Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.mft
File:                     6tIfe1t4q-jb54K7dQ_68NbKbq8.mft (raw, json)
Hash identifier:          Wt8ocrEpc7NJ8ZzG6Wf1ftO1s4zMKKZ9up9gSKNA0ZY=
Subject key identifier:   37:90:92:18:DE:27:1B:4C:78:A3:E4:8A:3B:AC:06:B5:14:8D:78:0F
Authority key identifier: EA:D2:1F:7B:5B:78:AB:E8:DB:E7:82:BB:75:0F:FA:F0:D6:CA:6E:AF
Certificate issuer:       /CN=ead21f7b5b78abe8dbe782bb750ffaf0d6ca6eaf
Certificate serial:       019F0BF5B7FC13A6959FFBD825C87121F9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIfe1t4q-jb54K7dQ_68NbKbq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.mft
Manifest number:          04
Signing time:             Sun 28 Jun 2026 02:01:20 +0000
Manifest this update:     Sun 28 Jun 2026 02:01:20 +0000
Manifest next update:     Mon 29 Jun 2026 02:01:20 +0000
Files and hashes:         1: 6tIfe1t4q-jb54K7dQ_68NbKbq8.crl (hash: JxfwqS99VnZDCSwt0RNxjkJYcm5tspkkj57osUtTRr0=)
                          2: LBBCj9eAj0hB_5xRYplilCxcHYY.asa (hash: y8LwQ/UWNPdNPNCfTbSgNO4/xdvkyncyP+YFWUryREs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIfe1t4q-jb54K7dQ_68NbKbq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 18:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0b:f5:b7:fc:13:a6:95:9f:fb:d8:25:c8:71:21:f9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead21f7b5b78abe8dbe782bb750ffaf0d6ca6eaf
        Validity
            Not Before: Jun 28 02:01:20 2026 GMT
            Not After : Jun 29 02:01:20 2026 GMT
        Subject: CN=37909218de271b4c78a3e48a3bac06b5148d780f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:af:0e:f3:02:c3:12:c3:fb:16:d3:bd:83:
                    3a:ed:88:90:ed:76:04:4d:04:ae:0a:45:98:85:53:
                    4d:96:f0:9c:c5:1e:bb:45:ac:28:1a:e1:71:ab:86:
                    f6:15:6d:10:78:d7:aa:bf:e4:0f:d8:61:9c:c7:50:
                    b2:b0:59:4e:be:d1:c0:49:bc:4d:b1:16:bd:4c:6c:
                    07:1e:70:52:24:b4:10:6a:a1:d9:7e:4e:ad:6b:56:
                    cb:76:56:4b:e3:3e:21:ee:f5:bf:16:5f:1e:e3:ee:
                    76:bf:5c:e6:40:71:92:96:41:94:cd:fe:eb:3d:1f:
                    e9:19:d4:c5:25:16:2f:ac:f5:ba:1f:bd:a5:b4:ed:
                    0f:f2:76:48:3d:34:2f:60:c8:85:91:9a:fd:30:52:
                    64:ca:f3:7a:6c:32:e8:82:30:6a:6a:fb:53:2d:e0:
                    c0:a5:06:61:05:9e:cc:21:ba:c6:0c:d9:9e:17:51:
                    78:62:15:38:74:7c:61:0a:4a:b1:76:38:cd:0e:1e:
                    07:80:a7:1a:03:53:bc:48:72:ae:c7:52:fb:a2:c9:
                    02:4b:ae:11:be:d4:0c:0e:bc:bd:d9:f5:05:05:34:
                    b4:10:c4:4b:0a:9f:c8:ea:80:d0:8b:90:2b:2e:7e:
                    22:d8:0e:bf:4a:ab:d7:8e:14:a8:55:b9:eb:7a:99:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:92:18:DE:27:1B:4C:78:A3:E4:8A:3B:AC:06:B5:14:8D:78:0F
            X509v3 Authority Key Identifier:
                keyid:EA:D2:1F:7B:5B:78:AB:E8:DB:E7:82:BB:75:0F:FA:F0:D6:CA:6E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIfe1t4q-jb54K7dQ_68NbKbq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:25:7b:41:6a:f1:9a:2c:d7:c5:b8:98:bd:fe:6b:34:fa:b8:
         9e:27:79:0d:a7:f2:11:57:8b:f5:5e:9a:de:7a:2b:59:d7:d0:
         21:ee:68:5b:fb:9f:60:5b:eb:2c:8e:35:d8:be:cb:45:13:d9:
         22:e0:21:e6:60:26:7e:54:ee:ae:96:f6:48:f0:5b:00:d8:f1:
         82:7c:3b:31:06:77:2d:c6:48:6b:a7:b9:78:17:6f:a3:8f:25:
         92:2f:47:da:b6:58:9b:b7:a1:da:c0:d6:67:04:6d:75:66:6a:
         9d:48:6c:f2:bf:d0:c8:4c:d4:9a:fb:d1:ce:e2:df:1c:64:fc:
         09:25:22:81:59:6a:e3:a3:e7:7d:b0:82:16:db:97:45:23:e7:
         74:bb:7a:ca:7b:ab:86:d5:f6:d2:a8:12:39:dd:63:d7:87:f8:
         6e:8a:39:78:af:ae:d1:91:46:ea:13:ae:5c:af:be:a0:09:72:
         6c:fd:40:b8:d6:70:a8:bf:11:12:26:e1:05:6c:00:8e:a6:87:
         5c:5a:55:a4:59:60:fe:ed:7e:f3:fa:18:a4:bd:6a:8c:ab:80:
         f5:2d:13:0d:28:31:04:be:b5:10:3d:82:32:26:5d:46:b2:b2:
         c8:af:fd:04:d3:37:61:83:c9:b3:22:bd:b0:b1:6d:cf:f0:ab:
         cf:a9:66:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8L9bf8E6aVn/vYJchxIfn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZDIxZjdiNWI3OGFiZThkYmU3ODJiYjc1MGZmYWYwZDZj
YTZlYWYwHhcNMjYwNjI4MDIwMTIwWhcNMjYwNjI5MDIwMTIwWjAzMTEwLwYDVQQD
EygzNzkwOTIxOGRlMjcxYjRjNzhhM2U0OGEzYmFjMDZiNTE0OGQ3ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4qvDvMCwxLD+xbTvYM67YiQ7XYE
TQSuCkWYhVNNlvCcxR67RawoGuFxq4b2FW0QeNeqv+QP2GGcx1CysFlOvtHASbxN
sRa9TGwHHnBSJLQQaqHZfk6ta1bLdlZL4z4h7vW/Fl8e4+52v1zmQHGSlkGUzf7r
PR/pGdTFJRYvrPW6H72ltO0P8nZIPTQvYMiFkZr9MFJkyvN6bDLogjBqavtTLeDA
pQZhBZ7MIbrGDNmeF1F4YhU4dHxhCkqxdjjNDh4HgKcaA1O8SHKux1L7oskCS64R
vtQMDry92fUFBTS0EMRLCp/I6oDQi5ArLn4i2A6/SqvXjhSoVbnrepk7kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeQkhjeJxtMeKPkijusBrUUjXgPMB8GA1UdIwQY
MBaAFOrSH3tbeKvo2+eCu3UP+vDWym6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnRJZmUxdDRxLWpiNTRLN2RRXzY4TmJLYnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGY0NzAtOGZjMi00MzJmLThlYzgt
ZWMxMTE4ZGZjZTkzLzEvNnRJZmUxdDRxLWpiNTRLN2RRXzY4TmJLYnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wOGY0NzAtOGZjMi00MzJmLThlYzgtZWMxMTE4ZGZjZTkz
LzEvNnRJZmUxdDRxLWpiNTRLN2RRXzY4TmJLYnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiV7QWrx
mizXxbiYvf5rNPq4nid5DafyEVeL9V6a3norWdfQIe5oW/ufYFvrLI412L7LRRPZ
IuAh5mAmflTurpb2SPBbANjxgnw7MQZ3LcZIa6e5eBdvo48lki9H2rZYm7eh2sDW
ZwRtdWZqnUhs8r/QyEzUmvvRzuLfHGT8CSUigVlq46PnfbCCFtuXRSPndLt6ynur
htX20qgSOd1j14f4boo5eK+u0ZFG6hOuXK++oAlybP1AuNZwqL8REibhBWwAjqaH
XFpVpFlg/u1+8/oYpL1qjKuA9S0TDSgxBL61ED2CMiZdRrKyyK/9BNM3YYPJsyK9
sLFtz/Crz6lmEg==
-----END CERTIFICATE-----
Generated at Sun Jun 28 05:11:09 2026 by rpki-client