Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          Jdgb0nTidX6/LWtNgDTepRE2UxKsdExgVEYao5Ryfjo=
Subject key identifier:   A6:86:3C:F4:52:55:DC:E3:88:05:27:7C:F9:DB:96:E0:6C:90:E3:B1
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       019E1CEBBB49DBC50FDC5E440C747C59B269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 16:01:11 +0000
Manifest this update:     Tue 12 May 2026 16:01:11 +0000
Manifest next update:     Wed 13 May 2026 16:01:11 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: GN77X6AEuWd5tAXpCBJqZFQ6gstGUhwGGmKc1BxIT/g=)
                          2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:bb:49:db:c5:0f:dc:5e:44:0c:74:7c:59:b2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: May 12 16:01:11 2026 GMT
            Not After : May 13 16:01:11 2026 GMT
        Subject: CN=a6863cf45255dce38805277cf9db96e06c90e3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:e5:07:31:09:55:e1:f3:e5:95:73:0b:6c:
                    be:c1:5b:6e:51:76:8e:5e:8b:75:09:63:56:48:d6:
                    42:c2:20:32:59:d4:da:00:a8:f2:38:f5:fd:a5:7f:
                    92:39:59:46:35:3a:48:a3:2b:fd:04:21:0f:3a:74:
                    1b:e7:4b:d7:24:ac:b7:90:56:cb:3e:b5:60:48:44:
                    1a:ea:e1:ff:73:84:e8:3d:97:91:47:8a:c8:85:6a:
                    7f:5e:d1:ab:b1:cd:ca:af:e2:23:66:c2:9d:2f:87:
                    ed:3a:09:66:25:c3:ca:8f:ac:a8:c7:4f:64:0b:99:
                    2c:33:5e:eb:8f:de:d9:de:48:52:6c:d5:00:f6:81:
                    be:67:0b:f1:23:70:b8:c1:ff:56:7a:2e:a2:9d:b6:
                    16:c5:cc:d4:24:5d:cf:71:69:c3:6d:0d:99:de:35:
                    7a:58:ec:59:a8:59:a5:b9:ac:66:9f:e6:09:bb:aa:
                    1b:8f:5a:bd:92:83:75:65:14:5a:c9:b5:fc:50:29:
                    8d:9d:38:85:6e:4f:0d:f5:61:b6:5a:ff:99:02:18:
                    34:26:3b:ce:a6:06:ab:64:7b:7c:20:47:8f:01:6d:
                    b0:ac:ec:38:1c:b6:67:f1:ad:41:55:d6:e3:49:35:
                    98:bf:8a:e5:b3:10:9a:1c:5d:3f:8e:82:be:6d:43:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:86:3C:F4:52:55:DC:E3:88:05:27:7C:F9:DB:96:E0:6C:90:E3:B1
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:2f:a2:29:d9:7f:e1:50:99:ff:0b:6b:99:d6:cd:a1:50:
         67:5f:d3:58:43:b2:1e:db:0b:8b:b0:47:5a:20:04:0e:71:f3:
         57:d9:e4:8a:b2:5f:93:a3:87:24:e3:23:40:1a:0d:e6:6a:52:
         93:f8:84:e5:31:fc:ae:07:d6:bd:bb:c4:3f:0e:f5:73:bc:28:
         cc:b4:a8:74:84:63:af:a7:a9:29:26:e9:e2:82:05:7d:34:66:
         f6:05:5f:e8:fd:2e:1e:09:61:98:43:38:f6:42:22:06:57:cf:
         3e:77:c8:c9:44:5f:11:88:e7:60:e4:2d:eb:6b:8f:56:ea:b4:
         28:bc:c2:71:97:f0:b0:54:86:7d:3c:43:aa:1c:05:0a:44:0a:
         2f:39:98:86:55:b0:09:ef:8b:2b:0c:d6:92:cb:15:0b:17:30:
         07:af:29:6e:bf:9c:1a:71:67:44:70:1d:a8:9e:e4:3d:f7:58:
         eb:65:40:20:65:c5:25:04:5c:03:18:22:93:f9:78:32:f4:3c:
         a8:bc:9c:35:d5:8b:12:b6:d0:4e:5f:72:fc:65:35:26:b3:d7:
         1e:6d:d0:b6:1a:d5:8e:73:23:ba:b5:24:cc:36:3e:07:99:79:
         19:5e:44:a1:d4:98:89:94:e3:3c:44:32:6c:d5:04:ae:66:8f:
         01:b2:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:59 2026 by rpki-client