Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File:                     6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier:          CKIkV8SBZu1NVa40osspWSaXzOlGh4WlM2pHSFM5zuA=
Subject key identifier:   75:97:B4:1B:E6:DF:4C:02:CB:04:62:39:89:4E:F8:E4:AA:49:21:96
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer:       /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial:       019F19433F7708B46710D7E6DCC4A7763120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number:          1468
Signing time:             Tue 30 Jun 2026 16:01:05 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:05 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:05 +0000
Files and hashes:         1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: XpiZKmIhGZKYP8HSXYDYkbjF4MyTbizuVJ04rMuB2Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:3f:77:08:b4:67:10:d7:e6:dc:c4:a7:76:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
        Validity
            Not Before: Jun 30 16:01:05 2026 GMT
            Not After : Jul  1 16:01:05 2026 GMT
        Subject: CN=7597b41be6df4c02cb046239894ef8e4aa492196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:e3:7b:64:61:24:92:35:26:02:1d:e7:f2:
                    a5:0f:4c:1e:e1:5c:c1:22:d5:39:e4:61:eb:1f:da:
                    80:66:8b:ca:a5:12:2b:ac:c8:0d:1c:b7:ac:56:21:
                    17:43:25:e0:34:a1:a1:88:b7:18:d8:19:56:f6:86:
                    dc:ca:8c:fc:91:8a:64:3e:af:d5:1a:26:d2:90:b9:
                    13:0e:67:13:28:0a:ac:2e:0f:e4:36:a1:1e:a4:57:
                    21:17:a2:b9:f0:3c:c1:08:07:cb:db:af:61:7b:70:
                    e5:ae:03:ad:0b:28:a9:d3:bf:11:cc:76:c4:91:23:
                    ad:59:22:87:e2:ee:25:08:3a:d3:df:23:4b:11:b9:
                    11:78:45:7e:b6:06:17:92:72:c9:75:d4:4b:25:7f:
                    19:21:90:5c:33:6d:72:47:58:0e:32:83:b4:9f:63:
                    0b:0e:de:0c:c7:58:a3:b1:59:89:b7:70:78:39:fe:
                    e2:91:ea:c3:ae:dd:57:59:b9:eb:e5:4a:90:b4:e5:
                    ff:ee:20:76:3f:0b:48:38:19:9a:f5:d4:6f:d5:2a:
                    62:a4:6f:a4:64:f9:33:52:88:62:29:a3:00:0b:16:
                    75:f9:f3:d5:ae:ee:2d:e2:3f:a1:4e:af:0c:dd:ec:
                    ed:cf:d3:0d:77:14:a5:6e:ce:22:46:7d:86:f8:9c:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:B4:1B:E6:DF:4C:02:CB:04:62:39:89:4E:F8:E4:AA:49:21:96
            X509v3 Authority Key Identifier:
                keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:4f:8b:20:43:06:dc:4c:9a:b7:19:51:67:27:f3:46:33:
         a3:ad:08:17:71:23:bf:48:d6:38:a3:0a:87:cb:53:78:d1:82:
         64:54:4b:51:da:7f:f7:81:75:72:f1:7b:e6:d6:8a:8d:9a:3c:
         46:76:11:0a:c8:90:16:25:81:0b:58:3f:50:96:cb:51:3e:af:
         6c:89:01:7c:c1:fa:d8:b8:15:5b:10:e9:55:e0:f0:13:81:d1:
         7a:5b:14:e5:53:e3:b3:fc:1c:36:72:38:3c:41:2c:ef:d1:76:
         82:8b:62:b7:eb:4b:a3:93:4b:94:0e:4e:ca:2f:34:84:ce:c7:
         58:cc:83:e8:71:ad:17:c2:85:9f:93:48:a9:07:e9:61:cd:fc:
         2a:99:2b:bb:c6:d2:c8:f9:20:70:b1:dc:ae:a1:76:20:1a:70:
         64:77:d9:5d:7d:29:60:e9:19:4b:24:79:db:b8:ff:49:e2:f5:
         b4:33:5f:e8:23:47:73:aa:d8:4a:ff:0c:4f:87:59:ca:eb:da:
         d3:29:9a:f4:87:ac:47:2c:f1:c9:30:08:62:98:36:a8:b0:91:
         83:83:ea:fb:d5:3a:a1:d0:2d:43:a3:dd:d7:5d:c1:4f:e3:cb:
         7b:60:26:e3:5e:d3:37:bb:eb:d5:ae:40:fc:2a:15:98:ce:0b:
         be:1a:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:23 2026 by rpki-client