Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          1txZBEDazbTgTsRn/fojiVmO7ofiO0N4BBtRyRAQLPs=
Subject key identifier:   71:C6:20:0E:0E:2F:91:13:40:B6:6B:3B:7D:D9:3F:13:17:BB:D3:80
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019F1943EA1445872F78B6D4E33E673CC297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          111E
Signing time:             Tue 30 Jun 2026 16:01:48 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:48 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:48 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: KbnUh1IXaps6YOS4EScrMqLgLrJdyyTi0/5+9vsUSQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:ea:14:45:87:2f:78:b6:d4:e3:3e:67:3c:c2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Jun 30 16:01:48 2026 GMT
            Not After : Jul  1 16:01:48 2026 GMT
        Subject: CN=71c6200e0e2f911340b66b3b7dd93f1317bbd380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:9b:8d:fc:96:60:ee:0c:de:78:c9:ea:35:
                    de:86:a5:97:fe:01:9c:2b:93:ff:69:40:46:15:87:
                    ca:e3:37:70:9c:aa:1a:79:b8:d1:d4:25:83:18:cc:
                    66:ab:2f:55:0a:77:1e:f6:6e:df:58:a2:74:79:0b:
                    e7:fc:56:14:84:95:9e:54:c0:82:9d:71:46:1d:9d:
                    90:0a:fe:59:09:13:e8:05:d0:1e:cd:52:96:8c:09:
                    0b:9a:48:06:7c:01:d0:55:e7:de:91:66:ee:36:9f:
                    62:9e:b6:8b:44:f2:e7:b3:58:3e:b0:97:5e:eb:c6:
                    57:75:32:c7:88:27:5f:8d:15:af:ac:2e:61:a4:09:
                    26:7b:c5:2f:9b:70:71:f3:9c:5b:48:d8:c3:18:4c:
                    f3:bc:e3:dd:a7:a9:ee:74:19:a2:d0:40:aa:d6:51:
                    61:1a:2c:4d:68:9e:9d:cd:f5:55:5e:6d:2a:be:3e:
                    7d:6e:1b:bd:24:10:d9:da:6e:14:ad:5d:0c:a6:b6:
                    9b:ce:27:c5:14:6a:04:85:d2:53:cb:a7:ca:4b:80:
                    c1:20:3c:83:d0:b0:e7:99:87:c4:66:5d:79:95:d3:
                    6e:78:9c:52:f5:d4:49:9d:d1:b1:f6:97:96:30:f6:
                    ea:12:3b:55:23:2f:da:a0:f8:4d:65:11:c6:1f:99:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C6:20:0E:0E:2F:91:13:40:B6:6B:3B:7D:D9:3F:13:17:BB:D3:80
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:24:39:55:c1:45:5f:d2:6c:f2:fa:e3:6f:e6:a7:fe:b7:06:
         12:27:e7:53:2f:57:17:37:7d:31:2e:be:ef:58:b2:f3:5c:56:
         cd:02:d9:f8:c1:88:53:29:25:60:96:98:c8:0f:b0:fe:11:e4:
         b8:1d:54:51:4c:d1:6c:03:64:ac:27:ce:b2:a1:10:2c:e5:2b:
         4d:48:6c:89:96:b1:e4:f6:f5:a1:8c:fd:b8:c4:4a:93:7c:54:
         a9:45:dc:ab:37:7e:1b:2c:98:95:89:60:80:5e:a6:1b:df:38:
         24:bc:de:4e:20:b1:2b:8c:e2:bc:99:f6:7e:93:51:de:d6:83:
         a4:ef:3b:59:61:a4:c5:53:19:a7:0a:3e:5f:1c:df:c0:51:64:
         93:bf:6a:30:39:81:82:ed:d6:9c:93:85:d6:11:79:29:10:4f:
         70:14:45:42:b3:8f:50:bf:95:5d:07:78:35:9b:46:25:47:27:
         23:ee:c9:c8:0c:ca:ae:af:b7:ed:ac:cd:95:cf:37:96:c3:ef:
         78:99:d8:b5:a3:67:71:a0:75:63:f8:d0:ae:6f:cb:8a:e5:d1:
         e2:da:b5:8a:1f:46:95:83:64:35:6f:e4:b5:0b:09:8f:50:9f:
         3e:d7:e1:57:84:bd:47:68:80:f4:38:7c:8b:49:1f:ae:69:43:
         5e:3d:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:29 2026 by rpki-client