Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          I7RIBzTgbOwU2aqygmbR1sJbqa88Bk0G5oEZ9nnmdII=
Subject key identifier:   40:60:F1:03:47:13:BD:91:5A:04:9A:CD:B5:3A:74:EB:3D:30:C9:17
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019E1C47429CFBBBA2C16EE7DF001C044213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          109B
Signing time:             Tue 12 May 2026 13:01:32 +0000
Manifest this update:     Tue 12 May 2026 13:01:32 +0000
Manifest next update:     Wed 13 May 2026 13:01:32 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: 2I22H/YeRHsB4rw1cEEaJN2MsYidxsFefDjXSrCFpXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:42:9c:fb:bb:a2:c1:6e:e7:df:00:1c:04:42:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: May 12 13:01:32 2026 GMT
            Not After : May 13 13:01:32 2026 GMT
        Subject: CN=4060f1034713bd915a049acdb53a74eb3d30c917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:10:d7:37:b6:9a:42:dc:28:37:55:8d:70:
                    d6:6a:fe:71:50:5b:a7:08:7c:03:f5:80:45:86:14:
                    57:c6:cd:14:78:67:2c:57:8e:5e:72:d6:c0:85:d4:
                    aa:c0:de:39:21:5f:1d:f1:36:18:fd:a1:0d:49:0b:
                    13:d8:21:ff:5b:55:2d:0f:e1:5f:a3:1c:05:ab:22:
                    ce:82:1c:d5:93:f2:c7:47:f9:a7:1b:3e:74:a2:ef:
                    9b:fa:81:11:ae:8d:46:77:5c:96:c9:d1:93:13:64:
                    e2:63:66:34:87:86:2e:e6:34:8b:5d:a8:22:ed:66:
                    14:b2:33:d2:dd:df:b1:07:1d:b0:66:c2:a7:96:7b:
                    8b:fe:3e:eb:0a:c4:98:50:f9:a2:76:ee:b1:42:13:
                    d8:59:e4:1a:56:2f:5d:72:27:0c:b5:cb:bc:51:85:
                    fb:cd:8d:9a:b4:43:6a:69:fc:45:21:9a:87:f0:d2:
                    b1:de:80:80:18:a8:d4:02:a8:a8:92:07:c0:9b:11:
                    1e:05:14:c9:ba:1a:ad:a8:37:2a:30:e3:2e:00:96:
                    ca:d7:90:ef:be:c6:a8:35:e4:67:a3:5d:4a:4f:2c:
                    da:22:45:49:81:07:35:d5:47:35:64:a0:81:2c:bd:
                    6c:6c:13:ca:b0:43:fc:ac:50:6f:95:23:95:20:91:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:60:F1:03:47:13:BD:91:5A:04:9A:CD:B5:3A:74:EB:3D:30:C9:17
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:a6:6e:2e:64:c3:f6:e5:97:57:e9:70:ed:09:b6:fb:29:
         f7:c1:f9:ae:cb:1f:c3:f5:0d:98:bd:dc:c6:04:87:f8:95:68:
         d9:cd:22:cf:f5:84:12:5d:c4:41:61:87:65:4a:17:76:f7:12:
         4d:6f:14:99:dd:4d:d4:a9:94:1d:d3:79:09:e0:97:31:4e:0d:
         5f:9e:66:87:21:d4:31:f4:7a:c3:2b:30:1c:44:78:a7:95:7d:
         9d:42:54:fd:26:1f:19:c6:dc:da:d9:a2:c2:ef:be:30:c2:cf:
         06:f0:8a:b0:3c:66:48:d1:e4:8c:67:97:25:57:ed:30:8c:de:
         d2:e7:07:9e:e9:b0:64:eb:76:82:6a:00:3b:c8:a3:f4:cf:17:
         00:29:e6:22:b1:0d:ed:3c:3c:6e:ec:0a:39:5c:fa:1b:4d:af:
         dc:33:4c:3f:4c:99:a6:18:20:2c:c9:2c:bc:6b:4d:42:a2:83:
         a7:cf:fe:67:90:14:ee:ce:b3:72:b4:64:9c:1a:f5:60:c2:70:
         39:c0:f2:42:e7:f8:cc:7d:75:9c:c1:e8:b1:e2:f7:0e:fa:d8:
         b1:60:74:f3:3a:0f:e9:de:99:2c:39:00:f6:50:ff:e1:43:5c:
         7a:97:e0:ed:5a:e5:50:5f:af:cf:f4:f1:71:c4:8b:c2:89:c1:
         54:7c:46:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR0Kc+7uiwW7n3wAcBEITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTliNWVmMjNiYjQyM2E0N2QyYjhmMjMzZTgyYzM1NDA5
Y2NiZmMwHhcNMjYwNTEyMTMwMTMyWhcNMjYwNTEzMTMwMTMyWjAzMTEwLwYDVQQD
Eyg0MDYwZjEwMzQ3MTNiZDkxNWEwNDlhY2RiNTNhNzRlYjNkMzBjOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ecQ1ze2mkLcKDdVjXDWav5xUFun
CHwD9YBFhhRXxs0UeGcsV45ectbAhdSqwN45IV8d8TYY/aENSQsT2CH/W1UtD+Ff
oxwFqyLOghzVk/LHR/mnGz50ou+b+oERro1Gd1yWydGTE2TiY2Y0h4Yu5jSLXagi
7WYUsjPS3d+xBx2wZsKnlnuL/j7rCsSYUPmidu6xQhPYWeQaVi9dcicMtcu8UYX7
zY2atENqafxFIZqH8NKx3oCAGKjUAqiokgfAmxEeBRTJuhqtqDcqMOMuAJbK15Dv
vsaoNeRno11KTyzaIkVJgQc11Uc1ZKCBLL1sbBPKsEP8rFBvlSOVIJHNtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBg8QNHE72RWgSazbU6dOs9MMkXMB8GA1UdIwQY
MBaAFOiZte8ju0I6R9K48jPoLDVAnMv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYt
ZGIzMjRhN2UyOGU4LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYtZGIzMjRhN2UyOGU4
LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUymbi5k
w/bll1fpcO0Jtvsp98H5rssfw/UNmL3cxgSH+JVo2c0iz/WEEl3EQWGHZUoXdvcS
TW8Umd1N1KmUHdN5CeCXMU4NX55mhyHUMfR6wyswHER4p5V9nUJU/SYfGcbc2tmi
wu++MMLPBvCKsDxmSNHkjGeXJVftMIze0ucHnumwZOt2gmoAO8ij9M8XACnmIrEN
7Tw8buwKOVz6G02v3DNMP0yZphggLMksvGtNQqKDp8/+Z5AU7s6zcrRknBr1YMJw
OcDyQuf4zH11nMHoseL3DvrYsWB08zoP6d6ZLDkA9lD/4UNcepfg7VrlUF+vz/Tx
ccSLwonBVHxGlg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:20:50 2026 by rpki-client