Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File:                     6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier:          nt4JifRzBvF1/UUsBe28aPPS5i/mfBou71m/GQGPUTw=
Subject key identifier:   CD:76:F1:74:97:2F:B8:39:F9:46:DB:48:CD:C5:DC:1A:84:E3:5C:8D
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer:       /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial:       019E1CB575CCD54B7D7DE3843F08FECBD8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number:          1337
Signing time:             Tue 12 May 2026 15:01:54 +0000
Manifest this update:     Tue 12 May 2026 15:01:54 +0000
Manifest next update:     Wed 13 May 2026 15:01:54 +0000
Files and hashes:         1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: jS5M1bZaZ1VHfVyGLj44B+CVSFocFwJ6gTnbr3dM4T0=)
                          2: wgAilhNk_JB54zRjveL96EA9LP8.roa (hash: 5g3uDJFZLAanJ1siT+5xFo3dY/KZA0bidkW5vxOC84c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:75:cc:d5:4b:7d:7d:e3:84:3f:08:fe:cb:d8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
        Validity
            Not Before: May 12 15:01:54 2026 GMT
            Not After : May 13 15:01:54 2026 GMT
        Subject: CN=cd76f174972fb839f946db48cdc5dc1a84e35c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:1b:da:f0:c8:4d:df:10:0e:4f:dc:15:e4:
                    f9:ec:d5:14:b3:10:88:9c:cd:37:96:f5:02:9b:bb:
                    ad:db:7a:79:fa:15:f2:62:c6:a1:2c:77:31:6e:62:
                    49:f3:c4:ba:1e:0e:60:5f:73:45:c0:44:23:1a:c3:
                    0e:c5:89:d8:f9:1d:e7:c8:12:e7:80:6a:35:cb:46:
                    31:e0:1d:ab:9e:d9:be:f0:6d:62:8b:d0:11:81:10:
                    91:ef:a3:9a:59:77:d5:9b:66:1c:cd:22:0c:5c:58:
                    f1:5f:eb:b2:f3:7b:41:d3:88:92:8d:91:54:6e:61:
                    51:69:01:9e:47:2b:ab:4f:45:ab:e1:ad:97:f4:37:
                    5e:63:3c:8a:e1:c3:36:27:da:ee:da:1c:62:bb:09:
                    8c:73:38:bf:01:9f:73:4a:93:bb:b5:72:2b:17:be:
                    5f:db:a2:88:e7:9b:df:63:7f:71:b3:b4:ff:80:11:
                    c1:e7:9e:c2:39:e4:36:24:b7:82:7f:6b:f3:0a:f2:
                    b6:c5:6f:8b:d2:b4:de:b0:87:31:52:c8:89:59:4e:
                    76:a4:00:56:48:ff:74:bc:a6:73:9d:3e:c3:16:c1:
                    7f:a6:be:b0:49:3f:af:78:2f:2d:56:9a:d1:a4:cb:
                    46:c8:95:cd:41:e0:8b:a2:ac:0d:8b:11:0f:60:8b:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:76:F1:74:97:2F:B8:39:F9:46:DB:48:CD:C5:DC:1A:84:E3:5C:8D
            X509v3 Authority Key Identifier:
                keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:48:65:5b:48:65:22:b6:ff:b1:d8:a3:62:ad:11:ab:56:85:
         32:76:ca:fc:0f:95:16:e4:17:6e:07:9a:30:93:f6:ff:a8:a2:
         ef:31:72:18:08:1a:61:61:15:19:1e:d3:54:a4:2e:1c:cf:23:
         4f:bd:df:2c:1c:b6:8f:b2:f9:82:98:55:ee:53:9f:f0:da:b5:
         16:ba:0b:66:b3:23:ce:20:42:49:ff:3e:65:d8:d8:f8:7a:2d:
         14:b4:08:63:0b:c4:a9:20:1a:61:5a:2e:ca:52:08:cd:7e:fa:
         4c:9a:87:fe:45:22:51:7d:8d:ca:a4:cd:c8:35:3b:41:62:42:
         bf:0b:38:9d:16:9a:cc:8a:b8:74:40:06:d7:de:22:a4:08:07:
         f7:92:22:83:3d:b3:5c:06:d8:63:c5:e2:00:c2:c8:94:1f:7a:
         26:0e:71:79:fa:14:b4:66:fc:f8:02:11:de:0f:94:51:66:31:
         4e:41:7f:76:0e:6d:58:d8:bd:04:4f:ba:66:e9:55:f0:de:f4:
         68:ba:ac:b6:86:67:1e:0f:cc:3d:b9:c2:5a:91:36:15:16:b1:
         6e:cc:d6:7b:2e:5e:2d:f4:40:2a:89:1c:52:9c:73:62:85:3a:
         ed:aa:dc:93:91:37:63:f2:48:59:76:61:c6:f6:81:d1:21:3c:
         c4:9d:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:04 2026 by rpki-client