Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          NchtDKISFZj/J+8AbPQPj5OHdnbx809slTEgvc8/c44=
Subject key identifier:   2E:7B:9E:E5:3D:50:F9:26:DC:3F:63:33:75:F0:E3:B2:76:DE:3C:C9
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       019E1E35F2BAF6F316F5BA64694B883963BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          1187
Signing time:             Tue 12 May 2026 22:01:52 +0000
Manifest this update:     Tue 12 May 2026 22:01:52 +0000
Manifest next update:     Wed 13 May 2026 22:01:52 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: 4MnjNmSv7FODtX/nXcfQf/7JRCmh5/eHTSlVMBCG+Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:f2:ba:f6:f3:16:f5:ba:64:69:4b:88:39:63:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: May 12 22:01:52 2026 GMT
            Not After : May 13 22:01:52 2026 GMT
        Subject: CN=2e7b9ee53d50f926dc3f633375f0e3b276de3cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:8f:fe:ed:b4:5c:7c:2d:a9:3f:67:dc:7b:
                    b1:c2:5f:a4:4a:40:9b:21:33:6d:e5:d2:ae:8f:30:
                    fa:a1:19:d8:33:ae:0f:05:78:43:ab:95:94:6e:ef:
                    59:f3:74:63:7c:ef:75:37:b4:77:8d:ec:64:d2:95:
                    a2:fa:ed:96:62:10:9e:8b:a9:0b:9b:7c:55:e5:28:
                    6b:9b:db:f4:d4:f5:8b:fb:bc:80:c0:6c:5f:75:e4:
                    fb:73:24:d3:6e:eb:ad:ab:2c:2a:8b:1b:1c:53:22:
                    6e:e1:27:07:34:78:a4:ea:39:86:d0:cd:c6:01:28:
                    d8:74:b6:a9:aa:54:90:fc:5f:c6:5c:ca:e4:1a:dc:
                    44:47:81:4a:5c:c7:3e:ab:54:5f:80:6b:77:8d:8c:
                    f4:05:8a:c8:36:43:44:ab:0e:c4:49:11:d7:50:9e:
                    ed:40:64:27:27:07:28:2d:f9:ab:10:e0:dc:df:87:
                    41:5c:c1:5b:03:a0:04:14:a5:e9:a2:ab:88:32:46:
                    88:e7:e1:55:e5:af:d7:a6:73:d7:33:8f:ad:a4:1f:
                    52:ad:f0:a5:88:c2:5d:f3:44:7f:0f:e8:ae:e6:c1:
                    5b:b5:2e:be:11:15:0b:70:ff:0f:22:82:12:61:a1:
                    e1:b7:2c:b5:46:6c:61:1c:c9:97:a7:6d:65:c5:28:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:9E:E5:3D:50:F9:26:DC:3F:63:33:75:F0:E3:B2:76:DE:3C:C9
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:22:83:e9:1c:24:94:76:9d:98:f9:85:ef:cc:5c:dd:3d:37:
         86:cf:75:63:3b:59:a8:28:12:0b:47:2d:1a:14:6d:ea:09:78:
         a0:01:cb:f3:15:94:c6:f8:e5:a4:33:e7:88:57:27:78:f1:f8:
         3f:8c:1b:ac:2d:2a:92:f7:69:b5:23:ca:02:7d:2e:a6:b0:7f:
         88:3a:a3:cb:01:9d:37:c0:8c:04:c7:79:3b:9e:c9:ce:2d:61:
         06:e7:ee:a5:67:a9:ce:c9:19:f9:01:34:7a:21:e5:f7:94:d1:
         75:c8:fa:2a:71:ca:57:3f:e2:eb:31:a0:f0:c6:f6:2f:66:32:
         c5:59:37:7c:e4:c1:08:c0:06:8c:0c:79:ea:43:71:2a:de:99:
         ec:ca:9e:ab:b5:69:e1:0b:65:12:03:5f:b7:e8:ff:25:52:c2:
         cb:fe:29:e7:a8:60:88:03:c5:ed:1a:de:d9:25:ca:4d:cf:bb:
         d1:00:3f:db:8e:e0:55:38:10:10:cd:6e:13:04:c9:81:ce:e4:
         d3:4e:7e:44:53:42:f3:79:af:64:e7:46:7e:72:38:0c:7b:bb:
         af:73:40:08:b7:08:a4:03:12:a9:12:c9:8f:37:a4:6b:e4:e3:
         f7:e3:ba:1a:9a:b6:f5:b6:4c:15:cf:c5:bc:ed:31:ed:fe:4b:
         c9:b2:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:56 2026 by rpki-client