Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
File:                     6rBmxuGACj9b0uQG6aYg0qD29lM.mft (raw, json)
Hash identifier:          A7mUpCKcVdQC8Ksyc2tzDRRWwn9O4mFhkI/6mk1dCnw=
Subject key identifier:   AF:D7:88:29:B5:34:47:69:01:0C:15:10:8D:60:B6:BC:84:CC:43:A6
Authority key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Certificate issuer:       /CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Certificate serial:       019E303B0E7CA18FDF0D391228D7D0BEF5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
Manifest number:          0FA4
Signing time:             Sat 16 May 2026 10:00:37 +0000
Manifest this update:     Sat 16 May 2026 10:00:37 +0000
Manifest next update:     Sun 17 May 2026 10:00:37 +0000
Files and hashes:         1: 6rBmxuGACj9b0uQG6aYg0qD29lM.crl (hash: HWbzzdnkJ//M1rvCEoR4KsqVKoSwVn5m3+/zYRb4/dA=)
                          2: y8Oc_jilp32EuFWNU56uzsG240A.roa (hash: m5FeXXz3diMHtUorIoO4JI5zdoSfwpDlGCnUqxC6c0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:0e:7c:a1:8f:df:0d:39:12:28:d7:d0:be:f5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
        Validity
            Not Before: May 16 10:00:37 2026 GMT
            Not After : May 17 10:00:37 2026 GMT
        Subject: CN=afd78829b5344769010c15108d60b6bc84cc43a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:d8:7b:42:27:35:f7:5c:bc:70:8f:51:ab:
                    c3:bf:e3:c2:bf:30:a3:d5:b8:87:62:88:79:37:30:
                    41:62:36:96:fc:38:cc:cc:da:a2:27:28:23:65:4c:
                    b1:17:3e:2e:58:11:43:d3:5c:74:f5:12:df:62:31:
                    fd:3e:15:9c:3b:2b:7e:21:42:f2:c3:43:d9:79:b8:
                    ed:5e:02:94:c6:fc:62:6b:24:38:65:f7:01:8d:27:
                    31:2a:9c:f5:71:40:b3:68:85:6b:4c:5c:be:1c:78:
                    cd:31:f7:54:69:59:56:31:3a:93:2e:7a:bc:30:cb:
                    e4:ab:04:f1:dd:d7:10:c9:3b:6a:c7:90:f9:f2:c0:
                    3b:81:0c:29:8a:3a:63:46:a3:36:8c:ed:5d:bf:76:
                    33:9e:e8:58:0d:42:d5:db:87:7a:ee:8e:ce:ab:c9:
                    c7:94:5d:ff:39:3e:d8:b9:4d:f1:91:32:f1:a5:49:
                    63:b2:23:aa:e7:f6:3a:1a:63:2b:29:93:a2:f5:8b:
                    e6:5c:ab:0d:39:ba:67:86:b2:f3:d9:9b:eb:81:43:
                    fc:5e:8f:00:94:0c:f7:96:4e:cd:4a:a9:57:45:a2:
                    c7:d8:62:f7:dd:f1:2d:c1:92:a8:3d:2d:ca:59:86:
                    b7:37:08:49:6a:9b:8d:86:9f:f0:2c:05:4e:54:f7:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D7:88:29:B5:34:47:69:01:0C:15:10:8D:60:B6:BC:84:CC:43:A6
            X509v3 Authority Key Identifier:
                keyid:EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:1d:4b:aa:92:2c:cf:9f:2d:57:44:0b:7e:37:8f:77:b5:
         c5:e4:a6:74:43:fe:30:fe:b5:55:56:2f:28:48:d2:c1:69:49:
         ae:06:50:9a:bb:d3:d9:63:ed:db:ee:de:e3:ec:1f:ba:16:7f:
         48:e5:38:3b:40:33:05:c5:12:cc:b5:68:6c:cb:7e:c1:50:47:
         a3:e1:9b:30:8b:29:b1:20:47:8c:11:0f:a1:3a:98:9b:17:fb:
         c5:bd:4c:1d:6a:b7:f2:a8:b6:03:58:e0:53:a3:20:01:16:80:
         7e:9e:fd:cd:e5:63:00:a7:95:1f:d0:ed:bd:46:67:4c:0c:3e:
         cd:27:f6:2f:95:1b:6b:f8:7d:a9:a1:3f:8c:f2:ac:48:03:7c:
         b7:49:28:ef:91:d3:ed:66:b9:db:6a:1d:c4:7b:ac:66:dd:02:
         77:01:f4:95:f5:7d:75:a5:55:c6:7a:da:38:d8:ac:03:91:b2:
         e3:af:48:37:21:7e:a2:3a:e0:61:17:b9:ec:0e:a3:fc:7b:2e:
         20:b7:da:f5:70:a9:76:36:e2:de:b0:69:fb:a2:0a:c2:42:0a:
         aa:21:f1:c7:97:6a:28:64:8d:bc:d2:81:91:09:3d:a1:c3:94:
         7a:d8:f4:fb:b4:f1:d1:a1:40:2f:dd:85:0c:4b:c6:b9:2f:c8:
         07:83:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:00 2026 by rpki-client