Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File:                     6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier:          5a8RIE1Yc3BIw28sBL5mSglcwtqov9WjakmSypMRHy0=
Subject key identifier:   27:33:A1:62:48:BE:77:11:EB:D3:F0:40:28:E9:C1:5C:D9:50:74:F6
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer:       /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial:       019E1DC6FFE867226D1331A364C50928227B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number:          0CEE
Signing time:             Tue 12 May 2026 20:00:41 +0000
Manifest this update:     Tue 12 May 2026 20:00:41 +0000
Manifest next update:     Wed 13 May 2026 20:00:41 +0000
Files and hashes:         1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: YeiAV3w8KhW8l9y/qGf3CkZ2ecFqgcpDs2nNksIAiJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c6:ff:e8:67:22:6d:13:31:a3:64:c5:09:28:22:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
        Validity
            Not Before: May 12 20:00:41 2026 GMT
            Not After : May 13 20:00:41 2026 GMT
        Subject: CN=2733a16248be7711ebd3f04028e9c15cd95074f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:78:72:1a:9a:a6:78:e9:c1:65:f4:ad:bf:35:
                    d8:4a:48:13:1a:14:34:06:ac:c8:92:b7:12:fa:3a:
                    d7:90:04:50:f8:0b:80:b5:41:8f:9c:40:46:0b:ef:
                    a3:be:74:98:c1:81:da:88:77:e3:a3:39:76:2d:71:
                    e7:d4:87:0d:41:4e:91:96:53:51:74:c0:5e:fb:54:
                    e8:22:da:15:b2:60:8f:ae:25:8b:e2:88:7c:0e:68:
                    60:01:c0:1d:0a:64:8b:00:15:04:42:ea:e1:13:e8:
                    66:02:23:f3:86:d6:1d:78:c3:79:7f:ce:37:04:39:
                    f9:d7:af:a1:aa:9c:50:58:5d:fd:bd:c0:1a:43:1b:
                    6a:99:51:eb:60:af:93:be:47:74:44:08:2c:a2:3d:
                    7b:b1:f8:40:97:3a:c0:9d:27:84:7b:e9:e8:24:01:
                    0b:ce:94:04:a2:3a:21:53:78:e4:00:ac:98:ee:07:
                    84:4f:05:f1:91:65:03:d3:b0:c5:38:47:bc:39:5a:
                    a0:5c:4a:9a:95:bb:64:90:ec:1f:a8:06:87:b4:59:
                    eb:8b:bb:d9:a7:61:3b:f9:47:8a:90:81:c0:48:05:
                    fa:de:04:49:05:ce:b9:f6:8f:df:d2:61:80:fb:0a:
                    13:a8:b8:e3:f9:c0:1b:7c:df:c0:ea:35:e1:a8:02:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:33:A1:62:48:BE:77:11:EB:D3:F0:40:28:E9:C1:5C:D9:50:74:F6
            X509v3 Authority Key Identifier:
                keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:7d:43:5c:31:de:88:5b:d7:c1:15:6c:1b:ef:c0:10:a7:
         2f:f4:48:48:18:6a:a2:95:95:1d:12:df:7f:15:3b:f1:ee:ea:
         f6:28:a6:74:3e:fe:be:14:20:6b:54:79:0f:e9:bc:28:ab:32:
         68:5a:e0:53:69:09:85:eb:b4:8c:04:f9:74:55:b3:bc:d8:6d:
         ce:0c:d5:20:75:f2:5c:8e:0a:e7:73:87:ca:77:07:4c:5e:fc:
         dc:d4:d7:f0:2e:2d:18:3e:f2:b0:15:af:b4:88:69:a4:d5:e9:
         e3:8d:55:e7:b5:31:14:ab:df:99:3f:61:1d:92:bd:13:79:60:
         fc:5c:26:c8:d6:97:14:66:96:71:2a:71:20:18:c6:7d:a1:9a:
         aa:e9:48:d5:0e:78:48:cf:28:ad:25:3a:83:51:9e:8e:4c:d4:
         a5:3c:7e:b1:99:6b:d3:a7:01:d1:37:97:55:f7:e1:5c:8c:1b:
         a9:67:48:6c:70:4d:aa:03:45:13:67:12:f2:86:42:80:2e:e2:
         27:30:0f:07:64:ac:88:d5:cd:43:36:89:8a:7c:08:37:43:eb:
         c5:07:b3:d3:e4:cf:4a:0b:34:a6:5c:a6:25:ea:84:8c:70:28:
         c4:3d:e0:33:24:ad:be:ea:95:97:eb:7e:cd:e0:61:7e:21:53:
         22:ef:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:58 2026 by rpki-client