Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
File:                     6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft (raw, json)
Hash identifier:          NV6azAOwuq3IWhtvkN2yczvh6fdyU2zxl+oJXY/d37s=
Subject key identifier:   A5:2A:DC:78:50:D4:5A:FB:8D:12:85:BF:80:32:38:5A:57:08:A7:1A
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Certificate issuer:       /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial:       019E1D5940FB2F47D6600FD821C73E1CEE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
Manifest number:          0977
Signing time:             Tue 12 May 2026 18:00:49 +0000
Manifest this update:     Tue 12 May 2026 18:00:49 +0000
Manifest next update:     Wed 13 May 2026 18:00:49 +0000
Files and hashes:         1: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl (hash: +0FH18N7r8P3pTq4xoS5gSwlO/N1+1rPp9EehghXYYk=)
                          2: 7lvjfYbr9G0PNBw25lw_gjQVNAc.roa (hash: Q4GZSTUw+N9EKoJs3VO+IluZlSIov3jTQ/daTNuT5H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:40:fb:2f:47:d6:60:0f:d8:21:c7:3e:1c:ee:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
        Validity
            Not Before: May 12 18:00:49 2026 GMT
            Not After : May 13 18:00:49 2026 GMT
        Subject: CN=a52adc7850d45afb8d1285bf8032385a5708a71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:bd:d3:5e:76:8f:20:8d:49:b5:c5:a3:37:
                    93:28:ac:69:f2:b8:13:90:15:66:10:d4:3d:0b:12:
                    cf:76:76:60:d9:82:66:22:e6:00:6b:a9:b5:91:6f:
                    6e:e6:bd:2c:4c:78:43:8f:a6:6b:b9:d0:c6:9c:a0:
                    7a:cc:7b:2c:47:3e:01:58:17:17:40:19:df:ea:95:
                    3f:52:c8:0c:13:c5:97:a4:22:01:bb:05:e9:f1:de:
                    a0:e8:45:0b:ff:ae:db:f4:45:92:ef:32:a3:e1:1c:
                    9d:f5:0c:66:92:d3:35:82:25:4b:4a:f2:02:3e:c7:
                    ea:78:53:53:ee:12:03:eb:4b:80:c0:e1:b6:ee:ce:
                    6e:9a:0f:c1:e1:f2:2d:1e:d9:e7:a5:c2:7f:e7:a6:
                    41:a6:9e:d1:df:4d:91:3c:d8:6c:98:fd:a8:4c:92:
                    8c:a6:6f:ce:ff:07:05:93:32:a3:15:00:48:1a:10:
                    83:2c:26:ec:b9:43:ec:ea:ca:b6:f0:fc:2e:0d:19:
                    fc:87:f1:23:34:87:f5:c7:8a:0b:fb:25:1d:3d:e9:
                    e7:d9:01:c6:af:42:18:ac:86:ac:1a:17:c9:19:86:
                    c9:ea:be:64:2d:e0:0c:7a:39:d0:bc:ed:24:34:8f:
                    e8:e8:1d:9b:53:c8:3a:52:69:8f:dc:b8:2b:f8:da:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2A:DC:78:50:D4:5A:FB:8D:12:85:BF:80:32:38:5A:57:08:A7:1A
            X509v3 Authority Key Identifier:
                keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cb:94:54:23:0c:77:d0:de:04:b5:f0:9c:5a:35:47:ba:e7:
         12:7d:ff:cb:48:53:4f:d2:0c:d7:cc:8c:1a:6c:07:c6:63:ba:
         f8:5e:bb:1c:ac:d3:78:58:df:88:79:73:b8:cf:7a:12:3a:67:
         51:e0:92:da:e9:71:13:34:f7:6c:d7:59:0a:ae:88:fe:ee:b8:
         39:b4:8a:dd:5a:c5:bb:1a:29:d7:84:6a:c2:63:17:2d:bc:e1:
         d5:b3:53:dd:89:1f:b3:c9:50:0d:a9:f6:0d:23:87:ed:8a:36:
         77:05:99:01:c3:61:25:45:a0:cf:a1:15:26:26:f7:64:55:3f:
         2e:c5:9f:3b:1f:3e:6c:cd:40:d4:5b:e3:4a:6e:53:86:17:b6:
         c6:c9:1d:43:2b:b9:49:4b:f9:a0:c2:76:e4:00:7f:f7:2c:95:
         32:a2:95:31:0d:7b:97:0d:f5:2a:fa:1f:a9:b4:9e:df:5b:01:
         ac:27:f3:a5:85:0e:ce:cc:2c:cf:cf:9e:7c:cf:74:50:2e:85:
         32:f2:ee:93:aa:ae:63:b7:1a:b9:df:63:41:db:a6:45:9f:28:
         ea:d6:39:15:70:66:69:97:d8:67:04:07:c5:5f:ba:2a:cd:1d:
         6f:b4:e6:d1:c0:7a:d2:da:cb:be:07:8e:2a:bb:5a:96:03:a1:
         b7:a0:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:05 2026 by rpki-client