Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          xKoMLPDaA16Hmk0Md9ZVZcXHEAL+763qW6UEToH21EQ=
Subject key identifier:   9F:D8:D5:55:F2:84:A3:D5:8A:80:30:58:4A:54:9F:73:39:98:61:F9
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       019E30E0E985E6AD7C99D71EE2B017817127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          1619
Signing time:             Sat 16 May 2026 13:01:46 +0000
Manifest this update:     Sat 16 May 2026 13:01:46 +0000
Manifest next update:     Sun 17 May 2026 13:01:46 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: fRqE6PBBGRGURLOdniqkihXCSLDQz1Eu6FcculE7c3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:e9:85:e6:ad:7c:99:d7:1e:e2:b0:17:81:71:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: May 16 13:01:46 2026 GMT
            Not After : May 17 13:01:46 2026 GMT
        Subject: CN=9fd8d555f284a3d58a8030584a549f73399861f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:07:95:5d:42:14:45:29:4a:54:7b:74:15:46:
                    47:c6:a5:7b:d1:32:89:dd:89:f2:5c:92:76:9f:18:
                    65:65:18:09:2f:b7:66:27:ba:2d:a1:ec:05:78:d6:
                    62:dd:b6:05:28:2f:17:0f:2a:3c:28:7e:09:9e:ab:
                    06:95:a7:ac:e7:1d:37:99:b1:87:7e:9b:a4:ee:40:
                    b3:51:fd:66:71:d4:c2:49:51:f1:8b:9b:3c:7c:5c:
                    f3:41:99:dd:fd:9e:bb:1f:93:8f:35:1d:70:4a:82:
                    ac:dd:0e:05:bb:7c:6f:87:66:60:c7:cc:b7:d4:81:
                    53:d6:96:c1:cb:0c:43:f9:4c:7f:d5:d5:72:78:89:
                    d2:fb:f0:41:95:fa:96:8d:2e:5c:33:19:04:9a:3b:
                    72:27:45:10:a9:fc:1a:b3:ac:17:97:24:d1:69:07:
                    b6:9e:63:8b:a3:fb:60:a1:c4:fd:5e:d2:3b:1d:69:
                    19:58:13:97:85:ae:e2:85:f9:14:94:5d:a1:4d:3e:
                    68:c8:e1:7c:f8:6b:5a:e2:f5:3d:3e:da:62:1e:2e:
                    ef:d4:c4:e8:5b:77:5c:b0:18:48:7e:88:89:57:c7:
                    1c:5e:1c:4f:cd:57:42:ea:a7:4a:c0:d7:ef:9d:71:
                    94:51:69:7d:06:7f:54:f9:5b:6f:0b:8f:79:ab:68:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D8:D5:55:F2:84:A3:D5:8A:80:30:58:4A:54:9F:73:39:98:61:F9
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:33:87:62:5b:c7:1f:8e:dc:0c:a0:22:f4:dd:19:2c:52:4e:
         58:08:dd:db:77:db:de:17:bf:eb:e4:f0:f4:e8:25:91:98:c6:
         f9:86:e4:dd:7d:48:c7:58:59:c1:1e:0f:b1:e1:0e:22:b0:40:
         a2:f0:a0:43:23:41:9e:9d:54:e9:cd:f6:bc:27:ce:ff:45:8f:
         02:fc:a4:8f:ec:ca:a1:75:39:4c:6a:9b:dc:a9:06:a2:04:2a:
         2c:74:fa:3e:2d:bf:95:f5:90:4c:16:82:e8:97:85:42:c1:61:
         d2:8b:b2:17:b0:e1:e5:ba:e2:cc:bf:96:b6:14:b3:62:5a:ad:
         e3:9b:36:d1:4a:91:f0:78:35:95:8a:17:21:60:61:3a:65:5c:
         9f:76:10:26:bf:e1:10:64:25:c6:ae:0b:08:ef:2a:32:8d:70:
         40:cb:8e:24:84:f1:b7:d3:af:7b:f9:2c:22:b2:82:9d:4e:e3:
         20:13:5e:1a:59:f2:ed:f6:b6:31:b2:4d:1c:b1:44:46:67:90:
         16:c5:f8:14:54:86:81:0b:2f:b4:ac:b7:79:2b:35:0f:2f:29:
         13:d6:04:34:37:e3:42:ad:ad:02:a7:8b:de:c8:02:46:4b:8f:
         b3:27:ba:52:4b:85:75:5d:34:49:42:b4:a5:28:a4:ab:fb:d2:
         f9:e8:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:35 2026 by rpki-client