Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          vq+bQHolID0n7PrvDgx5l+mVqWaw8OSGy8oPx46Kl0Y=
Subject key identifier:   8B:FC:81:CB:8F:EF:BD:7F:0C:CD:7B:AD:97:E4:BD:83:00:4E:A5:4F
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       019E3072540A640C9A09621B3D1F459E1BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 11:00:59 +0000
Manifest this update:     Sat 16 May 2026 11:00:59 +0000
Manifest next update:     Sun 17 May 2026 11:00:59 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: +B+UP2mK2uvFI+JnQ/gI7dAqTGp/pMAKUc5dQYahT7E=)
                          2: HICvEHKXiwO8tUnXw2THhezIHTg.roa (hash: m259oPsH+iF/F010gAj+3VHPjH7EbopMEIXrwuwaC7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:54:0a:64:0c:9a:09:62:1b:3d:1f:45:9e:1b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: May 16 11:00:59 2026 GMT
            Not After : May 17 11:00:59 2026 GMT
        Subject: CN=8bfc81cb8fefbd7f0ccd7bad97e4bd83004ea54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:0c:c4:5e:72:2a:b2:cf:7d:4e:f2:15:aa:
                    cb:b0:84:db:36:43:b9:69:f4:1e:58:b8:64:b7:78:
                    1d:1e:1a:53:2d:7a:07:a2:78:89:b4:ab:af:07:4c:
                    5e:a4:55:e9:9c:a2:5f:12:8b:bb:94:a0:dd:7f:73:
                    9c:2d:54:03:54:16:e9:fe:68:00:29:c3:3b:2e:02:
                    06:30:14:8f:3c:bb:60:6c:27:bc:5a:15:06:90:05:
                    a6:89:a1:b6:50:fb:7c:b6:e1:e6:ce:a3:5c:b3:1a:
                    ed:e1:e9:da:13:ce:2f:89:17:93:2d:61:08:56:43:
                    5e:42:26:b1:e7:5a:10:2c:b6:a3:4a:2c:cf:24:c7:
                    62:10:cc:fc:9d:7c:24:06:62:5b:6a:73:e6:06:64:
                    68:08:d1:87:ad:7e:ed:fc:4f:59:e4:eb:14:f5:c9:
                    7b:3d:72:95:b1:44:a6:26:9d:bd:cf:e6:c0:f9:59:
                    38:ed:44:99:02:0c:ba:fe:a9:cd:32:95:a0:f4:09:
                    65:10:74:4e:b6:84:b9:03:a2:8c:aa:f2:6a:44:75:
                    46:de:fd:78:47:ca:88:96:e4:bc:88:d2:ca:4b:24:
                    4f:e5:81:62:c9:6b:6f:1f:b2:d0:a4:4d:e9:9d:42:
                    ff:0c:67:86:56:0f:fa:e5:a4:dc:99:9d:8a:47:9d:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:81:CB:8F:EF:BD:7F:0C:CD:7B:AD:97:E4:BD:83:00:4E:A5:4F
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:62:e2:6f:1c:c1:30:5f:4a:75:fa:d8:ec:dc:50:87:7e:
         f9:53:0c:84:c9:3a:c4:65:09:55:c3:a0:e9:dc:42:fd:fe:e9:
         33:7c:30:0c:5a:29:c4:b2:8c:92:71:ab:fa:fa:e0:d5:aa:cb:
         d0:8a:88:b2:69:69:d4:5f:3d:f1:a9:7b:10:83:f7:5e:56:7b:
         cb:ff:ec:82:e4:d0:e3:0c:d9:68:09:c9:b4:00:7e:2e:eb:b5:
         55:16:c0:b9:cf:6c:a4:5e:06:95:bf:a8:76:10:30:ad:ca:2e:
         7d:d7:09:b4:82:a5:48:3d:b4:f3:63:92:e7:73:de:f7:7b:94:
         ad:72:5e:68:40:0d:da:ec:8f:59:66:4c:5d:b6:10:52:29:fb:
         9e:dd:7c:e6:18:d9:3f:6c:4b:3e:2e:ad:25:6c:8e:44:71:5c:
         b3:72:cc:59:82:0a:16:16:63:f2:bb:ca:45:ae:94:40:16:3f:
         78:f0:8c:4a:0a:ae:67:08:dc:bf:98:de:84:3f:c3:58:8b:58:
         3c:0a:05:7c:ca:9b:bb:e9:56:31:9a:b1:02:55:42:da:91:38:
         fd:ee:6d:24:ae:91:97:52:37:5d:bf:0d:6d:4a:42:01:ea:c9:
         68:3b:44:42:f2:40:ba:74:24:6c:4a:49:9d:18:3f:7f:b9:93:
         5b:16:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:22 2026 by rpki-client