Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          qeioGvmQQf+4W7PEHKVpi8/xJ/E9iO0PI6B/Vq3dQ1Y=
Subject key identifier:   6F:07:5D:F9:41:65:4B:5A:C0:C5:88:5E:6A:54:D7:16:3D:D9:ED:A5
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       019F189E95ED73A8B844BD535B20EFAC9C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          1691
Signing time:             Tue 30 Jun 2026 13:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:14 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: j9anAU9EggpDLTvBgFNy6PTOCvts62MlxkPHCgcuCWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:95:ed:73:a8:b8:44:bd:53:5b:20:ef:ac:9c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: Jun 30 13:01:14 2026 GMT
            Not After : Jul  1 13:01:14 2026 GMT
        Subject: CN=6f075df941654b5ac0c5885e6a54d7163dd9eda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:09:ae:35:97:02:28:ee:d0:04:50:c8:c4:
                    f6:e2:6f:09:66:af:f3:c6:f5:92:21:c2:17:37:bb:
                    ec:d9:56:52:a4:cb:4b:b6:47:f0:b1:79:e3:d3:17:
                    70:dc:3b:a1:e3:c4:86:a8:85:c1:9c:1a:8c:43:57:
                    da:6d:c9:3c:92:41:fc:15:47:b7:26:c7:33:4a:15:
                    f0:8f:6a:0d:a6:1a:52:23:40:69:11:ee:d5:af:a0:
                    92:8d:70:91:d8:ad:a2:af:89:5e:ba:61:d0:c8:d0:
                    0d:a3:64:67:a8:7b:8c:cc:ab:50:39:58:3f:be:2f:
                    2d:a8:d8:2b:49:b1:84:d4:52:99:60:e5:41:2a:41:
                    1c:91:1f:8a:ef:fc:7f:37:52:58:f8:fe:f1:64:8f:
                    b5:fa:5f:c3:0c:85:4b:f0:7b:32:09:16:d1:f0:d3:
                    d1:23:2f:a4:06:f3:32:88:de:96:79:f5:b3:61:73:
                    9f:cc:0f:ae:ea:56:d8:1d:c9:2a:55:59:60:f9:df:
                    24:e4:c0:95:cc:1a:8f:34:41:4c:25:0d:4c:ad:2c:
                    a0:30:31:5d:dd:38:07:2f:14:0d:34:94:64:08:f2:
                    81:eb:be:b9:5b:ad:38:20:0b:d1:a2:f4:7b:e4:27:
                    39:57:87:25:74:ad:31:75:44:8e:62:60:60:5e:cc:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:5D:F9:41:65:4B:5A:C0:C5:88:5E:6A:54:D7:16:3D:D9:ED:A5
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:a6:2a:b5:f0:2c:40:68:dc:a5:3d:8b:8a:86:bd:43:c6:
         af:49:1a:18:81:b0:b1:4b:2d:ef:4e:bb:1a:b4:23:da:73:54:
         be:bb:f2:1e:6f:e8:fd:44:67:28:68:8f:58:77:a9:ed:43:b8:
         c0:f5:81:0f:8b:a7:b0:bc:bd:a0:b0:4d:26:03:44:e6:68:80:
         54:b9:bb:3e:4d:99:32:1b:72:a6:b2:3a:57:20:60:a4:9b:db:
         2c:f4:49:34:fb:59:52:54:72:1e:a4:95:f0:6b:48:6e:37:f8:
         4c:ff:ec:69:74:99:60:0b:ac:01:db:ac:31:da:5e:51:fd:95:
         2b:5c:b9:c6:f9:5b:f1:16:76:e9:f5:0e:68:7e:9f:63:e5:e4:
         32:93:e0:fb:dc:aa:1d:60:90:50:ae:3b:62:11:45:44:76:e6:
         f9:d0:16:0d:ec:ba:cf:d2:5d:1a:f8:71:34:3d:bd:9f:1f:0c:
         48:e5:10:41:db:86:6e:9a:07:12:1b:f0:d5:6d:a9:4a:a9:73:
         48:61:c4:7f:72:d4:79:10:56:99:0d:30:dd:f2:7b:29:cc:5f:
         34:17:20:99:26:1f:ae:a0:80:80:c1:94:cc:cc:70:41:a3:06:
         1f:aa:3f:45:ec:b0:ed:77:51:73:d0:47:7a:af:55:c4:1c:f4:
         a1:a7:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:06 2026 by rpki-client