Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
File:                     6MSDt1wtsc-f9OlMeg_fDbAADwA.mft (raw, json)
Hash identifier:          5oKIhoXZp/Fg945FnYHDracOrQ1kDDNQ8aHpsPeCiNM=
Subject key identifier:   D2:27:3B:DD:9C:7E:AA:D9:7F:95:79:B0:4B:54:8F:F4:A8:4F:DA:94
Authority key identifier: E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00
Certificate issuer:       /CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
Certificate serial:       019E1CEB7972D3DBF82D19355F826E96A611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
Manifest number:          1441
Signing time:             Tue 12 May 2026 16:00:54 +0000
Manifest this update:     Tue 12 May 2026 16:00:54 +0000
Manifest next update:     Wed 13 May 2026 16:00:54 +0000
Files and hashes:         1: 6MSDt1wtsc-f9OlMeg_fDbAADwA.crl (hash: 6wlhPS9GTWzcYI4/b33ummAX2Qd05bZm5BHBxN9yT/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:79:72:d3:db:f8:2d:19:35:5f:82:6e:96:a6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c483b75c2db1cf9ff4e94c7a0fdf0db0000f00
        Validity
            Not Before: May 12 16:00:54 2026 GMT
            Not After : May 13 16:00:54 2026 GMT
        Subject: CN=d2273bdd9c7eaad97f9579b04b548ff4a84fda94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:1f:15:3a:b6:95:72:ec:f7:a8:41:33:a0:
                    7c:34:3e:2a:b7:94:0c:1a:18:fd:7d:ab:89:84:38:
                    5f:98:02:7a:1a:5d:59:c0:b8:8c:84:85:92:42:03:
                    e1:37:c2:02:3a:09:af:55:ed:c8:26:87:5c:46:57:
                    8d:ce:df:89:a5:b7:c3:79:a5:17:52:6d:5b:2f:e9:
                    3a:ba:98:dd:3e:ad:70:76:ac:60:68:00:16:b1:94:
                    61:64:33:4a:6a:60:c7:71:12:52:3e:25:d9:75:b2:
                    c4:a2:9c:08:3e:b3:7c:f7:44:43:e4:e2:0d:6d:2e:
                    de:bf:01:5b:72:76:4a:48:48:4c:b7:9c:11:7f:35:
                    55:c7:49:20:39:67:07:c4:0b:cf:c6:c1:57:7b:71:
                    6f:4c:46:73:b4:91:67:73:60:85:82:08:78:ac:82:
                    9a:2e:1e:ff:ab:6f:fd:6e:17:7f:df:02:ac:a5:17:
                    47:c5:b8:1f:7c:e2:b7:28:7c:93:fa:3f:43:61:b7:
                    8e:c0:67:76:50:7d:22:93:cf:82:02:f3:01:4b:54:
                    17:44:29:a1:91:2a:62:1b:a1:7a:de:34:19:dc:4f:
                    1f:c9:cc:a9:00:68:20:40:3a:5c:dd:d0:b3:01:17:
                    94:f7:59:a4:aa:42:25:85:75:80:77:b1:00:ce:d9:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:27:3B:DD:9C:7E:AA:D9:7F:95:79:B0:4B:54:8F:F4:A8:4F:DA:94
            X509v3 Authority Key Identifier:
                keyid:E8:C4:83:B7:5C:2D:B1:CF:9F:F4:E9:4C:7A:0F:DF:0D:B0:00:0F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MSDt1wtsc-f9OlMeg_fDbAADwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/31fda0-7aaa-461c-a352-eb35bfa065ad/1/6MSDt1wtsc-f9OlMeg_fDbAADwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d9:fb:dc:cf:00:73:33:72:40:cf:6d:52:db:2f:86:32:63:
         d1:bc:c1:aa:00:ad:bc:fb:46:bb:10:2e:51:19:f0:ba:d5:b5:
         af:42:1a:e2:14:e1:9d:b0:9c:0d:6d:d5:91:82:ba:4e:13:3b:
         bc:57:ea:10:e2:b9:94:d1:e0:cd:0d:61:a8:59:aa:ab:d6:97:
         4d:50:d3:80:83:4d:af:10:bf:0b:40:1b:bb:93:58:8d:4a:18:
         17:23:e3:8d:56:80:65:dd:32:f8:8f:95:b4:d7:c3:4b:b0:d7:
         f6:e9:97:41:31:d7:02:e2:d8:9f:88:0f:01:a1:12:e4:f0:60:
         ea:cf:64:0d:4f:6a:19:b8:67:0c:77:07:93:24:c2:ff:f5:ae:
         a0:0a:a2:08:48:42:7b:5f:49:35:4f:ed:f1:a4:f3:7a:bc:c7:
         ed:04:b0:e2:36:4a:bc:2e:99:92:b2:2c:f7:c2:d6:cd:92:88:
         48:e6:9e:44:3c:b9:02:a0:48:f9:78:37:5a:f5:d9:e7:c8:fb:
         c0:25:59:a3:87:8a:6a:d0:85:78:10:f3:97:99:b6:e7:53:63:
         63:66:92:c5:15:cc:69:2f:21:30:c5:83:0f:75:26:2d:d2:c5:
         41:91:bc:1b:02:65:dc:40:83:07:80:c7:f5:13:e5:be:64:7d:
         78:d3:dc:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c63ly09v4LRk1X4JulqYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzQ4M2I3NWMyZGIxY2Y5ZmY0ZTk0YzdhMGZkZjBkYjAw
MDBmMDAwHhcNMjYwNTEyMTYwMDU0WhcNMjYwNTEzMTYwMDU0WjAzMTEwLwYDVQQD
EyhkMjI3M2JkZDljN2VhYWQ5N2Y5NTc5YjA0YjU0OGZmNGE4NGZkYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFcfFTq2lXLs96hBM6B8ND4qt5QM
Ghj9fauJhDhfmAJ6Gl1ZwLiMhIWSQgPhN8ICOgmvVe3IJodcRleNzt+JpbfDeaUX
Um1bL+k6upjdPq1wdqxgaAAWsZRhZDNKamDHcRJSPiXZdbLEopwIPrN890RD5OIN
bS7evwFbcnZKSEhMt5wRfzVVx0kgOWcHxAvPxsFXe3FvTEZztJFnc2CFggh4rIKa
Lh7/q2/9bhd/3wKspRdHxbgffOK3KHyT+j9DYbeOwGd2UH0ik8+CAvMBS1QXRCmh
kSpiG6F63jQZ3E8fycypAGggQDpc3dCzAReU91mkqkIlhXWAd7EAztm4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNInO92cfqrZf5V5sEtUj/SoT9qUMB8GA1UdIwQY
MBaAFOjEg7dcLbHPn/TpTHoP3w2wAA8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTIt
ZWIzNWJmYTA2NWFkLzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zMWZkYTAtN2FhYS00NjFjLWEzNTItZWIzNWJmYTA2NWFk
LzEvNk1TRHQxd3RzYy1mOU9sTWVnX2ZEYkFBRHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9n73M8A
czNyQM9tUtsvhjJj0bzBqgCtvPtGuxAuURnwutW1r0Ia4hThnbCcDW3VkYK6ThM7
vFfqEOK5lNHgzQ1hqFmqq9aXTVDTgINNrxC/C0Abu5NYjUoYFyPjjVaAZd0y+I+V
tNfDS7DX9umXQTHXAuLYn4gPAaES5PBg6s9kDU9qGbhnDHcHkyTC//WuoAqiCEhC
e19JNU/t8aTzerzH7QSw4jZKvC6ZkrIs98LWzZKISOaeRDy5AqBI+Xg3WvXZ58j7
wCVZo4eKatCFeBDzl5m251NjY2aSxRXMaS8hMMWDD3UmLdLFQZG8GwJl3ECDB4DH
9RPlvmR9eNPcvA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:02:06 2026 by rpki-client