Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          HZi0bbM/8kla5y4BGRjeZQkXGM1bRsUi7CSIR8oakTE=
Subject key identifier:   1E:39:66:9F:1B:E4:E2:04:4A:00:5D:EC:62:77:0F:12:94:03:F4:3A
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       019EB87C7631F6563C542676984E95019C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          13BA
Signing time:             Thu 11 Jun 2026 21:00:24 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:24 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:24 +0000
Files and hashes:         1: 0lcAJcxkpyfEG67zvFLpBBWGRlo.roa (hash: D20ksOVfGRUnFokbm6FfRrXfye0JmM7Jy6FfAsNTS7g=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: mUX8WuyWVMSS3tlWVTs7YE1Kn1IKZMYjHhAbgD7Xa+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:76:31:f6:56:3c:54:26:76:98:4e:95:01:9c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: Jun 11 21:00:24 2026 GMT
            Not After : Jun 12 21:00:24 2026 GMT
        Subject: CN=1e39669f1be4e2044a005dec62770f129403f43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:5e:53:f2:22:00:32:85:ca:05:02:99:92:
                    66:76:af:cd:f1:d6:88:cc:8e:d8:4f:8d:90:98:c9:
                    a6:97:b8:14:d2:3b:72:1e:92:1d:0f:48:95:ca:dd:
                    41:f1:00:4c:49:5a:9a:7b:6b:fb:30:0a:b5:2f:2f:
                    9d:60:49:3f:eb:20:8c:bc:9b:42:80:ae:06:7c:c5:
                    9e:09:0b:fc:d3:45:bd:06:81:ff:ac:00:2e:0e:33:
                    12:28:5a:b4:4b:80:35:81:d3:5d:b4:fc:c3:e9:0e:
                    99:39:d9:dd:9a:bf:41:58:b1:4a:28:5a:c0:b5:33:
                    26:ac:e4:b9:fd:26:18:57:6b:3d:2b:64:76:1b:18:
                    86:51:7c:77:af:35:fd:1f:40:60:51:b7:1d:e4:62:
                    72:9d:e7:ea:b5:a4:a6:c7:86:4b:d0:2a:de:8e:42:
                    95:2a:66:e4:94:1f:f8:a0:6c:67:05:6a:c3:a7:4f:
                    d1:63:26:0b:4d:5c:ba:cb:c5:fb:1e:c1:4f:09:4d:
                    b8:95:39:cb:60:1b:90:39:25:f8:39:aa:f1:bf:59:
                    56:f1:62:27:08:5d:ee:02:e9:ac:b9:1c:b9:cb:fe:
                    b3:b6:00:74:e7:82:10:4b:5f:59:66:c2:e8:58:50:
                    11:5e:0e:4e:12:73:a3:8f:07:20:8d:c7:76:cb:14:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:39:66:9F:1B:E4:E2:04:4A:00:5D:EC:62:77:0F:12:94:03:F4:3A
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7d:c5:da:60:3d:6d:d1:51:fd:5e:e6:51:7f:4a:b6:8d:1f:
         c1:27:44:21:61:49:e0:d1:a1:d7:4a:2a:8d:db:8f:8a:6e:7c:
         03:b0:a7:f1:56:0a:ed:ab:53:92:36:37:01:56:9a:c8:e3:e6:
         44:c8:a1:39:a7:0a:60:8f:97:ef:2c:93:4a:74:b1:c5:26:6d:
         af:5a:fe:97:53:2b:cb:99:c0:90:db:29:a0:5d:4c:91:92:6d:
         58:2a:10:ea:a7:7e:7d:11:a4:d0:5d:a8:34:d6:0b:6b:de:a9:
         fb:af:ed:f1:18:32:1b:e1:9e:f4:4d:1a:e1:a5:96:2b:36:4c:
         c3:0b:82:de:50:29:c3:ed:69:6b:3c:8d:4d:8e:47:0a:70:d3:
         22:96:60:8f:1d:c0:f9:aa:a2:15:43:0a:ed:1f:73:ab:0a:e1:
         4e:37:5e:5b:52:bd:0f:fa:30:34:4d:ff:4e:0c:19:aa:36:02:
         51:18:c0:d5:26:c6:fe:e2:d8:63:43:de:49:09:d5:43:ec:16:
         36:e2:e5:28:fa:69:53:9c:f8:20:5d:54:92:5a:29:4f:1a:bd:
         54:69:12:7c:9e:44:9d:21:0b:b2:c4:b6:e0:7d:00:bc:c4:4c:
         7f:54:77:64:05:de:ec:50:00:9f:44:7d:7a:4c:a0:38:54:80:
         80:ed:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:28:58 2026 by rpki-client