Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File:                     6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier:          Q9yD93oGGZ1CPz0v/2qqkvTRTeANbQh1KMrssRKmLI4=
Subject key identifier:   09:77:D8:B2:0F:BC:21:E7:DA:9F:52:6C:4A:E7:71:1C:CA:0E:5C:37
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer:       /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial:       019E1CEBF393A99D60D046B399ECD94F0C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number:          17B8
Signing time:             Tue 12 May 2026 16:01:25 +0000
Manifest this update:     Tue 12 May 2026 16:01:25 +0000
Manifest next update:     Wed 13 May 2026 16:01:25 +0000
Files and hashes:         1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: vndoVWRbPWKA49Zpho3rmlFKUZVkZznx2RHOxV4w+vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:f3:93:a9:9d:60:d0:46:b3:99:ec:d9:4f:0c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
        Validity
            Not Before: May 12 16:01:25 2026 GMT
            Not After : May 13 16:01:25 2026 GMT
        Subject: CN=0977d8b20fbc21e7da9f526c4ae7711cca0e5c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:39:aa:8a:b9:28:ee:f5:bb:30:77:9b:2d:
                    c4:f5:2c:ff:35:1f:66:53:f2:f2:05:39:26:ab:c7:
                    b5:9a:41:1e:dd:02:c2:4a:ce:b1:b0:44:10:11:d2:
                    15:f8:9f:26:8f:28:fd:41:44:96:81:35:f4:d3:eb:
                    1f:75:ee:f4:c6:83:18:a4:b7:27:18:e5:f6:b5:f2:
                    ea:9b:09:72:d0:16:50:8b:29:07:6b:00:64:89:a2:
                    be:43:3f:14:cb:68:91:a2:62:c3:5d:4d:02:47:bd:
                    23:aa:8a:0a:c0:15:72:e6:13:85:d7:2e:94:75:a9:
                    d8:95:82:d6:d7:03:2e:10:3a:d3:e3:2e:c3:1a:fb:
                    20:01:52:5b:42:61:96:8a:48:c7:ef:e0:b1:28:7d:
                    07:97:bd:6b:28:ec:5a:d7:bb:3e:9a:a4:1a:57:e4:
                    a5:76:05:86:cc:84:82:22:a9:92:a9:eb:c7:0c:c7:
                    f2:ce:a8:82:c7:14:7b:a2:6f:2b:f2:03:4d:7a:f5:
                    77:02:33:a1:c6:54:5b:78:e5:15:a4:f8:ba:d4:f3:
                    7e:2b:6b:e4:15:2f:c0:77:97:44:29:4a:e2:79:84:
                    e7:fe:7c:00:c4:52:e4:a1:80:2c:da:dc:fe:fe:54:
                    87:25:e0:c1:a1:97:e8:5b:d4:2f:1c:66:df:07:1a:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:77:D8:B2:0F:BC:21:E7:DA:9F:52:6C:4A:E7:71:1C:CA:0E:5C:37
            X509v3 Authority Key Identifier:
                keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:84:2b:ff:15:19:25:50:58:3e:3e:14:a8:83:82:27:6e:09:
         b3:73:09:47:14:f9:90:bb:6d:06:28:1c:07:91:49:52:ec:8a:
         59:5b:bb:5f:0c:e2:3c:fb:59:98:34:f6:88:cc:1e:ce:fd:bd:
         b6:04:75:ae:3d:87:8c:27:4a:d9:f9:22:60:5a:10:e6:4a:28:
         c1:2a:67:a5:96:94:20:5d:18:b5:6a:06:01:77:50:35:91:61:
         2a:b6:7c:fb:1d:bc:5e:30:7b:00:41:89:35:ae:a2:a1:47:9c:
         04:ee:e5:13:68:53:04:de:18:cf:43:fe:ae:f2:0c:f5:11:18:
         bc:9c:90:72:a7:36:30:a6:01:77:99:e7:6d:e1:39:5d:fb:15:
         2c:41:29:af:70:7e:eb:e3:a0:02:b0:9d:7f:f1:0b:4c:08:97:
         b6:2f:81:71:ee:27:f2:e8:0b:6e:ce:4f:59:14:3f:e0:5b:97:
         cf:3b:8c:1a:90:6b:a8:4b:0a:ee:24:9a:e2:d1:30:ea:6b:23:
         e1:c5:0d:df:35:21:e5:d9:f9:ca:89:05:b9:17:2e:8a:a6:78:
         7c:2c:8f:2c:15:60:f0:f9:e4:ac:2e:40:79:e9:7c:44:26:64:
         a5:a2:45:d9:39:f4:ba:69:ed:35:16:e6:cd:fa:8e:ba:bc:3c:
         07:2a:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:07 2026 by rpki-client