Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
File:                     6b_QQQx787sddbGKyx6WOTrSGyY.mft (raw, json)
Hash identifier:          5yueiKRd66s4syKI18F5FDSSK4igx64OBAj4ImL3bwk=
Subject key identifier:   1C:7D:AB:05:E1:8A:7F:10:55:38:82:57:51:4D:FB:AB:95:A0:97:B5
Authority key identifier: E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
Certificate issuer:       /CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Certificate serial:       019E1CB4A8FF7ADC400CBB4931FC3482FADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
Manifest number:          0557
Signing time:             Tue 12 May 2026 15:01:02 +0000
Manifest this update:     Tue 12 May 2026 15:01:02 +0000
Manifest next update:     Wed 13 May 2026 15:01:02 +0000
Files and hashes:         1: 6b_QQQx787sddbGKyx6WOTrSGyY.crl (hash: niD22MB+M5tQ2F+51plgIyq+rZ8oCtVPnh93y3QB0D4=)
                          2: F3X7MGphOVLy3qLOlM8u8925d-g.roa (hash: QuCdwiNh2aiJSqZcqO+4VQey4HHIeLMs+gxMOR2IHqc=)
                          3: X6Frk-bFREFIU8-4FRHBcUG-R98.roa (hash: IRukJrmwHN4dm9EH4B/VQqDoIL4DPVuiwAyqo+04bp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:a8:ff:7a:dc:40:0c:bb:49:31:fc:34:82:fa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
        Validity
            Not Before: May 12 15:01:02 2026 GMT
            Not After : May 13 15:01:02 2026 GMT
        Subject: CN=1c7dab05e18a7f1055388257514dfbab95a097b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:1c:6d:ca:63:cc:d3:47:ea:d1:f9:d4:eb:
                    1c:e8:90:71:65:34:6c:4b:98:78:5f:6d:b4:6a:92:
                    65:01:57:07:4f:eb:4d:f6:1d:8d:c7:24:e5:db:92:
                    d2:05:93:b7:82:d3:7a:3e:0d:72:b5:f1:e6:25:18:
                    51:6a:96:37:4b:e9:55:ae:cb:0e:ab:e7:e1:4b:ab:
                    09:73:f9:d4:67:c1:f4:e3:44:03:18:f8:98:bf:00:
                    ca:6a:a1:c5:c9:e8:bc:1f:3e:a4:c2:01:2e:57:f8:
                    3b:23:b8:4d:89:e6:9f:21:24:20:1f:8a:15:ba:3d:
                    75:59:1d:d4:62:09:48:e9:cd:4a:16:4f:b1:0f:48:
                    b3:98:db:fa:f0:c9:66:5f:df:89:0c:92:7c:18:7e:
                    9d:60:74:82:03:8a:c2:6f:4f:44:20:96:86:5d:44:
                    e3:0b:d4:73:78:66:ff:1c:85:93:9c:99:16:8b:b4:
                    31:25:f2:06:54:8a:7a:e2:42:92:b5:50:19:92:83:
                    3b:b3:81:2d:d1:d6:b1:aa:e2:05:15:65:00:57:3b:
                    2c:f9:ed:7f:74:57:ef:e0:4b:8f:67:66:4f:d3:1c:
                    25:de:e8:aa:1a:8a:0c:43:63:42:be:c9:46:4c:ca:
                    36:35:ca:9a:1f:d4:08:c3:05:07:8c:e8:2d:69:c9:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:AB:05:E1:8A:7F:10:55:38:82:57:51:4D:FB:AB:95:A0:97:B5
            X509v3 Authority Key Identifier:
                keyid:E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:6d:cd:49:1a:69:8e:71:77:74:42:96:73:78:d0:38:8c:2b:
         00:24:b1:6f:9f:f6:5b:07:5e:6f:9c:c3:c4:b8:4e:03:2a:fd:
         e5:78:3f:43:e9:1f:04:37:8e:42:c5:e6:b1:9f:e5:b8:8d:60:
         5a:c4:90:d1:6d:3a:8d:89:28:e5:6d:c3:e4:4a:4f:4a:26:b1:
         db:f3:ae:e0:a6:95:ca:b3:75:d3:b8:96:ca:31:c9:ad:85:83:
         ee:8e:2a:36:e6:4c:7b:f3:9a:86:8d:3d:b2:ea:cb:c5:1c:24:
         a2:15:0a:ab:20:7a:8b:b1:79:e2:64:a3:31:e9:18:b3:d0:fd:
         86:92:d2:d4:19:29:9e:e5:d2:dd:2a:6c:d9:86:76:fc:d8:c5:
         58:ba:c7:14:32:f1:d6:7a:c5:8b:0c:f9:dd:0f:fd:b8:16:6b:
         dc:8f:d1:94:56:9c:97:d4:57:58:3e:f5:28:33:42:2b:7d:93:
         b5:e2:c8:f5:6f:e4:57:ed:72:cc:09:11:16:6f:dc:47:8a:94:
         4e:e0:02:55:59:51:6f:0a:c9:c8:26:d4:af:8c:50:c3:76:00:
         76:cb:ea:30:12:f5:8e:7b:93:8c:65:fa:3f:6e:35:30:81:91:
         db:8d:7a:47:92:bc:37:be:a3:b8:c4:c6:34:a3:25:48:f7:f2:
         c3:12:98:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctKj/etxADLtJMfw0gvrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YmZkMDQxMGM3YmYzYmIxZDc1YjE4YWNiMWU5NjM5M2Fk
MjFiMjYwHhcNMjYwNTEyMTUwMTAyWhcNMjYwNTEzMTUwMTAyWjAzMTEwLwYDVQQD
EygxYzdkYWIwNWUxOGE3ZjEwNTUzODgyNTc1MTRkZmJhYjk1YTA5N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAkcbcpjzNNH6tH51Osc6JBxZTRs
S5h4X220apJlAVcHT+tN9h2NxyTl25LSBZO3gtN6Pg1ytfHmJRhRapY3S+lVrssO
q+fhS6sJc/nUZ8H040QDGPiYvwDKaqHFyei8Hz6kwgEuV/g7I7hNieafISQgH4oV
uj11WR3UYglI6c1KFk+xD0izmNv68MlmX9+JDJJ8GH6dYHSCA4rCb09EIJaGXUTj
C9RzeGb/HIWTnJkWi7QxJfIGVIp64kKStVAZkoM7s4Et0daxquIFFWUAVzss+e1/
dFfv4EuPZ2ZP0xwl3uiqGooMQ2NCvslGTMo2NcqaH9QIwwUHjOgtacn4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx9qwXhin8QVTiCV1FN+6uVoJe1MB8GA1UdIwQY
MBaAFOm/0EEMe/O7HXWxisseljk60hsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJfUVFReDc4N3NkZGJHS3l4NldPVHJTR3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84ZDkzOWYtOWVmOS00MDc2LWE4ZjMt
N2E3MGI3ODdkMmVmLzEvNmJfUVFReDc4N3NkZGJHS3l4NldPVHJTR3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84ZDkzOWYtOWVmOS00MDc2LWE4ZjMtN2E3MGI3ODdkMmVm
LzEvNmJfUVFReDc4N3NkZGJHS3l4NldPVHJTR3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz23NSRpp
jnF3dEKWc3jQOIwrACSxb5/2Wwdeb5zDxLhOAyr95Xg/Q+kfBDeOQsXmsZ/luI1g
WsSQ0W06jYko5W3D5EpPSiax2/Ou4KaVyrN107iWyjHJrYWD7o4qNuZMe/Oaho09
surLxRwkohUKqyB6i7F54mSjMekYs9D9hpLS1BkpnuXS3Sps2YZ2/NjFWLrHFDLx
1nrFiwz53Q/9uBZr3I/RlFacl9RXWD71KDNCK32TteLI9W/kV+1yzAkRFm/cR4qU
TuACVVlRbwrJyCbUr4xQw3YAdsvqMBL1jnuTjGX6P241MIGR2416R5K8N76juMTG
NKMlSPfywxKYeA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:14:58 2026 by rpki-client