Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File:                     6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier:          +hcqAfJ4QVCSX6QWzTDCboIRsP/wwh1xmyNNe9RlMJU=
Subject key identifier:   85:D6:41:3D:10:B0:8B:ED:D7:9C:89:64:5B:78:8B:D8:C6:D4:9C:34
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer:       /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial:       019EB73316FA81B6650CCBD0D32ADF4FA146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number:          045B
Signing time:             Thu 11 Jun 2026 15:00:39 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:39 +0000
Files and hashes:         1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: lxVe1bnxjnOEg7JVSJTwXNoUqOnzqWZsgG6p1ziYVYw=)
                          2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:16:fa:81:b6:65:0c:cb:d0:d3:2a:df:4f:a1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
        Validity
            Not Before: Jun 11 15:00:39 2026 GMT
            Not After : Jun 12 15:00:39 2026 GMT
        Subject: CN=85d6413d10b08bedd79c89645b788bd8c6d49c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:79:a2:76:19:1c:18:9e:f5:5f:1d:28:0b:
                    7a:ae:0d:c9:7d:71:06:b5:c8:9b:b3:cc:e7:4a:86:
                    0b:36:3c:75:6a:50:b5:16:fd:aa:16:27:31:5b:60:
                    5f:d6:d6:80:3e:07:9b:23:2d:bc:e5:bb:b4:e4:7d:
                    93:c2:67:d0:67:e6:3f:be:d1:96:b1:42:aa:ed:aa:
                    20:ad:d5:50:8c:d2:82:88:8a:fb:a4:9f:40:37:31:
                    69:f0:96:7b:ad:4a:be:fd:af:08:9e:d5:12:cb:5d:
                    0f:8a:77:74:cc:25:28:e1:50:49:ed:6a:51:63:8e:
                    f9:b5:14:a8:4a:2e:8f:34:2e:f0:f1:f9:47:e9:86:
                    e4:58:68:be:aa:5f:b6:5c:12:03:1b:b7:dc:2d:b4:
                    cf:c6:bb:a8:1f:3f:6c:e5:21:92:47:c8:cd:bd:5b:
                    80:57:a7:1c:93:0a:b0:4a:6d:d9:ef:e4:43:93:39:
                    12:e3:77:d5:f9:74:27:46:c6:a4:56:cc:e5:ed:3b:
                    bb:3e:20:3a:cc:ce:ff:1d:82:2f:b0:9f:7f:2a:ec:
                    f0:57:71:2e:d6:f8:19:29:f8:79:c0:ea:a6:76:60:
                    3f:e8:b0:64:54:17:8d:16:dd:a6:e4:b6:89:59:d7:
                    f7:e6:32:8c:04:2b:84:c0:86:80:71:66:12:be:cd:
                    e6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:41:3D:10:B0:8B:ED:D7:9C:89:64:5B:78:8B:D8:C6:D4:9C:34
            X509v3 Authority Key Identifier:
                keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:14:22:1e:38:dd:b3:c6:2d:ef:15:bd:16:c6:07:91:de:
         fa:85:c6:d2:4d:12:c7:a6:f1:ef:00:b9:59:d6:e5:d6:6d:2c:
         ac:a6:8c:b5:da:da:73:0a:67:fa:f8:43:c4:07:e6:a3:58:42:
         90:62:f2:5e:75:b8:f2:15:01:48:a3:cb:6d:f6:19:a0:41:ca:
         48:aa:83:d8:e6:59:06:22:a2:63:24:ab:f4:42:d9:53:f1:ce:
         8a:9b:e8:7e:e3:c2:41:63:b3:0e:c4:06:96:92:d7:cb:60:2b:
         1e:5b:15:4f:90:07:9b:7a:90:d4:9c:3f:db:08:78:72:b6:27:
         72:50:5a:78:35:77:f9:61:95:b9:eb:b8:76:8f:fb:01:be:d3:
         45:25:70:53:bb:bb:91:1b:74:3e:ab:9d:8b:10:65:10:51:53:
         05:c7:d8:1c:7d:ec:91:38:39:9d:29:c5:8b:0f:ac:9a:ee:58:
         6b:28:7b:34:da:11:bc:e1:1b:30:63:47:f2:fe:98:85:c8:3d:
         9a:69:cb:24:ee:10:df:a9:80:5f:7b:49:46:24:7e:40:d4:c0:
         ee:ae:b5:38:1e:36:0c:ce:2e:b9:35:01:6e:e0:91:c4:85:91:
         d7:90:b5:ad:ce:4e:5a:40:5c:f5:4b:0e:62:f7:4b:46:f7:1a:
         05:14:dd:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63Mxb6gbZlDMvQ0yrfT6FGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2VlOWE2ZDE0MDRjNjFlYjE5YjAyYjAyZDc0ZGE4M2E2
NjMzZGEwHhcNMjYwNjExMTUwMDM5WhcNMjYwNjEyMTUwMDM5WjAzMTEwLwYDVQQD
Eyg4NWQ2NDEzZDEwYjA4YmVkZDc5Yzg5NjQ1Yjc4OGJkOGM2ZDQ5YzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4d5onYZHBie9V8dKAt6rg3JfXEG
tcibs8znSoYLNjx1alC1Fv2qFicxW2Bf1taAPgebIy285bu05H2TwmfQZ+Y/vtGW
sUKq7aogrdVQjNKCiIr7pJ9ANzFp8JZ7rUq+/a8IntUSy10Pind0zCUo4VBJ7WpR
Y475tRSoSi6PNC7w8flH6YbkWGi+ql+2XBIDG7fcLbTPxruoHz9s5SGSR8jNvVuA
V6cckwqwSm3Z7+RDkzkS43fV+XQnRsakVszl7Tu7PiA6zM7/HYIvsJ9/KuzwV3Eu
1vgZKfh5wOqmdmA/6LBkVBeNFt2m5LaJWdf35jKMBCuEwIaAcWYSvs3mcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXWQT0QsIvt15yJZFt4i9jG1Jw0MB8GA1UdIwQY
MBaAFOk+6abRQExh6xmwKwLXTag6ZjPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYt
ZGI5MDU5MTNjYjg3LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80NTA4YzQtMzMyYi00MDNjLTlmNTYtZGI5MDU5MTNjYjg3
LzEvNlQ3cHB0RkFUR0hyR2JBckF0ZE5xRHBtTTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkkUIh44
3bPGLe8VvRbGB5He+oXG0k0Sx6bx7wC5Wdbl1m0srKaMtdracwpn+vhDxAfmo1hC
kGLyXnW48hUBSKPLbfYZoEHKSKqD2OZZBiKiYySr9ELZU/HOipvofuPCQWOzDsQG
lpLXy2ArHlsVT5AHm3qQ1Jw/2wh4crYnclBaeDV3+WGVueu4do/7Ab7TRSVwU7u7
kRt0PqudixBlEFFTBcfYHH3skTg5nSnFiw+smu5Yayh7NNoRvOEbMGNH8v6Yhcg9
mmnLJO4Q36mAX3tJRiR+QNTA7q61OB42DM4uuTUBbuCRxIWR15C1rc5OWkBc9UsO
YvdLRvcaBRTdPA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:22 2026 by rpki-client