Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          kuSBIEFpovqaA5EByvSjBkZsrTPUNnL7snCnzh3NXUM=
Subject key identifier:   3F:FC:E3:AD:95:0D:90:35:B8:56:88:05:6A:29:C0:A8:FF:CE:18:64
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       019F17F9927BCA9EAB0C5F6B0961A4F54314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 10:00:59 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:59 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:59 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: p7i8xtDKHFiLrL9+5ClM5Xyi7RNBmONFkJHXxFKU6rs=)
                          2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:92:7b:ca:9e:ab:0c:5f:6b:09:61:a4:f5:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: Jun 30 10:00:59 2026 GMT
            Not After : Jul  1 10:00:59 2026 GMT
        Subject: CN=3ffce3ad950d9035b85688056a29c0a8ffce1864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:3a:dd:4b:bb:62:9e:9d:59:d1:dc:38:aa:
                    f3:38:3c:dd:69:fe:1b:0a:82:68:b3:dc:03:4a:e3:
                    55:54:a0:6e:40:de:6a:65:27:e2:f8:84:10:07:d6:
                    f2:0f:e7:77:4f:0c:15:24:b9:8f:5a:5e:41:31:ad:
                    8b:72:ad:bb:7e:9d:42:42:f0:6e:51:83:79:c7:b5:
                    d9:a1:d9:36:6e:39:db:54:14:f1:d4:b7:c2:54:67:
                    fe:df:3a:2f:3f:8a:48:fd:a1:f7:2a:6a:ab:19:43:
                    71:f6:0b:ed:f3:a1:38:91:b3:36:f7:80:a1:98:03:
                    59:b9:5d:c9:30:59:f3:7b:78:65:68:fc:cf:5c:ec:
                    4f:4f:42:88:42:5e:d0:aa:d6:62:cb:4c:ef:a5:d7:
                    46:73:15:6a:59:1b:24:de:d6:6d:87:94:db:e7:21:
                    54:9c:08:67:2f:f9:3f:ad:8f:57:90:27:d4:1e:68:
                    7e:dc:b2:62:d7:10:86:f7:42:f3:b2:7e:08:21:d1:
                    10:da:3d:e4:11:42:a1:1f:b6:ad:54:fd:93:59:de:
                    69:ff:fc:49:2b:61:5f:e1:f3:1e:f6:e0:c6:a3:05:
                    8a:46:1e:4c:44:72:41:42:72:de:db:57:06:9c:6a:
                    55:2a:20:ba:08:17:2b:7d:b0:0f:36:62:9d:0a:ac:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FC:E3:AD:95:0D:90:35:B8:56:88:05:6A:29:C0:A8:FF:CE:18:64
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:0b:41:e9:a0:8d:14:a3:eb:a8:de:cd:cb:61:44:51:23:
         b4:41:a7:6f:71:44:a4:96:2c:c2:aa:47:84:69:15:c6:41:0f:
         5a:b0:1a:18:f8:24:b0:88:32:ee:fc:f8:18:6f:1e:53:a2:a2:
         6c:e2:1f:60:a1:b9:a4:3b:79:40:ca:a1:ad:24:17:f2:21:f0:
         d5:fe:fc:18:cc:d6:b3:31:79:78:8c:0f:54:bb:94:be:39:7d:
         5d:59:6a:9b:8a:6f:17:e1:30:f0:da:23:34:22:75:3f:c7:8e:
         c8:98:82:77:92:2b:20:39:37:ec:70:36:c0:e0:4a:8b:cd:1e:
         fe:dd:a5:b8:a2:ea:58:17:98:b8:21:e8:45:1a:81:b2:12:d8:
         cc:8c:d9:95:c3:c6:04:87:7b:e4:cc:aa:06:e7:d3:61:48:f1:
         ec:78:1e:3e:95:ad:5b:da:c8:9b:22:43:e9:25:7d:f3:3f:62:
         00:dc:d6:5f:92:e6:11:71:8b:74:06:83:31:c0:9e:d6:7d:78:
         35:6b:b3:ba:8f:bd:ba:f7:95:0a:be:9e:9a:51:6a:9a:71:8d:
         34:57:c5:a6:0a:4b:fa:9e:27:e0:1b:e8:65:20:32:50:68:01:
         ea:52:fd:1c:00:d9:9d:83:12:b8:b8:49:4b:c4:51:d5:40:71:
         31:09:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:07 2026 by rpki-client