Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          fOrI6Vs+k/DXzaXGEMIDU+tCCNIoIma48lkpv2V2oYY=
Subject key identifier:   4D:A6:5D:F6:7D:B7:46:89:2F:C0:E7:C5:41:F7:01:57:4E:F9:3D:20
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       019E1CB52B1EB9141B55247E1775836CA5B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          08D3
Signing time:             Tue 12 May 2026 15:01:35 +0000
Manifest this update:     Tue 12 May 2026 15:01:35 +0000
Manifest next update:     Wed 13 May 2026 15:01:35 +0000
Files and hashes:         1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: ssGRO6r4G0swf/9wtDI0LMah78Pr1RHUjkQU2HonlPo=)
                          2: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (hash: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:2b:1e:b9:14:1b:55:24:7e:17:75:83:6c:a5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: May 12 15:01:35 2026 GMT
            Not After : May 13 15:01:35 2026 GMT
        Subject: CN=4da65df67db746892fc0e7c541f701574ef93d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e5:cf:31:fd:d7:29:88:ac:a7:63:84:58:3d:
                    ee:71:a8:d0:42:a2:74:0b:b2:30:18:b3:b7:c9:1a:
                    d9:80:e3:1c:68:d4:2d:91:c5:52:96:2f:fe:3f:4f:
                    de:38:b6:5d:80:b7:8a:69:d3:b1:07:2e:c0:6f:fb:
                    cb:b4:ec:99:0a:7b:4b:81:20:a4:65:b1:2a:89:5d:
                    17:2d:f0:c3:22:65:84:c4:3c:7b:7c:47:1f:d0:70:
                    ac:4b:61:f2:e7:d7:17:78:95:11:70:87:74:07:d3:
                    05:9b:16:d3:e5:74:16:88:69:49:69:ac:b6:27:ab:
                    26:f4:3d:fe:27:09:d1:09:b6:96:35:fc:a5:cb:ab:
                    48:e4:26:b1:40:c8:b6:a5:4b:5d:2a:80:cd:88:c7:
                    2e:fb:13:5b:cf:d8:9f:22:69:88:8d:64:bd:c6:26:
                    16:de:44:da:5f:0f:85:68:d3:c8:cc:3f:2f:b6:dd:
                    3c:3d:fd:d3:9d:a0:e7:35:dd:8f:e0:2a:f5:7c:75:
                    d2:c1:34:24:18:64:ac:60:c2:48:5e:45:de:aa:e9:
                    b3:49:32:ab:d7:7f:ef:df:25:f9:3f:ac:1a:17:93:
                    01:02:a4:50:74:01:c4:42:47:32:a5:5f:ac:73:50:
                    b1:d9:96:c2:13:81:e6:df:90:bc:1e:91:60:ef:c6:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A6:5D:F6:7D:B7:46:89:2F:C0:E7:C5:41:F7:01:57:4E:F9:3D:20
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:43:f8:b2:3f:08:be:bf:7d:15:46:8b:9e:89:dc:be:17:9d:
         46:56:24:e0:ba:3e:7b:8b:2d:6c:51:81:1c:be:08:e4:47:96:
         6a:9c:37:a3:9e:db:d6:fc:0c:fc:7c:8f:ac:4f:df:42:d5:e3:
         a5:f4:8c:60:47:1f:1e:7c:d7:2d:b9:8d:fa:22:2d:c1:b7:f4:
         7d:70:a1:30:d0:d6:c7:3d:44:b9:3d:f5:b0:af:bf:e8:88:76:
         3e:0b:cb:f2:2a:13:4e:da:f1:0b:a3:95:eb:cf:4d:29:df:ce:
         69:9f:19:63:d9:3c:5a:f0:4c:23:de:3c:49:90:d0:77:be:e2:
         c4:2b:eb:b0:55:af:13:a1:7b:0e:b4:26:a3:54:b1:27:0d:51:
         99:89:1d:ba:87:e6:94:e7:f4:c2:d0:39:e5:ea:0f:41:9c:70:
         4e:43:f1:f2:dd:e1:91:50:92:67:5b:1b:fc:7a:5b:ad:23:4e:
         6f:2a:ed:57:9f:f9:3e:3e:48:65:85:48:2b:2e:fe:ed:07:ba:
         b5:20:d0:f2:74:58:50:da:3a:e9:52:31:76:c8:ac:cf:f5:15:
         26:35:d5:8f:e4:89:86:ac:78:f8:2a:71:54:b7:16:4d:91:10:
         65:1b:88:33:42:08:00:83:a5:f3:ae:fc:fc:32:29:20:ef:a1:
         7e:41:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:56 2026 by rpki-client