Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File:                     6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier:          aR6+17g7T6gRzIvZa9oD/YnQLPiQ+spUdcTBYYHOeFc=
Subject key identifier:   A2:4B:66:C9:CB:E6:57:BA:9A:53:4F:D7:92:DD:FC:AD:94:6B:18:F6
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer:       /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial:       019EBE7ECD95F1F74B64A67F0D66E2D226DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number:          102A
Signing time:             Sat 13 Jun 2026 01:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:41 +0000
Files and hashes:         1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: 7QwzWA5/f90ViBQfkQQ6LxlYFFfXKhrCuKF0QBDQp7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:cd:95:f1:f7:4b:64:a6:7f:0d:66:e2:d2:26:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
        Validity
            Not Before: Jun 13 01:00:41 2026 GMT
            Not After : Jun 14 01:00:41 2026 GMT
        Subject: CN=a24b66c9cbe657ba9a534fd792ddfcad946b18f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:1c:37:45:e9:3d:07:c9:f2:12:47:77:39:
                    b0:8f:de:aa:91:48:00:52:40:17:e7:7f:c6:2f:c4:
                    2d:d4:a7:72:43:83:13:d2:94:4b:f0:d2:b2:80:6c:
                    bb:87:1f:9b:ce:56:c5:2c:2d:35:57:e6:e1:82:18:
                    13:d2:ed:48:88:21:9b:72:6b:95:27:e9:bd:16:c3:
                    72:11:96:1e:09:10:30:48:2e:2c:e9:30:85:2d:bf:
                    fa:87:c4:9b:4d:96:e2:d8:56:4b:d7:31:c8:cd:78:
                    31:34:d8:1a:b5:95:16:c7:54:fa:35:7d:b4:33:c7:
                    d5:27:05:32:d1:33:ad:d6:eb:62:b3:02:d2:90:f5:
                    98:24:53:64:24:92:92:80:be:ea:4b:37:0c:3c:f3:
                    92:fb:7b:e7:86:e5:e0:b1:18:f1:3e:af:c3:f3:13:
                    0b:ff:3e:c4:24:b6:ea:77:6e:65:65:c5:31:cb:48:
                    9f:14:98:5e:a7:54:26:de:23:0e:a3:6b:78:f3:4b:
                    c5:61:55:3a:be:d7:97:75:83:2b:1e:53:d4:e5:20:
                    e6:7a:da:04:3e:b7:ea:04:c1:05:c8:86:53:26:f1:
                    49:1d:10:08:b0:81:df:3f:49:8b:65:26:86:d4:b7:
                    af:e7:3f:83:55:c1:04:41:2c:4e:54:b5:e1:bd:61:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4B:66:C9:CB:E6:57:BA:9A:53:4F:D7:92:DD:FC:AD:94:6B:18:F6
            X509v3 Authority Key Identifier:
                keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e5:7e:65:ba:9f:91:50:97:a5:64:91:6b:a0:00:c9:40:5e:
         e3:15:21:70:ce:fa:f9:d3:51:1c:18:96:9b:e1:8b:92:69:ee:
         fa:29:d8:f5:55:6b:bc:e1:d6:92:23:ab:7e:6b:bf:9c:30:30:
         d9:7e:5b:39:b9:31:28:3a:c2:11:dd:62:fe:7a:2e:b6:75:d3:
         3d:20:a3:9f:88:e2:7e:c4:65:ec:04:d9:b9:cd:c7:f9:81:88:
         90:6d:60:4f:96:d9:58:ee:c0:5c:94:3e:af:b4:68:31:3e:40:
         8d:f3:9e:a3:1a:d0:b8:b9:42:7e:9b:40:7c:4f:3a:1d:1c:fc:
         79:ae:96:fc:9b:8d:e9:a2:d7:74:16:75:ef:47:45:f2:7b:cc:
         ad:bb:6f:28:10:58:93:75:1a:ff:84:6c:5d:7d:37:a9:71:79:
         56:5a:b2:16:5a:26:09:1b:59:8d:92:43:07:d8:e8:21:47:93:
         37:01:81:e8:d6:b7:34:e2:64:1c:0c:97:59:52:84:f3:9a:6c:
         41:48:27:a4:94:30:32:3d:11:a9:df:6f:4e:0f:30:41:f2:0a:
         69:6b:b3:7c:75:92:26:70:9f:3b:7c:5b:22:28:6b:6f:e3:fa:
         4d:01:ab:ab:12:95:89:19:ba:62:00:4e:2b:c2:71:ac:be:0a:
         a1:d7:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:04 2026 by rpki-client