Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File:                     kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier:          fQQTazOeX/udxIUF4tMLNZDVM5UrXqRT742aNhGstNk=
Subject key identifier:   47:C7:F7:FF:23:4B:22:F0:50:6E:B0:2D:17:6D:34:76:87:FB:DE:CD
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer:       /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial:       019EC480F6CA40C2FDA79DE12935AAD99833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number:          0BC6
Signing time:             Sun 14 Jun 2026 05:00:46 +0000
Manifest this update:     Sun 14 Jun 2026 05:00:46 +0000
Manifest next update:     Mon 15 Jun 2026 05:00:46 +0000
Files and hashes:         1: _rghgGhHIYbLY2yOEoA9mmW7wqg.roa (hash: LafLigZh1QXUn5FQibqQ6Xl17st+BespqipLbfL+dgY=)
                          2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: SCIVyRs+X2tSvhwUZP1xPIfWXOYqTab07rz4DH5PeFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:80:f6:ca:40:c2:fd:a7:9d:e1:29:35:aa:d9:98:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
        Validity
            Not Before: Jun 14 05:00:46 2026 GMT
            Not After : Jun 15 05:00:46 2026 GMT
        Subject: CN=47c7f7ff234b22f0506eb02d176d347687fbdecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:d2:d6:87:b2:77:a6:45:6a:78:fd:90:35:
                    1f:b0:e9:4e:81:4b:bf:3b:fc:d0:c2:72:6b:46:7d:
                    0f:2c:7a:f9:23:a3:85:bc:c6:4e:78:84:86:3d:67:
                    c0:ac:f1:84:4c:a2:d0:a0:38:c8:c9:81:7f:ef:99:
                    32:69:69:f2:7e:e9:e7:75:25:33:a9:c1:fb:21:d0:
                    cf:e5:a0:62:13:4a:cd:1c:be:ab:b2:af:94:c2:51:
                    73:16:c2:c3:f0:22:eb:c7:6d:c0:6d:cf:0b:43:80:
                    c6:00:3e:25:27:ae:b9:e3:a6:d0:5d:86:d2:6f:b2:
                    fe:ee:08:96:d4:d2:b0:79:99:a1:42:e9:73:e4:5f:
                    53:3b:25:52:e5:ec:4e:98:88:d2:7e:6d:55:76:60:
                    40:40:16:fe:12:52:21:ac:b6:6e:a4:f3:81:e9:ec:
                    1a:b6:98:c5:25:32:b3:99:ec:71:87:76:61:52:d5:
                    61:48:b3:ab:8e:1e:df:3d:ee:d5:4e:8d:67:60:94:
                    d2:2a:26:f1:c8:a5:6f:be:c9:e3:9a:c5:45:b0:ab:
                    45:a4:3e:12:09:0e:91:22:b3:07:b2:e8:23:b6:c9:
                    e7:b1:3d:54:ff:1a:9d:fd:fa:60:04:4d:13:8b:4e:
                    05:0a:01:11:df:3d:9a:6b:8b:e8:3c:3f:61:ac:56:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C7:F7:FF:23:4B:22:F0:50:6E:B0:2D:17:6D:34:76:87:FB:DE:CD
            X509v3 Authority Key Identifier:
                keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:dc:41:21:c5:c5:23:8d:79:61:0d:04:ae:07:c0:4a:38:b6:
         50:1c:49:5b:35:f3:98:71:88:81:bb:18:2a:e9:29:01:48:ac:
         9c:7b:f1:49:52:12:82:cb:eb:89:09:f0:66:82:56:5f:97:17:
         44:06:8e:20:4d:14:44:eb:47:f2:ab:74:7b:75:fe:91:ec:cc:
         04:ee:24:9f:6f:80:05:c6:8d:97:01:8a:2f:0d:e8:2d:e4:06:
         f0:25:d6:c1:1f:04:1a:1d:2c:eb:48:4f:7a:18:24:97:40:77:
         68:0a:5c:68:9a:8c:52:ed:c3:90:26:97:92:bc:c6:18:16:69:
         41:29:af:ac:b9:3f:d4:bf:01:20:cd:05:b1:0b:ef:7a:ce:a1:
         37:9d:eb:22:54:8a:ac:80:c5:7c:da:2a:3f:f1:30:f8:25:56:
         ca:fc:b3:7e:81:a7:48:13:e1:d9:ba:54:cf:a8:70:57:f2:0e:
         9b:4b:f4:49:85:54:1f:be:86:7b:70:5a:25:fe:22:92:73:0c:
         c5:61:c1:45:da:d5:d4:85:7e:de:fd:dc:7a:68:34:5a:1a:0d:
         25:65:a7:2c:73:e6:6c:97:c3:07:65:a7:63:77:7c:60:99:ca:
         d6:1a:c7:1d:5c:e8:9c:8e:4e:53:f7:d4:a8:78:bf:15:91:40:
         b0:98:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:36 2026 by rpki-client