Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          eKNzacMtsaowpBUYBNlwHEGgKtbg3YrkMAsXjpRgM0Y=
Subject key identifier:   61:70:1D:5A:9F:A8:F4:23:10:77:D6:6F:8A:E5:E0:15:80:AB:CC:E3
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       019EB8EACA7A9DED2DC6CAE4B0059DD1C5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          0436
Signing time:             Thu 11 Jun 2026 23:00:55 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:55 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:55 +0000
Files and hashes:         1: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: gp/m/k8GuiLJDbMrdYlH3dEfohQ0i9heH0WjGnHOvng=)
                          2: Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa (hash: JdPihEsZ6tT2+sczntCGGr/PDdYGd+kbINCzgVJa7xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:ca:7a:9d:ed:2d:c6:ca:e4:b0:05:9d:d1:c5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: Jun 11 23:00:55 2026 GMT
            Not After : Jun 12 23:00:55 2026 GMT
        Subject: CN=61701d5a9fa8f4231077d66f8ae5e01580abcce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:6a:da:46:3c:56:e5:f5:34:e8:f2:66:39:
                    1e:46:a9:41:02:57:3d:88:de:7c:77:ff:32:b9:87:
                    87:4e:16:b9:6b:d9:9c:1e:0e:b8:51:4b:89:3b:e9:
                    5d:c9:b1:17:61:47:99:ce:1d:6c:f5:50:42:f0:ad:
                    e4:2a:64:fe:e2:9b:ca:85:6c:a4:81:97:52:0b:64:
                    b0:14:2e:21:ee:f0:94:f7:61:77:1e:da:76:2c:b9:
                    62:24:57:e8:d5:81:28:16:d9:45:1c:81:b4:4b:ec:
                    c0:4b:3c:f2:23:0c:eb:55:c1:1a:d7:a0:9a:f9:72:
                    b2:f3:1f:b7:5c:f9:6a:0f:9f:b7:96:cb:fd:5d:29:
                    78:3b:97:4b:9e:ce:6d:f1:02:86:49:aa:97:c6:d1:
                    63:ff:63:bf:ec:90:2a:06:f9:36:a8:96:20:a1:80:
                    4a:fa:4c:f5:22:8d:a9:7d:5f:94:85:13:05:db:d8:
                    aa:83:4f:0f:58:6a:be:ba:2b:15:97:f7:b4:2d:0d:
                    aa:48:f2:33:9f:66:d1:ee:9d:9a:bd:d0:b2:fc:1e:
                    3a:f8:26:4d:5e:76:17:98:42:6d:91:e6:ff:f3:81:
                    d4:53:4a:40:6c:de:f4:cc:23:5b:21:20:8e:a6:9a:
                    17:a2:b5:91:95:79:79:d8:6a:d2:ad:b0:73:e0:77:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:70:1D:5A:9F:A8:F4:23:10:77:D6:6F:8A:E5:E0:15:80:AB:CC:E3
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:bb:ac:f2:1e:5e:1c:50:5c:2d:e3:ea:e4:41:10:84:40:87:
         ba:4a:d2:80:67:18:0b:50:12:0f:aa:3c:6c:92:da:4a:96:cd:
         73:65:d5:8a:a1:eb:b4:9b:56:50:5b:63:3d:d1:1b:61:eb:a1:
         54:92:be:1f:76:d7:9e:83:f5:fa:c1:56:3e:a4:3a:7a:c0:f2:
         ca:87:54:5b:0d:f1:3f:8c:30:0c:1f:fb:60:49:4b:4b:54:14:
         c1:21:ab:f4:38:e4:bc:e5:89:9c:c5:bd:fc:2e:b5:b0:a7:3c:
         bb:d6:18:7e:a7:c5:83:cc:72:a9:d1:cf:7b:56:ca:99:3b:f9:
         e2:89:fa:54:9a:c4:23:cf:b6:da:73:86:80:31:4a:b1:f0:35:
         fe:92:4b:c4:13:58:df:3e:47:9d:5b:49:90:1c:46:09:0d:48:
         61:af:18:76:c4:1c:4a:e0:6d:8d:70:57:79:e9:92:44:87:fd:
         83:dd:fd:6b:c8:36:6f:23:b1:2b:5b:1c:85:05:03:12:7d:85:
         26:69:10:35:6f:21:42:29:a6:64:aa:6b:f3:e6:ca:75:af:ce:
         33:74:c8:24:93:38:b0:b0:a4:a7:84:5c:6c:e2:68:17:cc:5a:
         89:14:9f:32:44:8d:e8:15:50:6a:c8:2c:62:54:29:92:8f:7c:
         7c:9f:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:00:18 2026 by rpki-client