Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File:                     ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier:          sqCq5k6AKzwZI/dYXrPsCCRUV3Lex3Boy9BaDKpfb/k=
Subject key identifier:   4F:39:C3:CC:7F:07:5B:C1:2B:44:95:13:C1:67:0F:8D:C6:6B:8C:D2
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer:       /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial:       019E1EA3984B7C482B750AE38B53A34828C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number:          0B6B
Signing time:             Wed 13 May 2026 00:01:38 +0000
Manifest this update:     Wed 13 May 2026 00:01:38 +0000
Manifest next update:     Thu 14 May 2026 00:01:38 +0000
Files and hashes:         1: b7voUZ91irBy-SIdwQFXM1Mmisg.roa (hash: u5pJ8/7+RE55Lx1+l+Oy8gg74nJnCPyFku6WokUubNU=)
                          2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: twmgaED/KqaSxENPuG4kAOZMLoSBVuLXSn1w0oUPeVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:98:4b:7c:48:2b:75:0a:e3:8b:53:a3:48:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
        Validity
            Not Before: May 13 00:01:38 2026 GMT
            Not After : May 14 00:01:38 2026 GMT
        Subject: CN=4f39c3cc7f075bc12b449513c1670f8dc66b8cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5a:9a:31:e0:ff:9e:4a:bd:94:87:d3:da:0e:
                    aa:c7:b7:ab:95:7e:e2:a8:e7:77:3c:9e:6d:f7:46:
                    3b:a5:55:da:31:2b:1d:b8:db:e4:3c:88:74:67:36:
                    1f:22:4c:79:8a:57:dc:99:bd:eb:7e:d1:a9:c6:33:
                    fd:cb:82:bf:ec:35:36:5a:e4:4a:90:2e:9a:a6:74:
                    7f:9a:4c:35:81:12:00:cf:f5:6d:24:70:47:6f:53:
                    55:bf:a8:eb:f2:5e:2b:88:16:96:fd:43:71:c7:93:
                    cc:60:cc:08:eb:aa:e0:2d:cb:91:52:e3:e0:79:b0:
                    90:ad:f7:6f:b5:7e:9c:71:05:ea:b5:fb:d6:41:e7:
                    25:a2:c6:d7:5f:2e:a3:93:2d:89:59:57:50:52:e9:
                    ad:92:6a:ce:d8:05:de:d7:6f:0f:97:86:d7:ce:ea:
                    07:e3:31:13:95:db:64:c3:eb:77:ca:fc:d2:2a:4b:
                    50:31:d8:13:a7:69:bb:1c:df:91:eb:9d:f9:df:1c:
                    0f:cc:88:90:51:6c:3e:57:48:88:1d:da:3c:bd:85:
                    47:1b:0a:08:42:d1:f1:a0:64:4d:5c:e9:c0:a9:98:
                    18:a5:b2:87:f5:2e:f7:8b:b5:02:1b:3a:32:66:c3:
                    90:cf:61:81:3e:3e:8a:3c:86:23:c5:39:07:26:cb:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:C3:CC:7F:07:5B:C1:2B:44:95:13:C1:67:0F:8D:C6:6B:8C:D2
            X509v3 Authority Key Identifier:
                keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:42:fb:5c:2a:1b:96:10:e3:08:62:33:1b:da:97:10:a8:29:
         90:bf:d0:fb:a2:14:ea:28:4a:35:8e:fb:a9:4c:55:4f:81:7d:
         ed:b5:12:73:5a:74:d7:66:41:9d:a8:66:17:04:f0:48:82:9c:
         9f:c7:ef:57:c9:1c:49:1f:ce:c0:09:d1:05:cb:57:4f:cc:b2:
         f6:43:2f:89:25:7f:62:61:87:42:62:c1:38:e8:19:88:00:33:
         4e:96:87:2a:fd:6e:21:35:9e:96:e5:e4:fd:26:67:42:4b:d9:
         e5:4d:ee:b5:57:6a:11:b3:ea:e5:26:8b:38:f3:b5:e6:a0:13:
         2e:7a:1c:26:4c:73:5d:2a:09:64:4f:1d:a3:5c:72:63:fd:c3:
         52:18:5a:bd:bd:b9:25:96:3d:15:47:c1:74:32:11:0b:b2:77:
         7f:8a:82:5c:ce:07:a2:e6:18:76:09:3f:3c:8b:e1:1b:86:66:
         b1:9e:da:2b:dc:ff:b0:3f:2e:61:85:c6:81:31:f6:22:c0:f1:
         ec:ee:01:98:25:c7:1f:34:9d:e8:5b:87:45:47:73:ca:8f:c1:
         ad:86:9e:b2:b6:9d:f3:29:40:45:e0:12:5d:d5:2e:ea:79:59:
         a0:17:8a:f0:7b:07:45:69:d7:79:fe:cd:b6:69:c9:0b:be:05:
         80:a4:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:00 2026 by rpki-client