Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          cYCousbvTFg2uW8LxxBXNfqVGiM9N1J4cBu4gmuoMbI=
Subject key identifier:   EA:9A:66:08:AC:CD:B7:3F:C5:34:50:06:84:E9:0C:D7:24:9D:7C:58
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019E2F973C675D2423F0058C20C8BFB56DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          10A5
Signing time:             Sat 16 May 2026 07:01:40 +0000
Manifest this update:     Sat 16 May 2026 07:01:40 +0000
Manifest next update:     Sun 17 May 2026 07:01:40 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: ZNdh2yoguoX8vviqqZFo0Hp5XzmIWnH4Q5d2ZDiEFvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:3c:67:5d:24:23:f0:05:8c:20:c8:bf:b5:6d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: May 16 07:01:40 2026 GMT
            Not After : May 17 07:01:40 2026 GMT
        Subject: CN=ea9a6608accdb73fc534500684e90cd7249d7c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:b9:1f:28:59:ef:bb:03:08:d9:75:7c:cb:
                    d2:89:0f:1d:31:92:05:37:fd:fc:40:73:42:b3:62:
                    c7:6b:66:d5:52:69:70:c5:0e:3f:f6:76:3f:1a:86:
                    c6:f5:6b:d6:c1:e6:b8:90:92:41:27:59:9e:be:4c:
                    81:fe:6c:e9:c5:20:53:15:50:a5:20:ea:1d:6b:ff:
                    81:91:b5:74:36:71:c8:cf:99:b0:1e:c1:47:14:0c:
                    04:dd:2e:14:d6:fe:a0:33:40:6a:33:a9:0d:c3:e8:
                    b3:79:be:2f:a7:80:59:da:be:db:17:2d:0f:e9:fa:
                    5c:6f:5d:fd:8f:a7:ef:e4:a3:58:5c:17:77:4d:3a:
                    1f:20:af:79:2c:a6:5a:6f:0e:a1:e6:05:be:4a:98:
                    a8:8c:c8:a3:0c:d8:d9:31:54:d2:e8:16:bf:27:a7:
                    2a:74:8e:60:86:ca:3c:87:8e:23:bb:dc:a5:48:fc:
                    97:65:7f:5a:ce:7c:72:2a:a9:08:ea:e7:f9:40:e9:
                    bf:89:8f:97:dc:82:e5:ef:23:09:9e:a3:66:6d:2d:
                    fa:04:ca:9a:ac:5a:3f:4a:9f:ee:84:f9:be:c7:6c:
                    ab:cc:1f:ac:bd:62:4b:c9:df:b4:3c:23:1e:3d:64:
                    72:23:6b:0c:b0:24:68:96:3e:06:ee:b5:15:5f:64:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9A:66:08:AC:CD:B7:3F:C5:34:50:06:84:E9:0C:D7:24:9D:7C:58
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b3:b2:63:4d:ec:58:7f:2c:e9:2e:5d:8c:2b:80:50:58:ac:
         82:42:7d:02:3f:4d:da:74:fb:f2:49:5a:3b:14:64:c0:04:6b:
         59:a1:24:c1:30:ab:d7:83:18:b7:9d:cf:ab:c1:34:7e:be:9c:
         d8:8e:4a:c9:dc:e5:cc:ee:fc:3a:0b:bf:5b:e4:17:91:82:60:
         a7:34:13:2b:03:91:d8:d3:5c:2d:a5:69:09:39:aa:a3:ee:e8:
         c9:8a:d1:64:50:74:b1:14:c7:46:e3:98:22:fa:99:56:e3:20:
         22:7c:f5:96:1b:7b:62:21:5e:07:f5:06:3f:00:9c:31:09:80:
         81:b4:dd:a9:cc:7b:6b:85:a7:6d:d6:1d:14:c4:0c:3d:93:fe:
         89:c8:ca:4a:a4:49:d0:7b:9c:3b:c9:0d:91:11:7e:36:44:35:
         bc:af:ae:86:3e:cb:6e:ce:6f:7f:f8:b1:d1:61:02:11:87:64:
         b5:7e:78:88:93:c2:3f:d7:93:92:32:1e:42:e9:96:4f:a0:30:
         63:64:0c:56:0a:79:e1:e0:9a:f1:b6:bd:12:94:c3:e6:57:7b:
         45:5e:86:35:04:15:fc:02:1a:4b:ce:af:e0:29:cd:30:6f:62:
         8b:d3:59:a5:b6:60:a4:67:6f:07:f1:36:63:0f:98:28:7f:02:
         12:12:9c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:47 2026 by rpki-client