Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
File:                     6IgY9AA6SCbnpomKFDYfjaWQVk8.mft (raw, json)
Hash identifier:          N2P5V+rpD8i8S70V7KJBVgwDDsbSBuCVQR2HGC8awQU=
Subject key identifier:   2D:60:2E:22:D4:88:0F:D6:51:3B:4A:77:2B:EE:68:94:59:68:E4:73
Authority key identifier: E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F
Certificate issuer:       /CN=e88818f4003a4826e7a6898a14361f8da590564f
Certificate serial:       019E1DC773AEAC95C04DFC34371EC5B8B18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
Manifest number:          03BA
Signing time:             Tue 12 May 2026 20:01:10 +0000
Manifest this update:     Tue 12 May 2026 20:01:10 +0000
Manifest next update:     Wed 13 May 2026 20:01:10 +0000
Files and hashes:         1: 6IgY9AA6SCbnpomKFDYfjaWQVk8.crl (hash: ZI2ynkIt1BHcjlv8LfR2HVEvSR+m/Kdq9F5QX08gtBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:73:ae:ac:95:c0:4d:fc:34:37:1e:c5:b8:b1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88818f4003a4826e7a6898a14361f8da590564f
        Validity
            Not Before: May 12 20:01:10 2026 GMT
            Not After : May 13 20:01:10 2026 GMT
        Subject: CN=2d602e22d4880fd6513b4a772bee68945968e473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:9e:81:33:4b:ad:dd:96:45:5d:aa:2a:c8:
                    13:d6:78:76:25:03:88:44:9a:7d:19:7f:6a:f3:b0:
                    51:af:f4:6e:c0:16:3e:ba:88:fe:35:36:df:42:56:
                    68:98:04:1d:dd:99:6e:f8:20:cc:55:c4:6d:28:30:
                    9d:5d:e2:be:cd:50:fe:33:a2:b8:56:e0:d9:25:8e:
                    cf:64:1f:6f:3a:99:0c:69:9e:6a:8c:13:a2:c1:d4:
                    a1:d6:2c:8c:35:47:78:2a:8d:7c:66:51:98:cc:c2:
                    20:12:b4:12:8e:36:64:08:61:4d:19:f7:b4:32:4d:
                    57:7a:fe:70:40:1f:62:33:ac:f7:c8:7d:30:17:e3:
                    b3:40:bc:f3:da:9f:63:59:a1:52:ce:e4:78:e5:d9:
                    c7:d1:d8:12:67:5b:60:99:80:93:9d:95:00:3f:68:
                    d1:72:96:3f:69:bd:87:fd:b9:6f:9f:9f:9e:9d:e3:
                    c8:c8:e6:89:fd:b7:37:a1:00:b6:78:8d:0e:d6:10:
                    f6:f6:c9:bd:cb:85:b1:7c:19:ce:21:5b:55:d7:e1:
                    10:7d:29:3c:ca:cc:0b:9c:f3:cd:65:ff:36:f4:c7:
                    f5:1e:12:bd:1c:f2:1f:eb:98:64:bd:b9:9a:07:e7:
                    3c:8e:ad:99:f1:77:d1:38:13:1d:82:51:e0:13:f1:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:2E:22:D4:88:0F:D6:51:3B:4A:77:2B:EE:68:94:59:68:E4:73
            X509v3 Authority Key Identifier:
                keyid:E8:88:18:F4:00:3A:48:26:E7:A6:89:8A:14:36:1F:8D:A5:90:56:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IgY9AA6SCbnpomKFDYfjaWQVk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/325fe3-f581-4b88-b86a-2bbed50bb51e/1/6IgY9AA6SCbnpomKFDYfjaWQVk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:65:29:44:c3:6e:91:00:99:46:cd:bd:9e:8f:04:70:14:7b:
         ae:c3:80:60:71:49:11:4e:9a:9e:c0:31:30:7d:60:bf:d5:54:
         e0:6a:44:ce:dd:49:dc:f7:c6:e7:d4:bd:c4:21:d0:5b:b7:21:
         ea:d4:7e:72:f0:fb:49:c6:ed:df:1d:7d:d3:7e:9b:96:00:4b:
         b6:91:b3:6e:67:45:9e:ab:09:12:b3:35:6e:85:f1:80:95:b4:
         01:18:f0:00:e7:f4:07:7d:c5:4e:d0:31:ee:01:7c:0e:4d:9f:
         5f:45:cf:c5:8a:17:b2:ad:a1:8b:4a:68:b7:51:11:00:10:8d:
         54:35:84:05:41:0a:9c:23:f6:91:ea:55:5f:d6:59:83:16:2a:
         02:e7:fd:b4:03:2d:a8:c4:c2:d8:05:cc:d7:61:bd:31:de:bc:
         bf:c9:11:b0:50:96:5c:c0:76:0c:09:f4:4c:63:0a:c1:e5:b8:
         71:4a:a2:ce:cb:c3:7f:2b:1a:2e:ed:c1:8f:98:32:11:e6:a2:
         45:56:a0:19:5d:e4:55:03:5c:87:e0:ab:9d:a1:70:85:f5:c3:
         91:e5:2d:32:ed:f3:ad:bd:10:b2:14:fe:79:4e:e2:44:91:1c:
         35:9b:ba:02:72:e0:56:ec:b3:fb:8f:db:6f:71:cc:5c:52:66:
         33:5c:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:17 2026 by rpki-client