Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File:                     rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier:          tvLVxeuNIYK4zekJRftF+eBFHBlnyvZKjX5ekqTpE5E=
Subject key identifier:   B6:92:8F:9E:A7:0F:96:E3:93:D7:D9:5E:39:B4:F5:41:3F:DD:4E:D6
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer:       /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial:       019EB98FB32195472BF034FB4D1C2960C0D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number:          086C
Signing time:             Fri 12 Jun 2026 02:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:02 +0000
Files and hashes:         1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: tEbPgyzifEnz9tPDeXRu6EWn+ZVtGoM/fNBmLNNpJvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:b3:21:95:47:2b:f0:34:fb:4d:1c:29:60:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
        Validity
            Not Before: Jun 12 02:01:02 2026 GMT
            Not After : Jun 13 02:01:02 2026 GMT
        Subject: CN=b6928f9ea70f96e393d7d95e39b4f5413fdd4ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:a7:3f:0e:a3:c3:10:26:14:27:f7:2f:0e:
                    4d:a7:73:c7:77:12:2f:3d:1c:82:ac:cc:6f:1b:ac:
                    1e:f8:60:c2:6c:b7:f3:5c:82:0e:04:69:a0:d5:50:
                    b7:f0:8e:ce:c6:51:71:6f:7a:cd:38:79:43:ed:ec:
                    54:6a:3d:79:88:79:62:48:5e:ff:e4:05:ea:d1:5e:
                    24:4a:be:63:4e:57:c1:b9:ad:b9:04:e1:6f:53:33:
                    f7:23:78:b6:ac:a8:3e:57:fc:60:69:fc:53:17:66:
                    c7:53:de:ba:55:37:68:85:b7:62:19:6f:a6:c3:a8:
                    0a:e6:be:47:d7:3a:16:df:c5:74:61:f6:53:12:2d:
                    c0:2f:79:13:2e:7f:e7:a2:61:80:86:8d:c8:f8:15:
                    be:57:96:6a:47:5e:16:7f:a4:4e:0f:1c:b3:b6:7a:
                    a3:8c:0c:cd:27:92:5a:dc:32:44:0a:54:4c:2a:8f:
                    78:cb:73:9b:89:72:44:25:bb:5c:2e:86:d8:f0:e0:
                    14:56:67:26:24:25:08:c4:43:d9:77:f2:39:b5:22:
                    10:9a:96:dd:1d:f3:0e:4f:2c:4e:62:09:c0:ea:e3:
                    d7:36:17:2d:6b:3b:be:d5:3d:41:e1:8b:aa:45:dc:
                    7e:65:f6:12:26:19:fd:0c:55:b0:1f:f8:c4:85:7a:
                    ad:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:8F:9E:A7:0F:96:E3:93:D7:D9:5E:39:B4:F5:41:3F:DD:4E:D6
            X509v3 Authority Key Identifier:
                keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:2f:07:9c:34:90:0d:e0:0d:81:a7:0d:f9:64:5b:9c:a1:
         43:e5:2a:17:4e:17:57:a8:c2:25:77:46:86:99:7a:23:d5:d2:
         8e:57:88:5e:64:fb:41:63:63:ea:ca:35:93:9c:ef:f0:db:6c:
         e3:01:f4:ce:63:8f:1a:64:b6:e2:83:ca:7d:d2:04:fe:aa:c0:
         6b:c2:4b:72:e6:6e:d6:e0:06:a8:68:b2:21:22:2e:22:41:66:
         92:99:38:cc:0c:3f:71:a8:c8:90:28:8d:58:f7:ff:87:49:88:
         ad:3e:18:f7:0d:3d:c0:e5:e9:e1:43:08:23:5c:9f:eb:3f:1e:
         d3:7f:cd:0e:89:e1:c3:7e:11:8e:fd:5e:e1:d3:f3:b3:cf:48:
         20:01:ff:ae:13:68:16:c9:59:d4:a5:e5:7c:a2:e4:25:25:66:
         11:06:9c:bd:7e:71:ba:1a:a5:bf:ac:09:bb:a1:df:c3:33:4b:
         5c:65:76:d7:e3:e4:da:9b:fe:b2:05:71:50:8f:8e:8f:37:a6:
         94:17:56:f1:53:aa:05:87:3a:b0:0d:0a:88:5b:9f:e2:2a:80:
         15:a0:54:5e:6d:53:40:59:23:8c:6f:9c:4f:31:9e:86:b3:82:
         a8:1f:27:07:79:5f:b4:79:16:6b:7d:85:af:0e:a5:7e:61:64:
         64:91:90:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:04:20 2026 by rpki-client