Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          RDguKH95C9RHvTVY3DsutnSDsmUK12SWdTY96nECv6E=
Subject key identifier:   95:68:55:18:B5:74:A5:09:B4:92:12:3E:F4:88:33:E1:85:CA:CF:1B
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       019F1943CEB65BD898285AA7FFCC877951A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          106D
Signing time:             Tue 30 Jun 2026 16:01:41 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:41 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:41 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: 7Ggyi+mS7Ftf679NXHCytMcEuS05zIqzf4iXFMxRrNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:ce:b6:5b:d8:98:28:5a:a7:ff:cc:87:79:51:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Jun 30 16:01:41 2026 GMT
            Not After : Jul  1 16:01:41 2026 GMT
        Subject: CN=95685518b574a509b492123ef48833e185cacf1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:ea:bb:49:ba:cc:f0:78:d7:93:2c:2b:f5:
                    21:a4:3f:08:81:44:68:31:11:c1:70:99:a7:0d:65:
                    b4:fd:f7:9e:0e:2c:22:ef:a8:6f:19:da:c5:c0:42:
                    40:e5:b3:85:cd:f1:45:3e:ea:c7:16:f3:39:97:9d:
                    bd:f0:a3:de:bf:30:69:26:d7:b5:b3:88:72:47:44:
                    91:37:da:46:44:f8:8e:ab:52:04:64:6b:38:75:42:
                    4c:18:0e:7f:00:e9:9c:1e:f2:72:35:c1:ea:28:81:
                    6a:6c:9a:01:ef:2f:93:6c:38:33:42:51:79:98:44:
                    5c:39:0c:27:1f:ec:1d:e9:ca:64:6b:1f:14:96:04:
                    16:5e:37:7d:2f:39:cd:48:f4:37:e2:29:db:6d:d0:
                    a9:0a:67:3d:29:fb:86:a6:0b:40:c8:f3:0d:0f:b7:
                    a3:cc:ea:64:74:6e:f6:ed:b4:bc:ab:3f:96:32:e7:
                    90:ac:de:d0:15:22:39:66:f1:0e:56:f6:6b:cd:4b:
                    5c:aa:9e:4b:16:1c:fe:8d:94:60:46:d7:eb:20:f6:
                    35:b2:35:99:f4:d7:b3:54:c7:d6:ce:2f:72:00:b0:
                    f6:a7:30:04:5a:f7:d8:3b:53:8e:2c:30:54:fc:85:
                    6c:39:84:ee:a5:73:1a:55:9e:c9:12:75:2c:1b:e1:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:68:55:18:B5:74:A5:09:B4:92:12:3E:F4:88:33:E1:85:CA:CF:1B
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:17:15:29:2a:66:d0:40:fa:fe:78:97:54:6b:d3:f7:d3:e9:
         15:c9:17:0d:46:58:82:3c:5c:c9:d2:43:36:77:fa:75:20:d6:
         2c:94:7f:32:84:7c:de:1b:b9:02:35:44:7f:5c:21:98:75:6f:
         b6:54:81:97:16:37:09:3d:ad:2b:1a:39:3f:5a:ec:ac:e7:31:
         74:36:2a:f0:57:4b:e0:8b:a0:99:49:a8:8b:6b:7c:d2:97:30:
         0b:39:b2:8e:5b:cb:dd:b0:16:30:c8:28:eb:5e:d3:30:1c:03:
         f0:2b:f9:0e:e9:fc:ab:ed:1c:1c:00:fe:e0:7d:89:df:78:31:
         d2:e6:39:f2:5f:6c:0a:bf:ba:52:fa:66:b0:76:42:d5:64:5e:
         29:c8:62:a2:ca:25:56:8c:35:87:e3:d0:a0:77:21:ab:9f:5f:
         46:4c:83:c8:f1:c4:8e:0b:6a:9a:13:36:b8:5c:ec:1e:0f:b5:
         9a:95:25:ff:1c:10:c1:b0:0c:18:e9:a1:cc:d8:76:25:ee:9f:
         f4:e4:a8:0b:8b:fd:87:6e:ac:0a:7d:24:72:ad:45:39:95:3a:
         8f:5f:5a:8b:69:b4:7d:87:15:29:81:18:c4:3f:89:68:db:38:
         b3:e5:0e:fc:5b:ba:86:ac:56:30:37:8d:47:d7:7e:f3:db:08:
         32:f2:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:18 2026 by rpki-client