Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File:                     612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier:          QTxB1rPA3OeTUJJEzV2kbce7YAo4HqIWOUio6YvrVkc=
Subject key identifier:   01:AC:4A:CB:EC:53:CD:A0:D2:79:46:EF:5E:F7:E2:75:75:CD:B3:4B
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer:       /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial:       019E303B580111CDAD304FA9984740B5C50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number:          16C2
Signing time:             Sat 16 May 2026 10:00:55 +0000
Manifest this update:     Sat 16 May 2026 10:00:55 +0000
Manifest next update:     Sun 17 May 2026 10:00:55 +0000
Files and hashes:         1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: i4r6BroRdWd6HJNPJoC/CB0dCB6tfchWJ+EZ/yeiGV4=)
                          2: Crjca7fOHa3XODW9UiyUGAIwWc8.roa (hash: WnPbNWjg6gHgCjmDpm8NmXxP+ad/7QuLqIJAknA++jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:58:01:11:cd:ad:30:4f:a9:98:47:40:b5:c5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
        Validity
            Not Before: May 16 10:00:55 2026 GMT
            Not After : May 17 10:00:55 2026 GMT
        Subject: CN=01ac4acbec53cda0d27946ef5ef7e27575cdb34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:ad:f7:cc:38:52:ad:ea:dc:71:75:e0:85:
                    a0:30:f3:e6:c1:37:86:d4:e3:7b:69:69:82:f8:a8:
                    14:f2:af:6c:98:33:56:69:04:a0:45:e3:73:b5:40:
                    39:8a:8a:b0:a4:92:55:96:fd:33:47:a3:51:29:d8:
                    09:3f:91:b3:69:cb:d6:3c:77:1c:13:75:3e:d8:ef:
                    df:c4:52:4a:52:cc:d0:ea:6a:de:31:a3:f9:57:c9:
                    f0:04:f8:8c:5d:5f:88:4b:ba:cb:c6:ba:c5:7a:97:
                    c5:ce:ad:17:a1:cf:7a:0b:df:04:ec:1f:c9:89:35:
                    92:a1:d5:af:6c:ec:57:e9:af:2c:fb:44:ec:7e:01:
                    be:3a:71:bc:8a:0e:01:df:20:aa:59:f0:36:e3:a7:
                    ee:fd:13:57:c2:b4:82:ec:4b:c7:4c:8f:56:5d:24:
                    05:6a:fc:32:ae:b0:4a:e1:aa:53:77:07:3a:3b:3c:
                    40:35:e1:2a:c1:e8:6d:d2:6d:d9:f8:24:6e:88:5b:
                    fd:44:53:e0:7b:45:14:22:ee:a1:5e:85:2e:92:18:
                    eb:1c:41:d9:42:bd:80:14:f2:eb:63:0e:f1:27:ef:
                    70:1c:ec:dd:3f:20:6c:9b:6c:19:4b:3f:de:27:cb:
                    b9:86:d0:2f:06:22:bd:be:5d:9a:3c:78:1c:ed:96:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AC:4A:CB:EC:53:CD:A0:D2:79:46:EF:5E:F7:E2:75:75:CD:B3:4B
            X509v3 Authority Key Identifier:
                keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:08:e8:27:5a:b3:f1:94:e3:44:9a:76:35:bf:a1:d7:39:
         f8:c6:0f:15:e4:62:06:e9:0b:37:96:9d:61:33:01:2c:16:4a:
         f6:ae:2b:73:93:09:77:f2:78:c5:6e:33:28:6a:5f:1d:74:dd:
         16:e0:56:5c:c9:57:2b:f2:e6:4a:99:98:67:4c:20:56:d9:dd:
         ad:06:16:51:d6:8f:9c:5a:ab:26:a7:f7:03:13:e0:a5:95:bc:
         1e:7c:07:aa:bb:11:9d:bd:2b:e1:15:f1:cc:b5:68:57:f9:c1:
         6d:4e:cb:55:93:7f:b3:91:fa:60:50:9b:db:be:64:bd:66:9d:
         5c:2f:2a:0a:0b:7a:96:f6:b3:c9:92:35:2f:f2:8a:51:ea:55:
         72:9c:76:1c:65:a2:43:51:96:e3:5f:03:f3:51:73:96:80:f8:
         8f:c0:92:34:22:0a:fd:44:59:47:61:e2:68:6e:44:a2:65:0f:
         da:82:22:3c:d1:b0:b6:01:83:05:a9:46:13:88:37:09:3c:9a:
         41:97:88:38:2e:f9:ae:41:b7:e0:14:80:ac:1e:a8:b7:f9:b0:
         32:9a:50:c8:48:f4:82:66:90:ec:9b:48:65:04:c4:45:a5:34:
         21:56:65:99:09:cb:05:63:eb:2a:f6:44:8f:3b:9e:da:4f:60:
         ca:73:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:23 2026 by rpki-client