Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File:                     C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier:          Usi3HAzxC7yVaHzkwnZl0jsls663VSkT72nuKWc3XF8=
Subject key identifier:   8A:9A:21:BA:16:34:44:3A:C5:8A:49:41:2D:F7:7C:EA:1B:39:B8:6B
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer:       /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial:       019E30E0903274E2029B076C9392629EB2F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number:          0F22
Signing time:             Sat 16 May 2026 13:01:23 +0000
Manifest this update:     Sat 16 May 2026 13:01:23 +0000
Manifest next update:     Sun 17 May 2026 13:01:23 +0000
Files and hashes:         1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: 1KQX/TJpQUmRZfOTJZAyNsGbXkww2yq2iLuTrYTAH04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:90:32:74:e2:02:9b:07:6c:93:92:62:9e:b2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
        Validity
            Not Before: May 16 13:01:23 2026 GMT
            Not After : May 17 13:01:23 2026 GMT
        Subject: CN=8a9a21ba1634443ac58a49412df77cea1b39b86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:c4:ef:93:7e:cf:04:2d:31:46:29:c2:4c:
                    96:c0:0d:98:2a:72:69:20:44:30:84:cf:50:61:96:
                    dc:a7:18:96:82:58:63:bb:3a:08:7b:ac:61:2b:14:
                    62:48:fc:b4:c7:49:18:61:c2:fb:44:6c:f4:63:3a:
                    26:26:14:36:21:d1:79:de:2a:0a:0b:39:5e:48:8c:
                    b9:a5:08:08:9d:03:26:d5:63:83:57:17:13:48:aa:
                    ba:11:1e:94:76:5e:79:0a:af:61:bd:12:fb:23:d3:
                    fc:ad:5c:a9:8c:40:5e:f1:6a:d3:f6:9e:0b:d0:1c:
                    4e:98:46:f9:f9:51:68:70:dc:7b:55:e2:19:51:e2:
                    eb:62:aa:2f:e5:26:1b:54:4e:3b:14:6f:87:ca:44:
                    37:3a:e9:0b:ec:04:1d:dc:76:68:27:44:98:4b:db:
                    23:20:e1:f4:c0:ce:4e:2a:6f:57:54:a3:17:d2:00:
                    60:fd:b4:ce:95:16:30:1d:19:1b:bd:c5:8f:0b:a4:
                    80:88:81:ff:de:2d:42:21:2e:db:50:1b:44:fa:de:
                    9b:b4:62:83:0e:03:b2:52:b6:19:18:37:10:da:46:
                    07:06:79:65:49:25:54:c5:f5:48:bb:d6:4e:8e:c5:
                    34:0c:5e:af:d6:45:74:b9:82:2b:15:ea:08:1d:4b:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:21:BA:16:34:44:3A:C5:8A:49:41:2D:F7:7C:EA:1B:39:B8:6B
            X509v3 Authority Key Identifier:
                keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:57:6c:3b:bc:18:d0:6d:e7:6f:9e:4f:ab:2e:f6:14:6e:
         5e:85:ba:cd:1a:fa:99:a5:15:f5:89:b5:00:41:77:b2:d2:5a:
         ce:43:17:94:68:82:57:94:01:4c:17:f6:c8:0d:aa:87:be:12:
         61:96:8c:3a:9a:c8:e3:de:35:7c:47:42:20:85:2a:69:f3:74:
         4a:c6:9b:52:c4:f5:df:ae:6c:43:57:96:db:61:4b:06:2b:5e:
         e0:56:2d:5d:06:51:7f:83:29:2e:7d:5c:a0:3f:2f:17:e9:0e:
         42:08:69:95:aa:81:c9:11:89:29:2c:3d:41:c4:02:05:c8:08:
         4f:81:32:c3:55:6f:9f:84:a1:0a:43:04:51:f3:64:24:c2:e4:
         7f:06:29:a3:3a:b3:d7:74:01:23:7c:db:2d:d9:bb:91:09:f6:
         e4:2c:56:45:75:14:7b:d1:24:d4:41:38:38:7a:78:15:94:21:
         dd:6d:07:5c:a5:60:16:e2:3a:0d:36:7a:64:6d:1f:c8:72:b3:
         d2:99:d9:5d:3a:b9:92:7c:13:31:d8:be:39:c3:45:d0:30:73:
         e2:ad:0d:7f:1e:b7:2a:3c:41:b2:c4:38:92:87:81:8f:a5:0d:
         f2:d9:a7:5d:f3:b9:84:1c:f4:f2:a9:2f:13:28:0f:f2:6d:74:
         b7:6d:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:46 2026 by rpki-client