:81:f1:35:1f:d2:bf:9e:40:7b:29:de:7c:
         d0:7a:a8:85:15:ad:38:27:a5:ff:c0:0c:ad:6b:2b:29:c7:03:
         f6:24:7b:8c:2f:95:58:20:a4:e5:4d:47:5a:b7:0f:03:59:5b:
         f3:3e:6c:02:82:b6:77:e8:9e:8e:21:59:10:f7:50:7a:6c:ce:
         41:f4:cd:eb:e6:5f:e6:97:dc:c3:5e:f8:24:d7:d2:7d:8e:f5:
         67:af:08:1b:c4:e9:87:47:9f:ed:9a:a3:ea:ba:7d:42:05:b0:
         a0:9c:4d:b4:56:fb:ae:6c:53:ac:bd:28:20:cf:fc:5d:7e:73:
         1d:6a:e6:e3:f6:95:ef:f6:1d:e9:f3:f0:20:4d:45:e8:84:ed:
         1d:fe:83:6f:3d:f2:8a:7b:ea:d8:23:44:83:f7:41:77:15:33:
         69:e2:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:18 2026 by rpki-client