Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
File:                     6R-du-aLhAJ87U0x6IA_E-nWXRM.mft (raw, json)
Hash identifier:          xOAi4x+8bANV82r106Ng3xmanK5h7eZBcU6OCHHnT/I=
Subject key identifier:   A6:9A:AE:99:A8:19:EE:4A:EC:06:E3:2E:FC:40:6A:86:13:DC:D8:8D
Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
Certificate issuer:       /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Certificate serial:       019E1DFEC80BE3D070FB7CE71B1F15927F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
Manifest number:          1617
Signing time:             Tue 12 May 2026 21:01:37 +0000
Manifest this update:     Tue 12 May 2026 21:01:37 +0000
Manifest next update:     Wed 13 May 2026 21:01:37 +0000
Files and hashes:         1: 6R-du-aLhAJ87U0x6IA_E-nWXRM.crl (hash: mrBFzI6nAMWHDjB49PNonQ2ZuNzP7FZcwBT1sZBFaR4=)
                          2: OG5yYZRHtJiYyq5pO1FIDH0wwrY.roa (hash: v0N9aSxgVv0t0A+JdFIJk1kR33YnQpvCxp6VxxBAxC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:c8:0b:e3:d0:70:fb:7c:e7:1b:1f:15:92:7f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
        Validity
            Not Before: May 12 21:01:37 2026 GMT
            Not After : May 13 21:01:37 2026 GMT
        Subject: CN=a69aae99a819ee4aec06e32efc406a8613dcd88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:24:96:7b:ec:d1:c4:dc:7c:88:7c:6c:9f:
                    ee:cc:48:e6:9d:f2:68:69:47:33:e8:f3:7c:7d:44:
                    b0:70:d2:9b:4a:1d:2b:23:e7:f7:01:04:16:c4:27:
                    5e:37:4e:36:13:a2:df:1e:d0:f0:f6:92:9c:5e:a8:
                    a6:ea:71:23:5e:19:35:51:0c:93:de:a3:a3:50:cc:
                    f1:68:40:a8:86:b7:1b:b0:b4:09:c2:fb:92:7b:a4:
                    b7:69:dd:74:ed:a1:68:d1:1a:33:63:4b:4b:c5:aa:
                    a6:9c:2b:a2:d4:56:08:75:d0:38:02:a6:90:58:3e:
                    c4:f7:fe:f3:26:2b:f7:3a:2e:11:cc:8d:ab:9f:fa:
                    f9:16:14:b7:22:67:29:72:d3:cb:5e:61:bd:66:2f:
                    2a:bd:ca:67:7d:95:e9:fb:b8:0a:c4:4a:bf:dd:62:
                    78:a1:f9:a8:ad:1d:02:03:7a:7d:47:4b:a5:f5:93:
                    8a:fe:b5:62:1b:9e:e6:1e:7d:e5:ba:c5:1c:67:dd:
                    09:27:14:52:d1:ef:4b:46:59:a8:15:ce:1c:b9:ed:
                    21:2a:08:17:4b:e6:2e:1e:12:98:81:7c:cc:b4:db:
                    e9:9e:66:43:b4:79:30:df:9a:37:a1:5c:c1:95:42:
                    10:c1:07:67:08:13:0a:6d:4a:ae:25:98:f1:d3:02:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9A:AE:99:A8:19:EE:4A:EC:06:E3:2E:FC:40:6A:86:13:DC:D8:8D
            X509v3 Authority Key Identifier:
                keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:d4:f1:de:f1:36:00:67:50:bf:d9:2a:fd:2e:8b:73:66:31:
         1e:21:66:c4:c1:2a:a9:fc:a1:c6:66:f9:50:f9:f6:9a:e7:c7:
         30:b6:51:b9:85:be:e9:49:70:5e:a0:a2:85:9c:09:c9:87:99:
         dc:7b:e3:1a:0a:76:91:4c:2f:68:d9:f6:80:f9:2e:19:fe:ea:
         0a:99:bb:e7:72:3e:53:0d:fd:5c:c9:4a:f4:9c:33:8b:40:d2:
         e0:f9:fa:b1:9a:e9:58:4f:6b:db:b5:14:8d:b2:c6:f7:c1:0d:
         6f:7a:ba:77:ea:9f:63:44:7b:33:c9:3f:57:9f:76:3b:31:9c:
         a0:49:ca:b7:33:75:ff:42:48:a3:8d:51:ca:49:ef:3c:b6:e3:
         96:45:c0:e4:c7:32:39:2d:bb:0c:78:51:d8:89:5f:90:b0:4b:
         db:b3:ac:98:df:b5:c3:8e:31:3f:52:dc:cc:9a:40:cc:6d:26:
         64:64:ae:b7:9b:90:3c:0d:85:17:21:1a:9f:24:b2:db:f0:52:
         f1:47:8e:7e:b6:42:0a:0d:20:81:ca:b5:9f:07:7a:d5:da:cc:
         ff:80:ab:5c:ca:3c:73:3a:af:7e:8d:1f:40:bf:bc:f2:fc:67:
         ec:a6:59:8c:6d:61:0c:ab:42:fa:c9:50:5a:0b:f6:fe:9a:fa:
         72:ef:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:37 2026 by rpki-client