Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File:                     6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier:          pV3AYGP8oTQcS3adZ60eQtxcLZmh2nIQkJy/UTTKIXw=
Subject key identifier:   C6:0E:27:15:7A:0C:27:1B:5E:5B:D7:62:AD:A7:C0:5B:7F:42:6B:02
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer:       /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial:       019E1E351F58A6A8200DE62F8825BA5F8E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number:          092D
Signing time:             Tue 12 May 2026 22:00:58 +0000
Manifest this update:     Tue 12 May 2026 22:00:58 +0000
Manifest next update:     Wed 13 May 2026 22:00:58 +0000
Files and hashes:         1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: 6flYZN/FJ3u7nYjGT7NMnF/b7poXcVjCMhW1l6SdaN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:1f:58:a6:a8:20:0d:e6:2f:88:25:ba:5f:8e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
        Validity
            Not Before: May 12 22:00:58 2026 GMT
            Not After : May 13 22:00:58 2026 GMT
        Subject: CN=c60e27157a0c271b5e5bd762ada7c05b7f426b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:82:e9:8a:d5:6a:2c:5d:bf:10:9e:69:f0:
                    30:59:cd:17:32:d9:ab:9d:ec:29:08:fb:a4:43:ee:
                    1f:fe:9d:43:ff:28:d0:eb:fe:0f:2c:c0:73:32:e3:
                    ce:b4:d6:04:a8:fe:76:d6:61:e3:c2:a0:73:ac:d3:
                    36:23:f7:82:2c:39:2d:10:83:1c:c0:17:a0:7d:96:
                    2b:39:ed:a5:33:34:eb:4a:48:d8:4a:1d:f6:b1:17:
                    9e:91:e5:95:7a:8f:84:40:bb:a0:0e:68:7b:3f:2f:
                    46:f1:8d:04:4b:91:01:16:f9:01:86:5e:17:ba:76:
                    99:1a:ce:60:d5:7b:74:31:35:47:9b:3a:97:88:f0:
                    e0:0f:2c:4c:4b:48:6c:71:f3:e8:f1:36:a0:10:6c:
                    73:17:7f:5b:b3:fe:81:1a:a5:5d:56:a6:d9:63:a0:
                    ae:6e:06:e1:d1:1f:2f:b0:1e:4c:46:d1:e8:9d:f2:
                    cc:e6:67:09:3e:b2:2f:4c:74:7e:9d:6f:3f:e3:a4:
                    40:6d:18:3e:9a:05:94:f6:9b:6e:06:3e:f1:a9:50:
                    74:9c:d2:9e:58:a1:29:19:8e:6f:20:5e:f3:5e:cf:
                    ee:89:c3:1e:9d:a6:ed:ee:df:7a:ae:aa:66:7c:07:
                    b5:9a:78:d3:86:d5:4c:ca:6a:08:87:e0:0b:40:d8:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:27:15:7A:0C:27:1B:5E:5B:D7:62:AD:A7:C0:5B:7F:42:6B:02
            X509v3 Authority Key Identifier:
                keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:06:a3:77:12:28:04:8a:5c:7c:31:b2:b9:8c:89:f9:87:
         d1:4d:41:a7:1a:35:8c:47:11:b3:ec:99:d9:62:a0:50:01:ef:
         62:8b:76:64:3c:89:c9:94:b2:74:6d:3e:4c:98:e4:47:43:99:
         d1:9d:01:62:83:a7:dc:3c:55:9e:4c:07:cd:a8:b9:c3:3c:f0:
         f8:43:46:8d:0c:0d:79:ee:c8:7f:08:f0:d0:9c:f6:b4:48:7a:
         33:e1:40:34:f0:11:d7:bb:fd:3a:50:ca:c6:9d:f1:4a:36:94:
         0a:0a:0f:2c:ac:b5:93:c7:10:6c:e9:44:66:72:63:0c:c4:78:
         8f:6f:9e:46:58:a6:b4:8b:1f:98:00:bc:8f:bd:43:ee:aa:c0:
         6f:14:7b:b8:23:4b:08:f8:78:9b:65:de:8e:1d:61:37:5a:66:
         19:95:07:df:bc:7a:db:42:d0:ca:67:74:de:f4:4d:94:23:f9:
         07:48:c3:89:3e:47:df:f6:45:67:23:8f:11:67:23:9f:d1:b8:
         2a:1b:86:f7:86:15:55:fc:53:f2:80:83:86:9c:eb:42:c6:eb:
         eb:62:d0:f7:a3:da:6a:af:5b:3b:66:08:65:0d:64:66:6d:27:
         e4:2a:0c:04:bd:23:59:88:ba:87:13:89:16:6a:ac:4a:c6:65:
         37:f9:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:42 2026 by rpki-client