Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          pU0Ck1TOR6TPiPyoNd2j5IDLEyWXileS/NJKOxNj3yA=
Subject key identifier:   05:8C:CE:C5:87:13:8D:DA:79:72:04:97:80:8D:A5:78:81:F3:84:01
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       01A00101947A4201767C649ADCD42201C6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          1196
Signing time:             Fri 14 Aug 2026 16:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:15 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: shK8wcsrYntIeU5o5SR1uLDgjsn4F9//AuwFNMHZbiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:94:7a:42:01:76:7c:64:9a:dc:d4:22:01:c6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Aug 14 16:01:15 2026 GMT
            Not After : Aug 15 16:01:15 2026 GMT
        Subject: CN=058ccec587138dda79720497808da57881f38401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:ac:5a:37:89:27:3f:d7:fb:71:77:d2:c7:
                    0e:af:12:d3:f9:7f:4d:26:91:47:f7:94:d1:20:4f:
                    25:38:fa:ff:90:97:d1:2c:68:84:b6:56:d8:19:dc:
                    8f:73:5b:0c:11:f1:48:b1:44:91:6f:b1:af:4a:e0:
                    2c:03:7a:29:7f:17:e8:c8:44:6f:c1:b9:6d:51:09:
                    4b:ab:e8:68:ac:f9:8d:a3:a5:f9:78:db:49:63:6a:
                    7c:64:55:41:d8:66:0a:15:cd:c2:85:82:d2:3b:8f:
                    3b:3e:38:b7:be:55:66:17:09:5c:8c:00:c4:fc:94:
                    26:9f:16:14:50:94:49:f5:e7:4e:e6:3f:08:64:a9:
                    46:1e:d3:ab:d8:52:e4:51:aa:60:85:a4:95:03:7d:
                    6d:d9:63:1d:9c:f6:af:b8:99:1d:8b:b8:26:6b:ee:
                    a3:db:2d:00:49:53:7f:ea:6e:d3:76:83:7d:ea:8f:
                    01:da:c9:e6:5e:1b:5b:ab:c9:4c:f5:4d:83:5b:56:
                    7f:62:b8:14:1e:28:ff:e2:b1:22:12:9e:33:cd:3e:
                    aa:47:3c:cb:58:c1:75:69:87:34:b8:d6:73:3b:38:
                    a2:06:c6:d8:68:3c:ee:15:df:d6:14:e0:4c:5a:ce:
                    db:62:d8:ad:63:3c:1a:03:a8:26:7d:67:90:c5:1c:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8C:CE:C5:87:13:8D:DA:79:72:04:97:80:8D:A5:78:81:F3:84:01
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:cd:c3:cf:40:55:93:13:12:c9:6b:3e:3d:1c:55:a2:c2:
         d5:79:94:a4:af:12:d7:60:79:5e:c0:1e:48:15:db:67:ce:6f:
         0e:e2:8b:a0:41:c6:f0:8e:56:2e:70:8f:22:17:e9:17:e3:49:
         02:0d:6c:0b:4d:29:11:6e:d7:bf:55:1a:c1:1c:f8:3e:99:7c:
         7b:31:1b:9b:95:11:b0:da:58:ea:e1:1f:c7:4d:e7:21:05:00:
         1e:e4:17:b4:fa:57:97:e3:9e:a0:93:13:89:f2:5e:65:f7:92:
         0c:dc:ce:39:05:82:c1:97:b6:96:20:c8:62:78:5d:fb:6b:ff:
         85:83:fa:f0:14:ea:b2:dd:c9:95:9d:55:ad:1d:f9:ca:4c:0a:
         e1:62:d6:a0:10:b0:0e:62:bc:0f:36:bb:15:8c:58:20:f6:40:
         9b:dc:d2:34:63:db:9d:c9:cc:4a:d5:d4:ce:f0:43:82:ba:23:
         4d:a1:12:ff:90:70:73:f6:b0:1f:4a:92:7a:97:2b:92:ce:34:
         14:92:46:5e:78:b8:04:37:ff:af:54:a7:ce:dd:aa:df:91:46:
         42:8c:f5:87:f9:2e:9d:9b:9c:48:e6:db:ad:7d:f2:b0:20:14:
         d6:9c:08:ff:6c:11:7f:c1:bd:df:05:63:e3:79:05:42:b5:26:
         6c:48:af:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAZR6QgF2fGSa3NQiAcbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTliNWVmMjNiYjQyM2E0N2QyYjhmMjMzZTgyYzM1NDA5
Y2NiZmMwHhcNMjYwODE0MTYwMTE1WhcNMjYwODE1MTYwMTE1WjAzMTEwLwYDVQQD
EygwNThjY2VjNTg3MTM4ZGRhNzk3MjA0OTc4MDhkYTU3ODgxZjM4NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j6sWjeJJz/X+3F30scOrxLT+X9N
JpFH95TRIE8lOPr/kJfRLGiEtlbYGdyPc1sMEfFIsUSRb7GvSuAsA3opfxfoyERv
wbltUQlLq+horPmNo6X5eNtJY2p8ZFVB2GYKFc3ChYLSO487Pji3vlVmFwlcjADE
/JQmnxYUUJRJ9edO5j8IZKlGHtOr2FLkUapghaSVA31t2WMdnPavuJkdi7gma+6j
2y0ASVN/6m7TdoN96o8B2snmXhtbq8lM9U2DW1Z/YrgUHij/4rEiEp4zzT6qRzzL
WMF1aYc0uNZzOziiBsbYaDzuFd/WFOBMWs7bYtitYzwaA6gmfWeQxRxfvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWMzsWHE43aeXIEl4CNpXiB84QBMB8GA1UdIwQY
MBaAFOiZte8ju0I6R9K48jPoLDVAnMv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYt
ZGIzMjRhN2UyOGU4LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYtZGIzMjRhN2UyOGU4
LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2XNw89A
VZMTEslrPj0cVaLC1XmUpK8S12B5XsAeSBXbZ85vDuKLoEHG8I5WLnCPIhfpF+NJ
Ag1sC00pEW7Xv1UawRz4Ppl8ezEbm5URsNpY6uEfx03nIQUAHuQXtPpXl+OeoJMT
ifJeZfeSDNzOOQWCwZe2liDIYnhd+2v/hYP68BTqst3JlZ1VrR35ykwK4WLWoBCw
DmK8Dza7FYxYIPZAm9zSNGPbncnMStXUzvBDgrojTaES/5Bwc/awH0qSepcrks40
FJJGXni4BDf/r1Snzt2q35FGQoz1h/kunZucSObbrX3ysCAU1pwI/2wRf8G93wVj
43kFQrUmbEivPg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:05 2026 by rpki-client