Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          eT9bRsXlI30H4WD26mmUtyPMOjEr0RQxoIBWvWpaTlc=
Subject key identifier:   EE:61:C6:E2:0C:C8:2A:BE:99:AF:82:6B:86:4D:2B:69:18:1C:B2:89
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       019F0962900F4F6470AE2EFC3570F0253042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          1943
Signing time:             Sat 27 Jun 2026 14:01:21 +0000
Manifest this update:     Sat 27 Jun 2026 14:01:21 +0000
Manifest next update:     Sun 28 Jun 2026 14:01:21 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: exNAO8xWo/MRkfPRK8Vsll8D79alcoMmN4tHlpj6bUg=)
                          2: AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa (hash: 9TWTjByJcZOyWpXeC0+/dCxoa8gWYVHVu+bJhn9WUwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:09:62:90:0f:4f:64:70:ae:2e:fc:35:70:f0:25:30:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: Jun 27 14:01:21 2026 GMT
            Not After : Jun 28 14:01:21 2026 GMT
        Subject: CN=ee61c6e20cc82abe99af826b864d2b69181cb289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:30:0e:75:26:e2:ae:ce:ae:08:ec:a0:7d:
                    91:22:23:cd:c5:fd:da:8b:c5:96:ad:ba:1a:b2:e7:
                    1a:cd:81:a2:f0:ee:e8:b0:56:de:50:d4:73:11:d3:
                    ee:73:07:c5:cb:6c:10:c7:a1:e5:db:26:29:45:cd:
                    ae:2d:0a:75:02:40:da:ef:76:7a:f3:39:d6:bb:11:
                    9c:57:28:89:53:45:7c:fc:8c:74:9a:b8:57:cd:ed:
                    4a:36:4a:5e:95:3c:55:d8:fd:2d:b8:16:6b:69:bb:
                    b3:77:3c:2a:71:37:09:3e:6a:3b:da:61:b7:51:9c:
                    12:d9:15:56:91:68:f9:75:e7:f7:50:cb:d8:35:97:
                    04:60:f6:db:f3:52:07:86:f3:d3:7a:d5:55:e8:3b:
                    65:96:82:51:24:7b:aa:6c:4e:51:31:d1:6b:d3:85:
                    28:d3:21:4c:26:28:59:ea:d3:3a:55:84:1d:bd:0b:
                    82:13:03:d9:98:77:71:c7:4d:4c:e9:33:af:a9:8e:
                    bc:84:4f:da:94:e0:0d:d2:9b:15:56:cc:11:b0:18:
                    4c:1c:ee:5b:50:25:ac:11:b7:fd:0b:d3:4c:0c:0c:
                    d2:ca:04:3d:7b:2c:2d:52:6c:3c:0d:51:be:a2:bd:
                    cd:1b:53:33:b2:66:09:ef:d0:3d:a8:21:45:29:19:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:C6:E2:0C:C8:2A:BE:99:AF:82:6B:86:4D:2B:69:18:1C:B2:89
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:c3:09:22:a5:5e:09:8e:fe:e0:d3:d1:59:8a:bd:c0:f2:
         7e:e5:7a:19:42:91:4d:ac:19:2c:9b:e2:14:48:31:e3:e8:d2:
         f4:01:eb:95:93:26:26:b2:1e:1b:69:27:ae:99:04:9a:e4:31:
         1b:d6:c2:08:e1:24:3a:3b:2b:cf:ca:22:eb:10:8c:c7:8e:38:
         76:ae:f5:0a:11:77:19:48:0e:52:f8:3f:ae:7d:59:d2:20:5d:
         75:17:11:89:68:93:8e:57:c9:ef:f1:43:5b:93:03:da:a1:4f:
         3f:a1:63:8b:24:ef:a2:62:08:c8:63:6a:90:42:7a:62:af:23:
         a8:87:17:bc:8e:fa:5e:8f:fe:7c:95:84:8f:81:ea:f7:6f:92:
         b7:92:22:43:57:e1:63:98:7b:7a:b7:c7:d9:ea:19:b0:9b:83:
         24:0e:4c:bb:f4:7c:4e:66:c5:31:24:60:8c:1b:a6:59:30:5f:
         1b:74:05:8e:79:4a:fa:1a:32:9c:e3:b9:b1:fd:8c:a1:47:f1:
         b8:73:68:18:a4:87:66:d8:4f:ba:19:6d:28:96:64:69:76:3f:
         30:69:c6:20:11:82:94:cb:32:13:c8:f5:b7:f6:3c:af:18:ea:
         b4:17:8c:56:1a:02:32:8c:fc:71:eb:38:a4:85:a9:db:07:b6:
         b2:93:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:30:41 2026 by rpki-client