Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File:                     6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier:          0Zv7PacfwLT+tm3KmOJx+VJZ8dlYCzFwMhd4PbK6MQU=
Subject key identifier:   AE:92:56:5F:8F:CB:1B:A6:1E:36:A0:FC:65:BE:E1:1D:8B:CB:02:7A
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer:       /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial:       019F189F37675C3AF264A978FF77DED7E4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number:          10D9
Signing time:             Tue 30 Jun 2026 13:01:55 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:55 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:55 +0000
Files and hashes:         1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: tqdwDv1PAlxwSv+uZmzKJnEDSLIl47r8ZZmu089XGQY=)
                          2: NCFpucR4-r83kyx2khhJCgLkruU.roa (hash: TaSCKdlQI8N/cQC2z/f6Jx4oLGmqI6E65JRRfPyvaiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9f:37:67:5c:3a:f2:64:a9:78:ff:77:de:d7:e4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
        Validity
            Not Before: Jun 30 13:01:55 2026 GMT
            Not After : Jul  1 13:01:55 2026 GMT
        Subject: CN=ae92565f8fcb1ba61e36a0fc65bee11d8bcb027a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:cf:82:ae:e6:1d:25:76:e1:52:dc:df:bd:
                    9d:bb:0b:0a:8a:e4:bc:b3:00:ee:32:dd:d0:2a:94:
                    f1:39:fd:1a:c3:e6:96:1a:da:4a:cf:2c:c4:a2:bc:
                    c3:81:22:1a:f0:b4:64:e7:0b:2e:40:7e:ed:b8:46:
                    49:2b:05:5d:6d:55:bf:ec:a9:82:68:7c:eb:63:96:
                    3e:c9:09:bf:31:d7:fb:91:1c:ca:93:5b:18:2a:fe:
                    a5:29:a0:a8:ea:95:e1:b7:19:7b:82:c5:fe:e5:80:
                    82:7b:32:9b:19:72:32:af:28:22:4f:00:83:04:7e:
                    31:e9:4d:cf:11:c8:2a:12:90:5e:8b:4e:e3:a2:a4:
                    99:60:a4:e4:cc:98:18:4f:4e:db:95:14:04:34:4d:
                    76:61:36:2f:56:83:91:1f:7f:c7:ee:53:b0:51:50:
                    b6:6a:27:24:45:16:f0:05:39:6e:20:76:76:69:51:
                    0b:3d:89:bd:75:18:d3:ac:af:00:8f:85:4a:dc:39:
                    08:c5:5e:e1:fb:2b:84:4e:c0:39:c5:2b:3b:68:ab:
                    90:b7:3c:54:78:4b:d6:30:cb:8e:09:36:51:77:d4:
                    34:f7:cc:79:cf:e1:f0:55:72:fa:54:27:cb:77:d2:
                    42:a6:5b:36:f8:ec:d5:33:dc:18:42:13:c6:15:27:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:56:5F:8F:CB:1B:A6:1E:36:A0:FC:65:BE:E1:1D:8B:CB:02:7A
            X509v3 Authority Key Identifier:
                keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:36:84:54:9e:e3:22:1a:89:68:27:28:81:78:d5:2b:b6:b5:
         3b:b1:5e:84:34:fb:4a:80:3c:20:70:f2:50:17:cf:62:7b:c5:
         60:f5:19:96:94:4d:a8:7e:df:98:06:38:32:f1:5e:65:a3:12:
         5e:3b:92:0d:3a:e4:cc:18:89:d2:7e:10:dd:86:03:3c:22:4a:
         cb:0b:f7:ce:df:0c:1c:79:a2:5c:be:a3:ac:26:f1:bf:7c:1b:
         11:80:b9:18:9e:99:2a:0b:b2:0d:69:91:e2:ef:13:f9:9b:c2:
         cc:f0:b5:9c:4e:50:a2:fb:44:85:33:1a:3c:23:04:34:c0:59:
         cd:be:52:96:a0:5d:e5:a6:00:6f:13:7c:07:fd:8e:9a:c2:57:
         de:99:78:4e:85:3d:07:ca:83:cc:76:27:83:65:0a:cf:06:f4:
         61:37:64:a1:93:37:e3:d3:32:fa:e0:bb:1e:2b:53:c9:2b:f8:
         b0:34:b9:f2:08:49:04:29:cd:7b:b3:fa:2a:7d:c2:ad:07:8e:
         91:26:48:d8:e3:dc:c0:51:bf:ea:0c:07:ce:9b:9c:a5:c5:8b:
         53:82:a5:60:c2:1c:5a:96:30:83:11:6a:23:d7:f2:83:c5:42:
         37:5b:75:dd:e0:5b:99:ab:e5:06:47:31:0b:6a:59:8e:a0:9f:
         65:22:7f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnzdnXDryZKl4/3fe1+TLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTUwZTU0ZTQ3NjZkNTc2NWQwZjNkMDYxZGYxZDc0ZGE1
NTg5NzMwHhcNMjYwNjMwMTMwMTU1WhcNMjYwNzAxMTMwMTU1WjAzMTEwLwYDVQQD
EyhhZTkyNTY1ZjhmY2IxYmE2MWUzNmEwZmM2NWJlZTExZDhiY2IwMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxibPgq7mHSV24VLc372duwsKiuS8
swDuMt3QKpTxOf0aw+aWGtpKzyzEorzDgSIa8LRk5wsuQH7tuEZJKwVdbVW/7KmC
aHzrY5Y+yQm/Mdf7kRzKk1sYKv6lKaCo6pXhtxl7gsX+5YCCezKbGXIyrygiTwCD
BH4x6U3PEcgqEpBei07joqSZYKTkzJgYT07blRQENE12YTYvVoORH3/H7lOwUVC2
aickRRbwBTluIHZ2aVELPYm9dRjTrK8Aj4VK3DkIxV7h+yuETsA5xSs7aKuQtzxU
eEvWMMuOCTZRd9Q098x5z+HwVXL6VCfLd9JCpls2+OzVM9wYQhPGFScHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6SVl+PyxumHjag/GW+4R2LywJ6MB8GA1UdIwQY
MBaAFOpVDlTkdm1XZdDz0GHfHXTaVYlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt
OWM5ZjIwOTAzMjlhLzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh
LzEvNmxVT1ZPUjJiVmRsMFBQUVlkOGRkTnBWaVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODaEVJ7j
IhqJaCcogXjVK7a1O7FehDT7SoA8IHDyUBfPYnvFYPUZlpRNqH7fmAY4MvFeZaMS
XjuSDTrkzBiJ0n4Q3YYDPCJKywv3zt8MHHmiXL6jrCbxv3wbEYC5GJ6ZKguyDWmR
4u8T+ZvCzPC1nE5QovtEhTMaPCMENMBZzb5SlqBd5aYAbxN8B/2OmsJX3pl4ToU9
B8qDzHYng2UKzwb0YTdkoZM349My+uC7HitTySv4sDS58ghJBCnNe7P6Kn3CrQeO
kSZI2OPcwFG/6gwHzpucpcWLU4KlYMIcWpYwgxFqI9fyg8VCN1t13eBbmavlBkcx
C2pZjqCfZSJ/RQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:36 2026 by rpki-client