Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          R9l9x0AgUdWux4dM5o9tAGPUNBxVoGQtrFlLr66K+Ps=
Subject key identifier:   12:40:01:70:4C:AC:D9:20:1B:11:26:96:A7:41:09:E2:49:F4:05:D6
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       019E20910A36D9771C89780C61FEE50918D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          13B4
Signing time:             Wed 13 May 2026 09:00:36 +0000
Manifest this update:     Wed 13 May 2026 09:00:36 +0000
Manifest next update:     Thu 14 May 2026 09:00:36 +0000
Files and hashes:         1: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: iCKPZ6oHTgscuqMIdT/8Q+HvFy3+a2qkfjPih5TJ7U0=)
                          2: geUvZA4ewTlG88hTMf-uSmrWhDQ.roa (hash: 2pWVSfUZrGtWyoII6+WIJ6jWbQPbI427Ph6KkMpwer0=)
                          3: jOZj1C3xGT3lCOMlr8mrVCcGvuU.roa (hash: xZbQL/ocO4+4b8f47kEc3Iqc1SZWkZf9JiGEHoGlE6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:0a:36:d9:77:1c:89:78:0c:61:fe:e5:09:18:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: May 13 09:00:36 2026 GMT
            Not After : May 14 09:00:36 2026 GMT
        Subject: CN=124001704cacd9201b112696a74109e249f405d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:51:e2:f5:78:d4:40:42:e8:31:4a:12:e6:
                    e8:12:94:ad:7c:12:4b:24:c5:3d:90:a1:d6:f7:19:
                    8e:aa:d8:be:7d:a1:dc:03:9e:7b:5f:76:03:23:66:
                    22:ae:0a:87:fc:f8:59:19:84:56:1f:e5:57:17:2f:
                    da:89:7a:31:88:06:0c:54:71:4a:66:d5:16:4c:47:
                    8d:5c:6d:84:29:7f:0f:e1:ad:ca:52:7c:a1:62:9d:
                    d7:25:a1:1d:93:bd:6a:17:72:98:c4:73:e0:8a:c9:
                    04:13:13:6b:b8:47:9d:af:3f:2a:a4:0a:09:45:c8:
                    35:ce:b0:bc:f9:4d:bf:17:17:79:1d:e0:fc:bb:80:
                    65:05:d8:3a:17:16:e6:36:6b:6c:6a:e5:92:b7:b9:
                    99:ff:fc:8e:37:9d:18:c7:46:da:cc:69:1e:b8:6f:
                    04:6c:63:20:8a:05:e0:1e:6c:bc:f0:2c:a3:93:a7:
                    c1:b3:20:e2:c4:fe:51:2f:c0:5a:ef:83:86:1b:14:
                    7d:62:5f:56:c5:05:87:4e:98:bf:1d:a1:5f:d0:f5:
                    24:10:ad:d0:de:04:ae:e3:92:59:86:85:90:33:c5:
                    38:c9:d4:3f:00:4c:42:de:fe:6c:59:0c:38:bd:8b:
                    17:28:8a:8a:3c:1e:74:81:e0:cb:85:8c:b3:ac:5b:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:40:01:70:4C:AC:D9:20:1B:11:26:96:A7:41:09:E2:49:F4:05:D6
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:5a:a6:9a:be:bd:47:f2:1f:12:a3:12:97:8b:c5:c5:32:
         b2:f3:83:e6:31:c0:45:3d:b2:57:9f:ee:f0:73:a8:4a:58:76:
         6f:e2:8a:98:0d:0e:46:20:ca:a4:23:2e:ac:64:11:45:65:bd:
         70:73:af:ed:66:8a:85:64:e1:44:57:f0:82:4e:bd:44:07:42:
         d1:c6:1c:e3:e0:b7:11:41:83:f1:13:a2:25:a3:2d:80:eb:9a:
         df:21:19:84:e6:5f:ee:0c:7a:da:72:50:a5:57:a9:52:6e:bd:
         bb:f5:fb:78:e6:36:a3:99:d6:99:c4:63:b3:70:c5:6c:2f:4c:
         ac:c2:25:c9:52:7d:50:43:c9:9e:70:1b:29:dd:4f:f5:8e:98:
         99:67:ac:ad:15:68:e2:f3:de:b4:a8:18:af:ef:e6:99:ad:c2:
         5d:74:a7:57:20:a2:3a:a4:9d:91:ed:cc:72:2d:fc:3b:de:f1:
         36:d7:de:00:2c:f8:f7:9f:42:20:f4:41:bf:60:ba:8f:7b:87:
         c4:ee:6c:b2:0f:66:49:06:d0:e8:47:b6:f7:56:65:4b:2c:4f:
         42:1e:72:a4:0a:cd:a2:2d:1e:e4:ac:7c:7c:2d:bb:c2:b7:2d:
         ff:33:38:e1:41:3a:29:af:73:17:30:49:f9:64:9a:c1:fe:3a:
         94:da:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:48 2026 by rpki-client