Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          uMz8u2WNWWpsL37U6IBxj7a2buLiEzTXlIteppX9Pe8=
Subject key identifier:   EC:35:11:74:24:A6:B4:F6:F1:3F:55:F5:F6:06:99:64:76:3E:6F:7E
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       019F17C30F737B9F1D7A8A3E66123EBD9760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 09:01:26 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:26 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:26 +0000
Files and hashes:         1: 5Iruj7Q04-dIh4ZGTzY2lg5RxnQ.roa (hash: x1HpRiyK6tLqJ4m++Ue3xBke0BVmx3kiw0XUNo5+ScQ=)
                          2: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: MH5/faY8MykISyNo+E9AZ+kKbljaGqX9hxNtjlkRlbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:0f:73:7b:9f:1d:7a:8a:3e:66:12:3e:bd:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Jun 30 09:01:26 2026 GMT
            Not After : Jul  1 09:01:26 2026 GMT
        Subject: CN=ec35117424a6b4f6f13f55f5f6069964763e6f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:05:08:42:3f:81:30:13:02:0c:9e:03:e5:
                    21:45:88:e7:0b:46:86:f1:15:d4:15:62:45:a3:b3:
                    0e:5f:e7:80:0f:51:72:91:9a:ca:47:b1:88:3e:af:
                    6c:73:51:af:6a:b9:40:e4:3c:f3:64:aa:48:53:16:
                    e2:ac:8e:02:b7:6a:64:66:fa:1e:8d:01:c8:92:01:
                    aa:30:8f:7f:6f:a1:d6:9b:8e:7a:ca:8a:e7:8b:aa:
                    a9:65:1c:53:f3:0a:c6:27:98:c8:2a:08:ae:e3:19:
                    ec:89:ef:f1:a3:96:11:d4:84:31:93:1d:a1:ba:f1:
                    ae:da:8e:49:fc:40:e5:25:5a:13:73:e1:52:fd:b0:
                    6c:75:d0:11:34:7e:12:81:11:38:4f:47:65:d1:a7:
                    4c:ca:6f:6e:ab:85:14:fb:58:fd:c8:66:e2:58:98:
                    1a:1c:aa:fc:de:5c:6b:06:22:14:6f:32:11:82:99:
                    bb:63:69:25:ef:b8:2a:eb:be:07:70:6e:90:da:6d:
                    6d:39:cc:cc:56:2c:20:91:6a:b4:4c:9d:b9:6f:eb:
                    ae:57:b2:f7:29:31:61:6e:97:95:77:54:9a:91:69:
                    be:51:8e:3f:dc:25:95:e1:6c:3d:7d:c2:54:5d:36:
                    a4:ca:75:d7:a3:dc:65:7e:e2:06:8c:50:94:d5:7f:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:35:11:74:24:A6:B4:F6:F1:3F:55:F5:F6:06:99:64:76:3E:6F:7E
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:32:d3:7a:ec:b0:ee:2a:db:ca:b3:78:9b:fe:6e:73:97:16:
         3e:e0:1e:aa:e7:10:6f:a0:c4:74:a4:12:23:a6:5f:d2:dc:0f:
         22:b2:1d:08:20:de:0d:87:27:34:fe:35:31:63:bc:cc:55:a0:
         ff:90:46:53:eb:86:c5:07:94:92:b6:40:9d:0a:81:4e:b3:85:
         8c:17:7d:d0:b1:26:e6:b3:9b:a3:69:00:2f:00:e5:8d:31:df:
         b3:f6:93:91:60:22:f5:2e:32:ec:26:94:4e:2b:dc:91:c6:9b:
         0e:56:1a:a2:cf:ce:9f:2d:e4:20:b1:ed:21:fb:6f:68:4b:b5:
         f2:9d:23:3e:f4:ac:bb:0a:16:b0:c6:d7:2a:e5:a7:c0:52:7f:
         e2:8d:cc:5d:a2:f6:eb:39:eb:ba:b6:de:f1:a9:02:bb:d9:20:
         da:dd:64:66:48:53:c9:0e:67:b6:ba:2b:37:ea:f4:36:84:17:
         e3:d6:93:14:34:0e:c2:fe:8b:72:dd:5b:b1:24:91:83:71:f8:
         25:2f:31:7c:42:71:11:32:16:ab:40:86:dc:59:67:2b:76:84:
         20:5c:36:a4:b8:66:b3:14:81:ca:9f:13:23:b9:46:56:69:b0:
         39:97:eb:fe:ed:c1:51:2f:e8:5c:94:1b:29:bc:9b:27:45:7c:
         b7:44:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:25 2026 by rpki-client