Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          eMfBnEjBTZ55BsZVXvYqNnx+s7d0U3lNEIyQADkxSEc=
Subject key identifier:   21:E1:9B:FC:8E:65:95:E2:C2:A9:B3:09:C0:B5:1F:E0:81:0E:11:0B
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       019EE0D4616494234744C0D627C3323DBF0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          0562
Signing time:             Fri 19 Jun 2026 17:01:15 +0000
Manifest this update:     Fri 19 Jun 2026 17:01:15 +0000
Manifest next update:     Sat 20 Jun 2026 17:01:15 +0000
Files and hashes:         1: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: Hie1uCi5dMBsqYlCTrcS1cBEZy53zXVkcoP34pT8XHs=)
                          2: 8WcyMQ3lOVTIvSKFas5ExgPsbZU.roa (hash: EjdtSKq3M9+llOwbGunPdh03wK0+aZ0al1pXW1HzzXw=)
                          3: EIcG2tRM0hEnCUbXBXwn4F2K_RU.roa (hash: CzCHk+1EoYkn3OF7WD2BogtQF0fxYDolBFo6xDdWuh8=)
                          4: FGXwoit8a4sabQ5C7V91KCVEisg.roa (hash: snmXzF1yCkwjQV6I20Cp2hZS6KrdvqWPo0SPQih8C7o=)
                          5: ICSYGrMnvnf78IG-U4_z8_jIgxk.roa (hash: PcqXGcbd3Xoq/GKGzWlEbDkeYUaghyHnlFBBkfXfCeU=)
                          6: IqXXDZ3GgnjRd1G0jTr1HmAi2zI.roa (hash: MyeVCpdqzkiX8RhyNgrhg2wt8+fZNtCSYjKXeFPq0mo=)
                          7: KVTaTVaCviOMdjZzS4Zc0zBw4OM.roa (hash: rWuvCKTHTIyhv2L4Mlx4/iHLNmlWT5ONGdBrJkW48EA=)
                          8: N-mW-dhJixmBRsVJLgxAcUUVCZM.roa (hash: xo34gBOTOrsODU2dHZU2gvPmq3hn1PA8yVNJipFXj24=)
                          9: REjOlHvNrNp4zfq8Qm8yGcVUclY.roa (hash: tD0v1uK+hPTK/RlV/6ODvMGxpQiAEG6J1TrpjGl/eeg=)
                          10: VhCRfcvEjNM89gcOi0JP5Q7Zclo.roa (hash: w2JGUitloSyikURERlpElaAKN10Q3H4X48EmpiyZxlk=)
                          11: X9PhdYm3cU2xqHBhnAPbju75a5E.roa (hash: t6eqgGoHBtyYMFMOQpDHiu5ZIGINQ/XOCXPww6urBS0=)
                          12: Xo6J7qDRBjGh9sXZaRj6zxrtZ68.roa (hash: TRaNi4k8BIVdihe9w6Pm65mC/UmNvr1WF2+/lczME2c=)
                          13: bsEkMJNGP3K3g14wscFISA3njyM.roa (hash: kRLKn73dkV+pdxVp9DgyjekS8WZqKB+bryeeaRAHsrA=)
                          14: cN4TjAl3meHdzGkGOjGUxxdyto0.roa (hash: KF4CYHM3MslLTwdsfB1zjWIGDa34pn1bkGZHIyfriJk=)
                          15: cZdoFIof6I27GQcjytPY0R3i3js.roa (hash: pRv2+sxETB2uUE4tr3TfMEgzvPUHUWoGW9QMt9CyFD4=)
                          16: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (hash: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8=)
                          17: ghsprZ41WyxRQ-ol28M31qcp1aU.roa (hash: n+mf9kFJAnYVlPra9nWPiJ2coU8wH/ngSaeM1sqZ6a0=)
                          18: j-latFhScd5PKEr2AScvhG1Bz8c.roa (hash: UhswVaY1Iy7gRFrL9BjrtRDuuM3Z2CMtnSrc6eScFQ0=)
                          19: j3qq4MvojOFaV3piUARhww5SfkI.roa (hash: 5ZhQV4dh6a6da+ERWvVWZKdaaZu/HC8oF5bb59nJCtE=)
                          20: n3qL0U5O59kTYO8i_VapSoASKmc.roa (hash: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=)
                          21: neBBgA0odZn9GDyZaXqqlQXbshQ.roa (hash: SS0fdHDxh+zKYI6XDqiq1C8iUD2E0IhJks3vTraThww=)
                          22: p11TeDMm0uMplq6QnnT6a0h_yrw.roa (hash: xmy1s06ovFLtUr1mbZMaGtqrWwFvo5nSDSbPj7EtqcI=)
                          23: qAYx45nxlYDnnw3FPj8rqLwYawc.roa (hash: cnuzs/IA+tUXp6BKmh6rTk0mw2s6mh24Bdz+61FbEwc=)
                          24: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (hash: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0=)
                          25: sgX4F5K8Qccr6OFohW4hHuLF2Vg.roa (hash: rghc6qyYVspOa4pYawS4O5flLqi7PmZ7bsphW/d5guw=)
                          26: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (hash: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q=)
                          27: wMA9EYd6XnQNkBbE9YqLguhIGv8.roa (hash: 9lZpPveHeBWq4KzHowRRHzV6Laqxgjf+4n1ipLFAM/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 17:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e0:d4:61:64:94:23:47:44:c0:d6:27:c3:32:3d:bf:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Jun 19 17:01:15 2026 GMT
            Not After : Jun 20 17:01:15 2026 GMT
        Subject: CN=21e19bfc8e6595e2c2a9b309c0b51fe0810e110b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:a4:99:04:77:cd:c8:f6:cf:38:5e:67:2d:
                    10:81:7f:f8:4b:32:e9:ca:66:bc:ea:74:1b:2f:e0:
                    1d:15:6a:d3:d2:97:98:83:3d:8f:72:b9:1c:c4:23:
                    54:8d:08:90:ce:83:53:ea:95:c8:41:10:ee:b9:fc:
                    c9:d6:a3:26:62:21:dc:0c:7f:3e:dd:c9:94:e9:0f:
                    1d:f8:01:de:ef:4f:5f:94:11:19:82:55:6e:c9:55:
                    c9:84:d4:fb:bf:69:3c:23:4f:02:a1:df:b0:83:76:
                    fc:dd:b1:fb:19:29:95:b6:f2:20:dc:a7:a4:19:a5:
                    8f:25:1f:8f:a6:78:9d:0b:5d:70:92:a5:8e:e3:72:
                    d3:5f:b1:0c:7e:58:f0:a9:f6:c4:b9:1b:ea:0e:2c:
                    88:40:da:0a:4d:b6:a2:05:f4:6d:c8:de:5d:32:24:
                    dd:f4:db:ae:90:e4:11:c5:0e:7c:82:de:e6:c5:bf:
                    d2:f5:b4:ec:37:85:e9:e8:a6:bc:59:0c:6e:6c:7b:
                    f3:0a:5e:5a:de:14:42:e2:62:0e:47:22:86:e8:3a:
                    d6:4e:40:40:6e:04:3a:5b:a2:c9:de:17:1b:60:51:
                    a2:ce:e0:be:4a:8b:a9:59:e9:78:17:d3:59:47:86:
                    e0:af:28:cd:42:b7:a0:6a:59:0c:6d:61:d6:bb:0b:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E1:9B:FC:8E:65:95:E2:C2:A9:B3:09:C0:B5:1F:E0:81:0E:11:0B
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:54:b5:15:2e:24:da:12:46:af:0c:2e:36:0c:15:f8:66:39:
         94:d7:ee:df:9d:29:a8:fc:3f:79:2d:68:ae:a1:38:a4:32:95:
         c1:c4:2b:c7:b0:67:7e:76:bf:d0:1a:37:35:77:38:f3:67:2b:
         18:1c:3e:14:a5:27:b3:ec:a8:83:9c:62:67:7b:21:79:17:b0:
         aa:a6:c7:41:eb:81:f2:db:17:75:8c:b5:db:a4:e9:28:61:25:
         dc:fd:b6:e6:bf:12:71:06:85:c0:8b:43:43:e4:d6:bb:c1:ee:
         f7:d5:e0:42:3d:f7:92:73:ef:ae:32:d6:e8:14:94:07:79:9d:
         15:93:c3:63:a9:f4:4f:9c:0c:7d:90:0e:fe:b7:1f:e0:c7:4a:
         4e:bc:4a:09:b1:4a:3b:e4:87:c3:3e:d6:c3:11:c7:c6:90:16:
         47:72:25:2f:c0:a3:0f:5f:49:75:35:78:67:10:7a:f2:96:db:
         39:46:61:ee:7d:85:82:ea:12:a9:fe:48:c7:01:75:4b:cb:eb:
         5b:32:45:ee:ec:d9:02:73:c8:ed:b9:6a:54:04:72:d9:79:5e:
         5d:89:9d:b2:0c:36:67:1b:8b:a9:a0:35:48:0f:c7:8d:a8:43:
         f7:96:0d:28:8f:99:e3:3a:93:6d:a8:01:59:f0:00:85:0f:a3:
         31:3a:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:28 2026 by rpki-client