Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File:                     6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier:          oWGRzGw0fn4Zkx6ZXBCFapFlNoDEtG8zbIOtTpHA3PM=
Subject key identifier:   93:A4:4A:CE:E9:64:EE:D4:B2:E6:C0:EF:70:76:F1:F6:FD:F9:47:23
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer:       /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial:       019E1D59533E0E28556400D5C93F13972AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number:          0C5D
Signing time:             Tue 12 May 2026 18:00:53 +0000
Manifest this update:     Tue 12 May 2026 18:00:53 +0000
Manifest next update:     Wed 13 May 2026 18:00:53 +0000
Files and hashes:         1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: 1Is/2aJe27rfEAtpJvEtZMMVLkpeMnV/dDZtSQ7uGuA=)
                          2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
                          3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:53:3e:0e:28:55:64:00:d5:c9:3f:13:97:2a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
        Validity
            Not Before: May 12 18:00:53 2026 GMT
            Not After : May 13 18:00:53 2026 GMT
        Subject: CN=93a44acee964eed4b2e6c0ef7076f1f6fdf94723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:b1:19:1e:43:dd:bc:68:ee:98:0b:8d:1e:
                    56:0a:17:89:78:82:21:11:35:90:e4:76:31:9a:49:
                    6a:7d:25:b5:85:01:87:a6:86:a7:3b:04:2f:cc:22:
                    87:8f:17:1b:bf:0f:fd:16:6a:33:a2:b8:cc:65:d4:
                    df:d5:a1:96:59:1b:77:e1:39:7b:1c:b5:38:1e:d7:
                    09:d8:f5:63:e4:a7:79:20:34:80:4e:4d:58:4e:b9:
                    4d:26:a0:9a:68:ce:85:bf:d1:51:39:b7:54:68:f1:
                    08:e9:88:d9:de:c5:b6:95:a3:a0:94:32:e2:d5:ec:
                    7e:bf:a7:67:9f:0b:4a:e2:fa:08:c7:c4:66:6b:93:
                    63:a6:c8:d1:bb:5a:74:6d:5c:95:89:a6:41:0a:68:
                    65:18:9a:6d:1b:7b:6c:38:52:75:da:55:7a:c3:ed:
                    ed:ef:68:34:29:b9:3b:ba:a5:83:5c:0b:24:45:9a:
                    6e:74:a2:83:b6:e6:cf:0c:d5:5b:36:fe:13:37:36:
                    af:5a:d6:ec:e1:f1:ad:ba:ec:eb:85:3b:cc:ec:61:
                    80:94:fd:09:c6:7e:95:3a:0a:7c:33:6a:2c:24:6a:
                    51:57:09:9a:40:51:7d:d8:07:6e:ec:67:6d:e2:cc:
                    88:a7:1a:d0:8d:fa:fb:d7:ed:ea:ab:35:56:07:1e:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:4A:CE:E9:64:EE:D4:B2:E6:C0:EF:70:76:F1:F6:FD:F9:47:23
            X509v3 Authority Key Identifier:
                keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:99:b9:1f:f7:fe:74:48:31:7c:8a:4d:9d:36:16:25:19:
         39:9b:95:50:31:0c:c7:57:86:2e:0d:28:52:fa:6d:4f:3f:0c:
         f2:e4:1a:e6:a6:07:f9:d6:6d:51:69:90:ea:b2:f2:c6:9b:d6:
         af:f2:7e:80:54:16:3b:c5:54:5b:fd:f4:41:9d:81:d8:ff:eb:
         1b:db:02:0d:7f:7a:c2:a0:6d:05:b2:71:c8:be:29:fe:7f:f7:
         62:81:19:f7:1b:85:51:c4:29:fe:9d:a4:96:f7:bb:0a:96:fb:
         ac:f0:76:3f:bd:4d:2d:70:da:e4:cc:8e:0e:9c:ce:60:c3:c6:
         63:ad:bc:34:18:1a:10:39:41:1e:90:33:92:ca:b7:70:07:fa:
         4c:e4:e7:f7:cf:64:0e:4d:24:0f:bf:6f:a4:8b:92:d5:d0:ec:
         cc:1a:9f:ef:89:70:c0:53:51:23:c5:35:bb:8e:5d:2e:3f:de:
         61:71:06:08:6b:c6:30:d5:ff:40:13:8d:c4:4c:19:83:16:74:
         17:93:ce:62:9c:7d:06:8d:69:8f:f2:e4:9a:a4:eb:23:a8:e7:
         23:eb:53:1f:ac:15:14:44:7d:fd:21:bb:95:f9:ea:0e:74:25:
         fc:56:c8:23:2f:09:4c:a7:be:b6:c3:b9:30:ba:7e:fd:3c:2f:
         11:91:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:26 2026 by rpki-client