Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
File:                     sTSesOfbZTbKeYKWH_rJsykWXF8.mft (raw, json)
Hash identifier:          qsZTIHcNQHiKLHITlq+xztMjYog7DvcOgmuOHHWL7AA=
Subject key identifier:   B5:8C:71:74:E7:A0:41:F3:F2:1F:E4:09:F8:B6:95:8B:16:9A:24:CB
Authority key identifier: B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F
Certificate issuer:       /CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
Certificate serial:       019EB8455C97C79F7DDFBCBCF487604CCD83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
Manifest number:          060A
Signing time:             Thu 11 Jun 2026 20:00:13 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:13 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:13 +0000
Files and hashes:         1: sTSesOfbZTbKeYKWH_rJsykWXF8.crl (hash: m3JKGVDYaL6DdQ2BsX4VyQBlRL5Y5aAxyPF4wKdye+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:5c:97:c7:9f:7d:df:bc:bc:f4:87:60:4c:cd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1349eb0e7db6536ca7982961ffac9b329165c5f
        Validity
            Not Before: Jun 11 20:00:13 2026 GMT
            Not After : Jun 12 20:00:13 2026 GMT
        Subject: CN=b58c7174e7a041f3f21fe409f8b6958b169a24cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:9b:ee:23:16:8c:99:a6:fe:59:b5:b7:8a:
                    c4:59:08:3d:ff:f6:ae:fe:08:ba:cd:1b:ab:41:20:
                    e2:43:62:be:2c:b3:71:c7:bf:c8:6b:28:11:d6:2b:
                    58:fd:45:84:dd:66:f9:db:ec:24:81:0f:42:52:ea:
                    f3:04:51:d8:46:b6:5b:e8:e7:0f:80:a7:33:2b:7c:
                    d8:f3:3a:b8:3f:62:f3:6a:1d:88:1f:3e:dc:58:61:
                    e5:8d:d8:50:01:f1:86:de:85:b2:61:29:7b:ad:ec:
                    a3:88:6e:47:12:1f:8c:fb:c5:87:f5:e6:0a:5c:e3:
                    2b:cd:7f:6f:cc:8c:22:17:6c:1a:07:27:a8:39:10:
                    9d:a7:6d:a6:24:06:47:73:25:a1:36:94:be:71:de:
                    bb:75:62:70:d0:08:af:78:01:f0:cd:a9:b1:b3:08:
                    35:6c:81:b8:7c:f3:b5:86:ed:8c:65:56:78:4d:38:
                    94:ee:15:ce:b5:f5:a7:fc:11:1a:0b:c5:2f:6e:8f:
                    d5:55:ba:58:fd:3b:4d:a4:99:54:49:ab:bb:3d:e9:
                    c8:f5:ce:84:e5:05:b9:8c:24:bb:ff:d5:be:b9:de:
                    c4:01:c4:d5:fd:ab:72:27:b2:a6:c8:dc:ee:3d:2b:
                    6f:76:cc:20:ef:8a:ff:32:32:bb:0f:d2:e6:c0:74:
                    2b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8C:71:74:E7:A0:41:F3:F2:1F:E4:09:F8:B6:95:8B:16:9A:24:CB
            X509v3 Authority Key Identifier:
                keyid:B1:34:9E:B0:E7:DB:65:36:CA:79:82:96:1F:FA:C9:B3:29:16:5C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTSesOfbZTbKeYKWH_rJsykWXF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b30bf-bcc7-4777-9146-7a30be5cecc0/1/sTSesOfbZTbKeYKWH_rJsykWXF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:61:21:df:8f:55:48:00:56:84:6f:d1:cd:e5:ee:92:b0:79:
         33:ac:98:30:a3:6d:37:3a:2c:2b:66:23:4d:2c:fb:55:4a:2c:
         40:2c:ba:a7:e2:6e:59:07:6a:fe:7e:53:71:9f:d7:8e:b9:4a:
         f1:43:8c:50:b0:9a:50:d1:3c:eb:4c:1e:ce:10:14:81:5b:fb:
         f2:27:da:15:e4:03:4b:b5:ea:a6:49:34:b6:3c:ab:85:ab:f9:
         6d:c1:df:91:bc:ef:53:f4:fb:bf:1a:8f:a9:a8:20:c0:2c:8f:
         5f:28:cd:eb:bf:39:43:8b:df:c3:30:18:48:ff:81:dc:e3:52:
         60:f2:00:bb:ce:80:44:f6:a0:a1:67:95:61:6e:e8:26:1c:16:
         8a:3c:20:a2:b3:a6:4d:5c:bc:4c:12:8d:dd:06:9f:ff:31:34:
         1c:90:2e:26:64:ce:57:21:4b:7a:a6:b3:7a:f8:d1:16:e8:d3:
         1f:51:fd:1e:eb:43:0c:b1:af:6a:ea:19:78:c7:98:ff:60:49:
         79:23:73:4e:71:de:65:b6:5c:af:a6:c8:b3:83:20:f3:16:5a:
         ae:67:7a:03:52:6c:00:52:81:41:68:fa:41:20:b9:ea:33:eb:
         6a:e5:74:e1:a3:31:51:28:39:c6:b0:6c:3f:51:58:b3:34:7c:
         68:d9:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:37:30 2026 by rpki-client