Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
File:                     6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft (raw, json)
Hash identifier:          CBWSolMuokDTK9sabEb6kp4XUA/5vbjfeHzfyzT1QBc=
Subject key identifier:   E9:78:3A:64:1E:C7:8A:A7:37:5F:D1:08:BB:DE:C8:C4:49:31:1D:CB
Authority key identifier: E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4
Certificate issuer:       /CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
Certificate serial:       019E1D228DC280B8E369CDB695B309F3173A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
Manifest number:          A9
Signing time:             Tue 12 May 2026 17:01:04 +0000
Manifest this update:     Tue 12 May 2026 17:01:04 +0000
Manifest next update:     Wed 13 May 2026 17:01:04 +0000
Files and hashes:         1: 6RLqS0VIgIsN3V0yM0B0QaujAag.asa (hash: uUr/vp85N4XS3S8eyQsn/vKnyBqXe73xryosUfkTWdI=)
                          2: 6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl (hash: 53eCxrKgMdedCMR9m4d3kB9rBGWG3jEccsgUv6Z/1Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:8d:c2:80:b8:e3:69:cd:b6:95:b3:09:f3:17:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94d3e36b75d7122a087d7b3c0fb92a67c9cedb4
        Validity
            Not Before: May 12 17:01:04 2026 GMT
            Not After : May 13 17:01:04 2026 GMT
        Subject: CN=e9783a641ec78aa7375fd108bbdec8c449311dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:bb:f3:b2:61:17:6c:c9:ad:cc:72:5e:61:
                    78:74:12:62:48:17:ab:cf:29:19:43:6a:50:9d:d0:
                    54:63:a0:40:be:f8:65:6b:ea:8d:8d:d1:a5:51:bc:
                    e7:d4:60:a2:39:b0:27:bc:93:59:82:d6:bc:74:88:
                    bf:10:7a:46:3c:9b:63:8c:e9:28:fe:99:50:a4:9d:
                    ff:34:df:cc:8f:ce:0b:78:42:2b:c3:91:6d:f2:59:
                    0d:01:7e:32:ad:28:fd:ef:7d:b9:50:68:aa:e7:36:
                    31:37:74:58:61:aa:ea:7a:67:c4:ea:94:8a:37:25:
                    d1:43:54:67:08:04:79:c3:62:ad:d8:af:07:8f:3d:
                    d1:b5:e1:9b:26:26:6f:fd:34:cb:da:fb:01:b7:f8:
                    6f:16:0e:9a:db:01:22:6f:31:d1:12:84:3d:56:59:
                    bd:23:33:51:a9:1d:fd:6b:51:01:42:48:eb:af:3f:
                    b6:a2:b2:9b:4a:b6:da:25:c9:60:ff:41:41:08:1a:
                    a2:f0:8d:7a:2c:e0:f0:9c:01:d5:0e:6f:1d:cb:75:
                    43:f9:e8:7c:08:32:ec:89:6c:aa:fd:e2:59:97:c7:
                    a6:ef:1e:cc:d7:7f:6a:84:03:92:9e:f9:01:c5:1c:
                    0e:ed:78:b7:8d:c3:78:6d:4f:2b:76:c4:b8:60:b9:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:3A:64:1E:C7:8A:A7:37:5F:D1:08:BB:DE:C8:C4:49:31:1D:CB
            X509v3 Authority Key Identifier:
                keyid:E9:4D:3E:36:B7:5D:71:22:A0:87:D7:B3:C0:FB:92:A6:7C:9C:ED:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6U0-NrddcSKgh9ezwPuSpnyc7bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fbc63e-d722-4d05-b1bf-4da14d2d591b/1/6U0-NrddcSKgh9ezwPuSpnyc7bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:33:c0:90:ca:8d:7b:49:b0:4c:2d:9b:f2:69:41:bd:bc:
         02:f7:59:9b:ba:2f:22:53:63:6b:53:4c:c9:7e:51:a1:d1:03:
         a9:ad:e6:8f:b2:c7:3d:e0:ee:81:b3:5c:70:7a:89:74:e5:14:
         09:68:7f:92:53:8a:3b:fe:78:1e:62:de:c6:8b:a9:97:b0:ae:
         68:d6:fb:e7:35:c2:b9:38:7d:dd:77:27:91:1d:14:93:30:fb:
         89:e3:35:6f:14:44:c6:5c:c8:cd:c3:c9:09:05:f6:c1:82:12:
         c5:32:56:82:b2:c4:8e:dd:bb:78:e7:67:97:ee:76:ab:fd:01:
         7e:14:0d:5c:2f:d0:04:4c:37:e4:4a:9e:ec:f9:32:da:2e:ea:
         88:38:94:6a:31:01:3f:86:7f:0a:fc:78:e8:ee:f7:c2:a5:1b:
         51:4f:a9:ba:10:fd:be:3c:34:96:6b:cc:50:46:b1:61:d5:50:
         c8:c2:ff:c8:f2:8e:0a:ad:62:6d:02:bd:7d:de:c1:2e:c9:4e:
         10:8a:7e:ae:c3:57:01:9f:bf:ab:e1:81:5b:a0:0f:82:8e:4a:
         e4:a2:31:cc:e3:2a:a1:2b:7d:01:8e:33:fb:7d:13:c5:c4:2f:
         02:1d:da:0e:b6:d9:d0:a6:7f:25:3b:66:d6:bd:ca:24:38:8e:
         3a:3b:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:01 2026 by rpki-client