Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
File:                     RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json)
Hash identifier:          RpEfE5jkNeyMDgYDk6HJfXcBMeO7kUr/ULSigCO7Hbk=
Subject key identifier:   71:56:7B:9E:2F:30:83:3A:A2:11:4D:D8:42:0F:6F:F1:1E:6D:FF:72
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Certificate issuer:       /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial:       019EB68DF90EBD79A690A95809EB4F38F3D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
Manifest number:          10C6
Signing time:             Thu 11 Jun 2026 12:00:18 +0000
Manifest this update:     Thu 11 Jun 2026 12:00:18 +0000
Manifest next update:     Fri 12 Jun 2026 12:00:18 +0000
Files and hashes:         1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: wyxZt0GfPYSSh9Meu2XqxFFA4dbgTfUKLO3fYk1MEWk=)
                          2: iBZH9xLd0zyACP8OFYzhScTPN60.roa (hash: hb9DBt4b/awETrD9MjB0afdtZlVeiqyp5xxAKLKl4MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:8d:f9:0e:bd:79:a6:90:a9:58:09:eb:4f:38:f3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
        Validity
            Not Before: Jun 11 12:00:18 2026 GMT
            Not After : Jun 12 12:00:18 2026 GMT
        Subject: CN=71567b9e2f30833aa2114dd8420f6ff11e6dff72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:31:e2:70:84:dd:e9:8b:76:ed:ab:c7:ed:
                    24:a1:97:91:49:d5:b7:4f:1c:3d:3a:dd:67:ef:53:
                    2d:8d:c2:f3:cd:72:af:6d:38:a4:2d:7e:90:b5:fa:
                    69:fb:21:43:0e:9f:b7:9b:cb:6c:7d:4e:3f:e7:66:
                    39:20:a6:d8:9a:57:24:66:d8:36:8a:b3:fd:c6:52:
                    01:9f:be:9d:3f:ae:77:f2:59:73:f7:ef:8a:16:f8:
                    e1:3d:e0:21:02:de:86:1e:b0:63:b1:69:f1:ba:ef:
                    71:75:1d:93:95:1a:4f:6e:d4:9f:3a:af:e7:f7:b4:
                    38:b2:de:15:9d:9f:92:81:18:86:23:93:10:5e:cc:
                    c5:c4:c5:b7:15:52:5a:16:43:00:16:97:41:3a:3c:
                    6a:84:5d:5a:05:ac:2d:6c:a8:93:61:0c:be:8d:ee:
                    a4:44:16:5e:8e:c1:24:db:f4:1c:95:34:cb:41:26:
                    f7:f1:60:58:c5:23:7b:1a:71:54:d6:98:e2:6a:16:
                    7a:31:88:15:bf:32:47:ef:9f:3d:e7:e5:e4:98:20:
                    b2:2b:2b:5b:90:01:34:15:8d:a6:93:ff:84:f4:14:
                    84:fd:02:0b:ac:b5:06:99:31:9a:93:cc:c4:6b:14:
                    34:83:93:61:b2:52:66:8f:bc:dd:ea:4e:ae:29:e3:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:56:7B:9E:2F:30:83:3A:A2:11:4D:D8:42:0F:6F:F1:1E:6D:FF:72
            X509v3 Authority Key Identifier:
                keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:c1:38:80:18:18:55:de:32:b8:80:39:b2:6a:a7:a2:50:
         c8:02:7d:80:26:89:8e:09:56:b9:6b:a0:4a:69:52:4c:a7:7f:
         59:b4:ac:3f:8d:93:ab:93:b1:03:4e:c7:7a:e8:b3:b5:2f:40:
         88:50:70:f5:17:35:a1:ae:91:a6:4f:87:9c:0b:4e:48:6d:7c:
         c1:05:ee:00:ab:ea:be:aa:10:50:84:6b:1b:c8:29:61:80:20:
         ef:9f:0e:ee:7c:21:84:54:6e:c2:1d:e6:e7:c6:d8:c8:93:ec:
         31:1a:4c:f9:40:0f:2e:fd:78:5c:fb:4f:a9:e8:2f:5e:39:5b:
         22:d1:5e:dd:a8:95:16:31:3d:e9:70:90:6f:d0:4e:b6:2b:bb:
         5c:a9:a2:1c:2f:93:84:58:bf:b8:5a:29:5a:4f:dd:30:9d:b0:
         53:4e:f7:46:c1:8d:80:28:32:ad:1e:00:9c:13:c1:77:9c:e9:
         e9:3b:99:e8:c5:98:71:34:33:89:7d:9e:23:52:fa:57:ec:9e:
         1a:ce:f8:2e:29:bf:41:f6:51:f2:3f:f2:6b:08:3e:63:e4:7b:
         8f:46:cc:39:b7:d8:5b:27:1a:e5:d9:e7:d7:fb:3c:a2:87:5b:
         4c:f3:94:23:1b:b6:51:1a:4f:db:a1:e2:29:d8:52:e7:0e:24:
         fa:71:62:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:30 2026 by rpki-client