Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File:                     6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier:          OsdKRI127xuTzSkIHWv1rRWgNeDcxWiOPlaC/jgVHHE=
Subject key identifier:   8A:99:AE:EE:28:38:29:F0:C0:29:CD:8A:A2:41:D1:B6:A4:D3:F7:19
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer:       /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial:       019E31174E5F37E53A7FF76112F4E821D3AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number:          0F82
Signing time:             Sat 16 May 2026 14:01:11 +0000
Manifest this update:     Sat 16 May 2026 14:01:11 +0000
Manifest next update:     Sun 17 May 2026 14:01:11 +0000
Files and hashes:         1: 2mB-NqQhQaEIu7D3l1xNbmz8ydQ.roa (hash: 6eVwGi3CeHQX5H/cbCCHg94we//hX46hLSe/Q7qSglM=)
                          2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: GbncrKybsLw+tmWp7XeTtfA2kzS88uX44nPTWRPl68M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:4e:5f:37:e5:3a:7f:f7:61:12:f4:e8:21:d3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
        Validity
            Not Before: May 16 14:01:11 2026 GMT
            Not After : May 17 14:01:11 2026 GMT
        Subject: CN=8a99aeee283829f0c029cd8aa241d1b6a4d3f719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:3b:ee:37:8c:13:a1:60:f2:eb:14:70:a3:
                    15:a4:df:53:61:08:cc:4d:69:68:cf:8d:4b:2c:54:
                    c9:c7:ea:f6:a2:8c:41:99:d6:f5:a8:55:7a:ce:23:
                    c9:00:e5:49:83:9d:ec:ba:d2:b5:48:73:8d:69:3f:
                    ee:f3:bb:df:c9:d8:ad:f3:0f:cb:d6:6c:22:64:b0:
                    ba:74:d6:5e:cf:5b:77:fd:ec:4d:c9:cc:1c:8b:d6:
                    4b:05:61:b1:39:53:ca:74:4a:74:f6:e2:56:3c:68:
                    be:6a:c0:15:34:f1:d5:a8:42:e3:cd:59:20:eb:25:
                    5f:6b:67:60:12:e0:d1:23:e9:f4:75:7c:db:01:53:
                    58:b3:98:42:e0:d0:39:03:8e:d7:c2:e3:1f:a8:e7:
                    48:86:ed:d7:2f:db:1f:7d:67:37:6b:5a:72:b3:a2:
                    64:ee:26:b5:b5:37:96:d4:04:0c:79:66:65:93:ce:
                    ed:b1:32:32:13:0f:42:d9:b3:a7:67:2f:8f:29:0d:
                    af:82:e1:8c:12:30:e4:c2:7a:f5:17:83:9f:03:11:
                    7d:02:b2:04:25:3e:a0:3a:77:db:e7:3f:94:36:2a:
                    88:a0:c1:23:54:ff:d8:0e:53:29:b7:0c:72:42:5c:
                    fc:4c:40:c2:d6:e3:a8:6e:2d:11:f0:96:24:6d:1c:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:99:AE:EE:28:38:29:F0:C0:29:CD:8A:A2:41:D1:B6:A4:D3:F7:19
            X509v3 Authority Key Identifier:
                keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:48:67:e8:a5:93:57:e6:d9:bb:c0:87:2e:b4:87:fb:c4:80:
         d1:3b:40:b0:10:b6:b9:1b:a1:0b:48:e8:1e:11:ba:e9:e6:4e:
         2d:c7:94:57:71:ae:97:f4:78:ac:1e:7c:3f:e4:29:2c:6d:36:
         40:84:5d:9f:8a:17:23:72:fe:b6:22:d2:ce:cb:04:31:a3:6a:
         94:91:c3:bb:13:c3:e0:7d:4c:94:3e:b4:4a:9d:f9:62:c6:e6:
         a4:b0:f6:90:51:55:cb:e5:e3:76:11:68:31:64:76:d9:1b:a4:
         53:70:38:2e:7b:5e:70:1d:13:87:01:06:ae:12:58:f9:e4:3e:
         34:f2:04:cd:94:d3:89:7d:8e:65:6f:12:c7:1c:26:28:48:2e:
         98:b3:d2:95:cd:29:df:da:ab:0b:1c:23:aa:c4:13:94:94:eb:
         04:4e:f4:11:8c:b6:6d:e4:e4:45:18:23:dc:1a:d0:70:33:31:
         23:ae:41:35:cf:2f:67:79:dd:cb:ad:b3:bf:ec:72:a1:d8:d3:
         b9:6a:ef:0c:f2:b3:8b:9d:5e:94:a2:ac:84:05:61:dd:fb:74:
         73:bd:32:a6:4b:92:1c:55:aa:28:e9:8b:4e:e1:ab:71:13:09:
         b0:26:d3:74:ff:5a:cd:06:48:9d:80:b4:7b:b3:16:d3:21:14:
         a8:2b:d1:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF05fN+U6f/dhEvToIdOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YzNkNDJmM2IyOTIxYmE3NDE4ZjM4MjAzMmQ2YjM1Yzcx
NTliODgwHhcNMjYwNTE2MTQwMTExWhcNMjYwNTE3MTQwMTExWjAzMTEwLwYDVQQD
Eyg4YTk5YWVlZTI4MzgyOWYwYzAyOWNkOGFhMjQxZDFiNmE0ZDNmNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukw77jeME6Fg8usUcKMVpN9TYQjM
TWloz41LLFTJx+r2ooxBmdb1qFV6ziPJAOVJg53sutK1SHONaT/u87vfydit8w/L
1mwiZLC6dNZez1t3/exNycwci9ZLBWGxOVPKdEp09uJWPGi+asAVNPHVqELjzVkg
6yVfa2dgEuDRI+n0dXzbAVNYs5hC4NA5A47XwuMfqOdIhu3XL9sffWc3a1pys6Jk
7ia1tTeW1AQMeWZlk87tsTIyEw9C2bOnZy+PKQ2vguGMEjDkwnr1F4OfAxF9ArIE
JT6gOnfb5z+UNiqIoMEjVP/YDlMptwxyQlz8TEDC1uOobi0R8JYkbRw6OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqZru4oOCnwwCnNiqJB0bak0/cZMB8GA1UdIwQY
MBaAFOnD1C87KSG6dBjzggMtazXHFZuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDIt
MWExZWFkMmNkMmIxLzEvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDItMWExZWFkMmNkMmIx
LzEvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEhn6KWT
V+bZu8CHLrSH+8SA0TtAsBC2uRuhC0joHhG66eZOLceUV3Gul/R4rB58P+QpLG02
QIRdn4oXI3L+tiLSzssEMaNqlJHDuxPD4H1MlD60Sp35YsbmpLD2kFFVy+XjdhFo
MWR22RukU3A4LntecB0ThwEGrhJY+eQ+NPIEzZTTiX2OZW8SxxwmKEgumLPSlc0p
39qrCxwjqsQTlJTrBE70EYy2beTkRRgj3BrQcDMxI65BNc8vZ3ndy62zv+xyodjT
uWrvDPKzi51elKKshAVh3ft0c70ypkuSHFWqKOmLTuGrcRMJsCbTdP9azQZInYC0
e7MW0yEUqCvR3g==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:11 2026 by rpki-client