Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
File:                     6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft (raw, json)
Hash identifier:          1FilNC20DxeO8f4WFXnkOsAOxbyDJCgR31Tx54acKLE=
Subject key identifier:   44:39:E6:62:5B:B4:88:52:D6:F4:34:38:03:17:CE:78:04:4C:24:C6
Authority key identifier: EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
Certificate issuer:       /CN=ea2f671f10834dae48ea8d987342c375cab3316d
Certificate serial:       019F197A8FE5898BE2B096E030157E7E2594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
Manifest number:          0582
Signing time:             Tue 30 Jun 2026 17:01:30 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:30 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:30 +0000
Files and hashes:         1: 1-BDF7EdL9hLHZ4qCs6jAWm3n8G8.roa (hash: 3HI3L0u1gTr2C+yxlBAEamd5L6jvpyumi2g5XXRKy/k=)
                          2: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl (hash: Wkxgq0N9A36SpwnCtUn7+K7KpvJ66JTynzNw+eAXslM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:8f:e5:89:8b:e2:b0:96:e0:30:15:7e:7e:25:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2f671f10834dae48ea8d987342c375cab3316d
        Validity
            Not Before: Jun 30 17:01:30 2026 GMT
            Not After : Jul  1 17:01:30 2026 GMT
        Subject: CN=4439e6625bb48852d6f434380317ce78044c24c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:06:1c:29:51:d7:c2:b8:df:9f:ea:48:88:e7:
                    62:9f:ea:75:93:e2:2b:c2:81:e7:1d:20:82:31:2a:
                    29:19:9b:2a:cf:50:2e:32:71:8b:c2:62:3d:53:ef:
                    8b:59:38:4f:ca:39:76:b3:6d:a2:4c:31:b6:dd:21:
                    d6:f9:6e:a1:14:01:5c:c8:b1:8c:4e:3c:a6:09:fe:
                    63:4d:50:96:bd:60:17:bc:7a:03:02:62:7f:80:9c:
                    72:47:f5:31:b0:c3:9b:d2:26:ca:e0:1d:71:2e:77:
                    ca:1f:af:9e:7e:4e:83:69:8f:c5:75:90:ad:55:44:
                    8a:c6:83:56:61:b8:f8:ed:64:9d:46:61:2e:90:a7:
                    16:63:be:26:f5:bb:be:dd:a9:b8:ef:38:5e:5a:e5:
                    ab:3c:2b:4b:da:66:f1:e1:c9:5f:51:42:3b:8a:5f:
                    31:38:11:d3:85:04:55:2f:bf:f5:7c:bc:e3:0d:1a:
                    21:f7:4a:5a:a5:37:50:d1:e1:c8:bf:56:a3:9e:a8:
                    34:e7:17:a6:e8:70:6a:16:b5:b5:f8:e6:0f:df:35:
                    fb:8d:16:34:b3:24:28:0f:0e:af:32:29:e1:2a:76:
                    40:b8:45:9e:ce:a5:73:ce:cc:d8:6e:50:93:56:12:
                    ef:e7:2d:8b:e8:d4:a9:1e:c7:9f:8e:57:41:59:cf:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:E6:62:5B:B4:88:52:D6:F4:34:38:03:17:CE:78:04:4C:24:C6
            X509v3 Authority Key Identifier:
                keyid:EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:e8:25:89:19:42:33:59:97:fc:82:2c:42:3e:8c:e1:67:
         08:6c:cb:61:b4:1b:c6:bf:e5:5a:68:8d:93:79:d8:aa:a6:92:
         1a:e7:42:8c:ee:23:3e:2f:d7:bb:4a:e7:3b:b4:c7:3b:b2:16:
         c8:9a:a8:f8:29:10:ef:2c:07:e9:0f:9a:53:40:a0:10:cf:89:
         ce:ff:81:e0:64:97:3f:29:b3:1c:ac:c5:6d:7a:15:dc:c4:b0:
         5d:db:1d:6e:dd:91:89:35:b4:95:2c:e0:51:ae:95:ef:bb:76:
         a7:2d:d0:18:bc:f1:68:0f:9f:1a:11:58:c2:5d:64:da:8e:50:
         0a:1c:c5:29:10:21:dd:f6:86:28:43:dc:36:d1:22:64:bc:e6:
         7b:ce:b2:b4:3d:7d:a8:25:b8:0f:01:b1:04:c1:b6:7c:6b:14:
         80:f7:a4:4e:8e:cd:f1:fd:21:eb:bd:2e:dc:7b:40:e6:34:f2:
         f0:b7:51:0f:0a:47:b9:20:24:e9:d5:b6:b5:9f:26:52:76:43:
         91:a7:9d:7b:67:7f:b3:e0:aa:ff:52:62:a8:dd:0d:ba:2b:f0:
         c8:bf:9a:73:6a:5f:14:96:79:70:10:5c:4b:f6:0b:7d:1c:17:
         58:b2:52:72:f8:78:6e:0b:be:53:33:c4:ca:b5:de:dd:af:e0:
         b3:a4:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:23 2026 by rpki-client