Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
File:                     6UqatkKm6a9PttCsgnGFTevQcHY.mft (raw, json)
Hash identifier:          eefDUH8aQova7FBYaN1ADdsy93U4EbMztypQnjEDvOU=
Subject key identifier:   B3:5F:0F:61:08:2D:B8:BA:F9:DF:A8:03:D0:40:3F:C6:33:7C:E1:9F
Authority key identifier: E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76
Certificate issuer:       /CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
Certificate serial:       019F189EFE0FC591C8B20B55F7BE9A1418CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
Manifest number:          101B
Signing time:             Tue 30 Jun 2026 13:01:40 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:40 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:40 +0000
Files and hashes:         1: 6UqatkKm6a9PttCsgnGFTevQcHY.crl (hash: GDxvkxmRpLbAiyPOfv2Q2pCU0MxD2xKwKGYkLsQEwm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:fe:0f:c5:91:c8:b2:0b:55:f7:be:9a:14:18:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94a9ab642a6e9af4fb6d0ac8271854debd07076
        Validity
            Not Before: Jun 30 13:01:40 2026 GMT
            Not After : Jul  1 13:01:40 2026 GMT
        Subject: CN=b35f0f61082db8baf9dfa803d0403fc6337ce19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:26:87:84:d0:9e:e8:19:5f:de:d7:f2:35:52:
                    82:30:9f:b5:41:c0:0e:bc:2a:b1:cc:03:71:d1:14:
                    84:d3:cd:1c:09:c8:00:54:1e:fd:d8:d5:ba:7f:6f:
                    44:6d:52:47:f9:a4:90:b8:9c:0d:8e:b9:66:ad:62:
                    c9:89:2c:00:d0:43:43:ef:dc:24:a7:13:04:c0:c3:
                    61:dd:86:57:0a:9e:dd:61:43:32:db:22:49:f5:40:
                    2f:ad:56:e6:78:c5:7a:63:58:59:87:14:60:ec:1e:
                    d8:75:b3:3a:23:4d:8a:e2:af:13:16:aa:93:2f:aa:
                    9e:6c:e1:41:6b:97:19:24:99:d9:d6:12:cf:2d:2f:
                    65:e7:19:bc:92:40:fc:2f:b1:51:f8:cc:62:7d:78:
                    d2:40:08:65:ea:e7:f3:57:4f:96:84:ba:9e:ad:5d:
                    53:fe:4b:94:49:d9:96:f1:07:9a:6d:1b:78:22:54:
                    91:9c:5b:71:aa:03:23:3c:5a:d9:5f:d6:62:26:54:
                    81:14:c8:3b:2c:38:00:ce:5d:23:9b:dd:63:5a:e5:
                    d0:96:f9:14:4e:cd:39:75:b0:aa:7f:ba:92:11:11:
                    72:c1:37:82:0b:cd:1b:58:e8:ae:9c:66:fc:fc:68:
                    48:e9:d6:7f:6c:6d:86:4e:4b:85:40:09:52:67:4d:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:0F:61:08:2D:B8:BA:F9:DF:A8:03:D0:40:3F:C6:33:7C:E1:9F
            X509v3 Authority Key Identifier:
                keyid:E9:4A:9A:B6:42:A6:E9:AF:4F:B6:D0:AC:82:71:85:4D:EB:D0:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UqatkKm6a9PttCsgnGFTevQcHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5433a9-bca3-45ac-b69d-2b39847643b7/1/6UqatkKm6a9PttCsgnGFTevQcHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:a3:6c:fc:8a:40:e2:1a:51:de:68:00:df:3a:40:80:99:
         08:4b:fd:d2:ae:a4:c4:7a:2a:7a:66:3d:14:07:85:a5:44:5f:
         d5:4c:73:f9:d0:0e:24:05:0b:a9:93:32:a7:e3:9a:93:8d:2e:
         6e:fd:b5:ee:65:3e:0b:a0:11:45:28:b3:2b:49:b4:95:a0:de:
         52:a9:30:08:ab:66:56:d4:ed:9f:64:8f:7d:9b:33:00:70:44:
         bb:04:e4:a1:47:ce:1b:7a:04:e0:99:72:c0:ae:78:ea:11:a2:
         74:b9:e6:a9:d9:09:f0:99:52:58:f6:23:a4:27:2e:23:82:38:
         31:95:a9:a9:14:27:a0:20:4f:e9:40:66:7a:5a:ec:b8:a7:ad:
         56:bb:9a:8e:2f:4e:0c:3b:5a:3e:2a:f5:3d:65:07:26:ce:f7:
         29:6d:ac:89:d6:76:e5:73:35:9c:82:3b:63:f7:3a:a3:d3:a0:
         64:59:d5:ce:72:85:d5:d8:b9:14:9e:5a:a8:16:50:e7:2f:19:
         68:bb:5e:08:be:23:0b:62:ec:58:ee:cd:8c:52:03:c8:29:e7:
         c0:96:b9:ca:a2:43:ac:18:08:88:e7:1e:85:3d:47:da:7c:0c:
         2a:6c:45:be:82:5b:ac:46:6d:c0:13:c7:1b:90:8f:c1:21:43:
         5c:42:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:58 2026 by rpki-client