Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
File:                     6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft (raw, json)
Hash identifier:          dRVi42PZ5ZBlEYWG297Nlo0rgjk/VgesP/YcHXNL/jM=
Subject key identifier:   04:D5:E8:24:BC:A7:F1:94:44:97:F7:DE:8D:53:A8:C1:DF:5E:82:40
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Certificate issuer:       /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial:       019E1F47A249FD5D5D8DD622B48A4777AA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
Manifest number:          0697
Signing time:             Wed 13 May 2026 03:00:48 +0000
Manifest this update:     Wed 13 May 2026 03:00:48 +0000
Manifest next update:     Thu 14 May 2026 03:00:48 +0000
Files and hashes:         1: 6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl (hash: STAryF4SElo3C8NfypSemptjVDptof2baFdJRDF9oNU=)
                          2: oZ-NShlT_PL7bWC8iU9jChVS2Vk.roa (hash: FGb9nSTivNu/mVtaJHoZo1Y7HN3bgy2TP4MFuiqpk7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:a2:49:fd:5d:5d:8d:d6:22:b4:8a:47:77:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e847e88749704294552fef54886111ed0586ec24
        Validity
            Not Before: May 13 03:00:48 2026 GMT
            Not After : May 14 03:00:48 2026 GMT
        Subject: CN=04d5e824bca7f1944497f7de8d53a8c1df5e8240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:c4:a9:ec:e2:fe:e2:fa:ca:49:ab:28:d0:
                    81:77:e3:1e:8a:aa:18:fe:b7:3e:3a:67:e5:fd:c9:
                    a0:f3:9d:86:f0:78:fb:80:a8:dc:e3:8f:9b:32:41:
                    e9:95:85:35:2a:cc:12:0a:6e:eb:81:e2:1e:12:06:
                    e4:b5:10:af:a3:de:84:01:dc:7a:e8:a7:20:2d:08:
                    c4:e1:53:a8:56:a5:ae:1c:23:6c:52:30:50:a9:9e:
                    b1:33:2e:02:76:b5:74:87:d3:98:d2:0e:f8:73:e1:
                    6b:ce:3d:08:47:3e:c5:61:33:4d:04:cd:90:d4:d9:
                    2b:44:fd:d0:f8:a6:3c:b2:b4:d1:4c:ec:ed:64:71:
                    69:c6:1c:eb:bf:b9:68:60:5a:f3:2f:a9:73:55:02:
                    71:c7:4d:da:29:dd:b0:29:17:a5:20:ef:8f:f8:67:
                    c0:b6:f4:52:fe:71:75:32:0a:71:83:b4:88:0b:4d:
                    8d:e5:94:d0:c0:d5:55:95:ee:af:ff:c2:c7:1e:45:
                    20:d2:85:c6:55:fe:0e:84:0c:52:71:e2:7f:76:83:
                    cd:00:f0:40:3d:a7:a5:ce:10:3f:e6:c1:3d:4a:b4:
                    63:f0:4c:fa:78:8c:34:e6:d1:27:20:f3:ff:1c:f1:
                    19:92:98:29:68:f3:4e:2a:62:54:a7:46:ff:07:01:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D5:E8:24:BC:A7:F1:94:44:97:F7:DE:8D:53:A8:C1:DF:5E:82:40
            X509v3 Authority Key Identifier:
                keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f4:ab:d4:73:13:0b:9f:db:5b:a8:ba:01:20:f0:7d:b7:e9:
         a7:b7:cd:f0:54:e7:72:1c:44:d0:cf:d3:e4:50:7f:a9:5d:eb:
         4e:b9:c7:7f:d1:46:9c:01:ed:fa:31:35:6c:f6:07:1f:65:50:
         d3:bb:08:46:36:b3:7f:de:42:5d:87:97:5f:8e:a2:71:c5:1f:
         8a:f9:0e:12:10:61:41:f7:36:f2:9e:11:98:52:e1:3d:a0:b0:
         5c:bc:8b:e0:69:53:40:cb:07:67:84:eb:72:91:82:e6:11:f8:
         01:22:79:47:9a:91:e7:a5:0a:c4:21:53:2d:0c:0b:3b:e7:bf:
         ba:f4:3c:eb:d7:78:69:fa:b1:b0:95:6f:43:aa:15:be:b2:64:
         bf:83:c6:68:9d:35:2a:cc:d1:c1:ad:32:16:6d:35:11:2d:db:
         3b:2d:16:4e:82:b5:51:0c:0b:72:8a:cf:9a:82:62:07:dc:c6:
         34:2b:d5:98:5d:5a:e2:6d:b8:0d:1e:79:a3:51:da:9f:4a:17:
         c3:e4:48:1b:16:b5:3a:f7:3b:ce:ee:ae:32:24:50:f0:3e:97:
         38:08:4e:33:77:18:d3:a9:b5:ea:58:7e:9b:40:2d:22:d8:0b:
         bd:06:1e:05:b0:ff:7f:41:db:49:9a:d1:dc:b8:b7:1e:54:43:
         dd:b8:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:14 2026 by rpki-client