Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          7I4oI8FFz0Yqh2yjbGHPp82wdtwtrfepnKsGVA4zuLw=
Subject key identifier:   07:0A:44:F2:C3:8A:51:68:88:A8:8A:5D:3D:AC:A4:E2:2D:00:D5:44
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       019E2F5F69155C260C40791FAE8D0BC26FEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          0A89
Signing time:             Sat 16 May 2026 06:00:42 +0000
Manifest this update:     Sat 16 May 2026 06:00:42 +0000
Manifest next update:     Sun 17 May 2026 06:00:42 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: nXT4oQ/z5lPGAGr2J5OEG6mC+vM+Fem7BJIryjOFMiA=)
                          2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:69:15:5c:26:0c:40:79:1f:ae:8d:0b:c2:6f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: May 16 06:00:42 2026 GMT
            Not After : May 17 06:00:42 2026 GMT
        Subject: CN=070a44f2c38a516888a88a5d3daca4e22d00d544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:35:dc:a2:a3:0e:33:76:e0:bd:41:d1:32:
                    6b:4a:7d:76:87:57:1b:f6:49:bd:f2:ac:d7:c8:49:
                    11:6c:8a:a3:f7:41:77:89:79:f2:12:8a:fd:7c:ac:
                    71:0e:12:e2:07:a1:de:d5:52:3d:f4:08:f5:c4:b1:
                    8f:cd:6f:bb:47:0b:0a:82:52:a2:07:36:d4:de:da:
                    cc:8d:a7:88:62:91:05:b3:35:b0:69:21:27:5d:7e:
                    5f:92:74:55:6a:18:5d:68:54:60:d3:38:0e:00:ae:
                    93:30:54:a1:ab:9f:dd:44:02:08:fd:b5:24:ba:74:
                    1f:20:4c:bd:17:bf:d3:d5:6b:15:2d:7f:f7:06:a4:
                    c5:ab:81:25:fb:fb:8c:e4:07:4e:0d:8f:61:e6:40:
                    7d:9f:f3:2c:de:87:13:8a:f0:e2:be:3c:7a:15:fb:
                    72:7b:90:18:dd:73:5e:13:29:ba:88:9b:7d:5c:0d:
                    ea:2d:92:55:7c:a8:99:b9:02:97:b0:34:1c:1c:99:
                    b9:67:92:d8:3b:21:dc:34:fa:69:fd:42:b6:d4:40:
                    44:fe:e9:41:6c:7d:f7:49:5d:92:90:f8:9b:fa:44:
                    af:3c:f8:d0:62:ef:9e:7a:01:2f:72:fb:e5:4d:2b:
                    95:e0:e0:53:51:12:e6:7e:70:7b:ce:79:ac:4f:47:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:44:F2:C3:8A:51:68:88:A8:8A:5D:3D:AC:A4:E2:2D:00:D5:44
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:3d:95:c1:c1:24:aa:6e:42:6b:42:98:01:7c:cb:fd:dd:3f:
         f3:f3:35:58:04:9b:88:c3:27:98:6c:e2:90:40:29:c3:62:34:
         6e:eb:87:5b:35:59:61:f6:bb:19:7c:14:ac:4d:9a:8b:41:d6:
         09:24:42:91:a4:96:4e:5f:6e:54:4a:02:1e:c0:c6:8e:05:da:
         30:23:e0:38:03:bd:86:8f:d8:ff:51:14:37:59:3e:28:4d:a7:
         5d:db:0d:85:67:48:55:7a:55:99:8d:db:39:a3:31:29:fc:73:
         2a:f9:ed:46:c7:81:ed:21:78:68:39:6e:17:3a:a5:38:35:60:
         d2:de:32:f1:15:e9:86:b9:49:76:6c:ff:16:d4:e2:96:c5:a2:
         28:fd:2b:13:ed:88:83:b0:bf:22:23:25:a1:b3:c1:ad:3f:b8:
         85:b3:2e:bb:1b:fb:2a:66:f6:63:d3:80:ff:a5:3c:f3:fd:ea:
         db:7b:c7:ba:61:d8:42:05:23:84:7c:e3:8e:1f:3c:b1:be:13:
         8b:51:fa:c0:23:8b:15:b4:a6:39:a0:d9:b3:f3:11:11:9a:5f:
         dc:51:52:f3:08:bc:dc:d8:e4:6c:50:22:ef:32:fd:70:78:2f:
         d4:d8:d8:d3:94:83:37:da:c8:ea:f1:4b:fb:e9:07:c9:19:19:
         94:8a:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:54 2026 by rpki-client