Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          rDTh0Opx5mqmDRDY/WmJyJmO8/VoXVL93WLQRnyKBsY=
Subject key identifier:   91:0B:85:87:AB:73:40:F9:56:E2:BD:64:B1:7C:50:0D:9B:A5:6B:F5
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       019EC2247E37CB0FE14D46C92C4428618BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 18:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:31 +0000
Files and hashes:         1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
                          2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: TC1YTYp3q5FZoIZ+2L7Dhp70ue3d1WaFAAPUj5pLBHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:7e:37:cb:0f:e1:4d:46:c9:2c:44:28:61:8b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Jun 13 18:00:31 2026 GMT
            Not After : Jun 14 18:00:31 2026 GMT
        Subject: CN=910b8587ab7340f956e2bd64b17c500d9ba56bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:02:47:93:70:53:a5:47:46:26:9a:3c:4d:8a:
                    c4:e1:c8:21:42:40:a9:32:a2:e8:19:34:00:76:d7:
                    c1:25:4b:83:61:e8:81:e2:23:22:56:bd:e8:d3:dd:
                    dc:2d:78:d4:b2:35:56:0a:18:45:8c:e2:e8:0f:d3:
                    7c:71:99:99:11:e3:14:49:53:34:d8:55:6f:bc:5b:
                    31:3d:93:50:39:64:88:f7:c6:02:a4:f4:9b:8c:22:
                    c0:4d:45:55:e8:70:0d:50:ae:eb:91:dc:df:3f:0b:
                    d1:52:e0:21:fd:55:0b:70:92:85:26:8d:98:a3:4c:
                    a5:b4:52:43:02:2d:e2:6a:e1:8f:b9:1f:ee:4a:6f:
                    00:b6:5c:b0:16:9e:dd:69:c6:ca:91:01:a5:8e:e2:
                    dd:ea:07:5e:d4:0c:2f:9c:34:fd:e9:d8:82:5c:ed:
                    9f:ba:86:d5:5a:9b:a4:d8:cf:f2:95:40:3e:4d:26:
                    51:8e:71:c4:29:ee:13:e2:27:31:6e:88:eb:98:b9:
                    a3:40:c7:8a:71:eb:a0:67:13:8b:47:dc:56:25:55:
                    80:1e:30:af:11:63:eb:40:13:1a:0c:98:32:a2:2f:
                    1e:e0:eb:9c:c9:75:9a:9c:c9:aa:29:ed:9c:27:79:
                    6c:2d:e0:24:f5:24:e6:ae:f3:6c:91:1e:8a:d1:99:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:85:87:AB:73:40:F9:56:E2:BD:64:B1:7C:50:0D:9B:A5:6B:F5
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:c1:f7:98:3b:a9:3a:97:bd:9b:d5:ff:ea:ec:ca:d0:11:
         66:8a:9c:45:5b:fc:3d:5c:00:3b:05:fc:30:09:c9:76:14:e7:
         fb:92:d4:b4:55:58:db:37:83:73:f8:26:22:9f:a6:0f:0e:39:
         25:dc:13:4c:75:e7:3d:73:d3:d9:f1:4b:71:4a:49:25:66:b7:
         ad:bb:a0:83:a8:97:01:41:6c:88:ea:19:99:1f:3e:e2:93:92:
         7a:84:be:d3:df:f4:56:4b:0d:11:4c:14:63:46:cc:e5:e6:ba:
         f7:e8:4f:41:c5:fb:6d:fe:46:f8:ae:12:e2:a7:49:7d:99:5d:
         17:66:56:74:10:55:87:34:7e:33:a0:b2:fd:0c:4c:15:7a:15:
         9f:83:e2:95:58:e4:d6:57:1d:95:fe:f9:95:a9:92:1c:72:c0:
         e8:2d:ba:ca:9e:dd:72:0d:1f:59:df:9f:45:bb:9f:95:de:37:
         b8:d1:1d:30:be:65:ba:a4:ac:5e:77:1c:d2:9d:92:38:f5:65:
         97:3f:b5:1f:2d:dd:67:b1:29:ec:84:04:b5:08:62:fe:da:4d:
         58:57:e9:f6:30:6b:fb:21:8c:9f:5b:60:dc:eb:33:b3:66:4e:
         cf:e4:fb:72:7d:d2:7c:fc:f5:65:90:16:ad:06:f4:6e:d3:a9:
         ba:27:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:18 2026 by rpki-client