Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          6E07BXLw1ZpxJ/iT9nlIIsaL1O745iD3RzvCA+pVJcQ=
Subject key identifier:   CF:FC:11:66:3E:13:6C:31:E7:EB:8E:A8:FF:3F:A7:39:15:AA:1D:D4
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       019E1C7D8F27A24470CD6149CEE5A586D810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0C1F
Signing time:             Tue 12 May 2026 14:00:51 +0000
Manifest this update:     Tue 12 May 2026 14:00:51 +0000
Manifest next update:     Wed 13 May 2026 14:00:51 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: AIsJZnPQCnf93RM6HOJYHe4SG5phR61weBtRm8SoX6o=)
                          2: H6-FSC2W-7MZwFLducWzxTiTk1Q.roa (hash: M01qYjr1lkeGo2Zh4TnE75ep6vS7RdnFiFA27dCWb7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:8f:27:a2:44:70:cd:61:49:ce:e5:a5:86:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: May 12 14:00:51 2026 GMT
            Not After : May 13 14:00:51 2026 GMT
        Subject: CN=cffc11663e136c31e7eb8ea8ff3fa73915aa1dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:c2:db:a0:6c:92:da:0f:7d:76:e7:f4:9d:
                    20:d7:da:a3:80:73:78:ba:d2:1c:78:b6:a2:50:e0:
                    56:3e:c8:7f:cb:0a:a0:6c:ec:3d:3d:a4:af:8d:77:
                    33:76:8b:26:de:25:0f:37:60:a2:e0:a9:b6:fb:e3:
                    13:68:6c:70:0b:7e:4c:70:d4:2c:fd:9e:d0:b5:54:
                    5c:59:02:cc:d6:91:6b:8c:b8:3e:27:ab:43:9d:e3:
                    a4:c4:85:fb:49:b4:17:6b:5e:f9:ee:f7:9d:6e:45:
                    ee:e0:ec:97:b2:2a:44:dc:bd:93:02:8c:eb:b5:55:
                    e3:78:bc:db:ab:b7:dd:d9:24:b6:61:68:84:90:b2:
                    11:c4:ef:59:9c:e6:e7:fa:03:65:bf:7b:0e:7f:37:
                    d0:47:c3:be:f4:eb:b7:d1:db:1a:cd:a7:f8:59:b9:
                    0c:83:a0:66:30:05:39:f4:1d:6b:04:99:ca:0d:db:
                    f5:4d:ce:12:42:9b:e5:ba:70:ac:aa:c6:e8:90:4c:
                    95:bf:fc:e8:56:08:6d:34:4f:c7:c7:ff:74:74:3d:
                    d3:53:e5:f0:66:e2:3e:9f:94:01:db:b1:6d:9e:a5:
                    45:37:6e:fd:5c:ef:69:e3:12:d0:65:9a:3e:4f:58:
                    b5:74:0f:06:4d:f7:81:25:7f:5f:62:c7:78:f0:69:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FC:11:66:3E:13:6C:31:E7:EB:8E:A8:FF:3F:A7:39:15:AA:1D:D4
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:27:72:35:8b:cc:8d:94:da:2d:ae:e7:b8:dd:9a:a3:cd:
         d6:af:fa:4a:6c:f1:e0:26:db:b6:3d:35:2d:ab:98:c2:cf:c2:
         45:0e:48:d2:75:ef:51:a1:36:7a:23:5e:ca:ee:ef:06:da:5e:
         86:32:c9:ad:5f:1c:45:73:d3:8d:f0:de:71:af:ca:72:fc:a8:
         e5:5e:3f:30:3c:c8:9b:85:59:7a:aa:0b:52:dc:49:f3:1d:33:
         b9:01:84:fd:81:65:a2:db:bf:c9:64:05:26:3f:ba:27:05:ad:
         2b:e0:a4:eb:be:cf:15:4a:29:e3:e4:cc:ff:18:8b:86:9e:e5:
         d0:c4:48:97:70:b1:0d:4f:25:03:f6:ec:ef:d0:e5:4a:d1:01:
         c9:40:f9:15:64:20:a1:a0:f4:47:98:64:19:5e:77:6e:9e:00:
         e1:6a:ee:b5:77:c0:18:ef:2e:db:44:20:77:cd:d1:f3:3d:f6:
         9d:af:6a:f5:3a:7b:6b:02:4b:54:8c:da:f8:fb:3a:9a:be:41:
         21:4b:19:ee:4f:a1:8f:aa:37:cf:3f:ed:ff:20:fb:99:64:42:
         1f:d2:4a:10:56:11:86:5a:5e:36:c0:8a:6b:9a:de:81:6a:24:
         56:6d:05:d4:f7:6d:0c:00:5e:03:4d:6b:46:f2:45:da:ab:6f:
         45:f4:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:31 2026 by rpki-client