Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File:                     B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier:          nkA3VfxyT+DXM+K1lRujbBVpgMHtsV7sPP/spF4SLd0=
Subject key identifier:   6B:AC:B6:89:EA:54:7F:44:C7:73:4E:ED:D0:D0:5F:6E:F7:CF:2E:4D
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer:       /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial:       019EBE7F14DF3A87740F293835F61D186B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 01:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:59 +0000
Files and hashes:         1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: gfRqWsEaozQkIDWj6k0MGMnvsm0QOtb4hiWG4OvLysc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:14:df:3a:87:74:0f:29:38:35:f6:1d:18:6b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
        Validity
            Not Before: Jun 13 01:00:59 2026 GMT
            Not After : Jun 14 01:00:59 2026 GMT
        Subject: CN=6bacb689ea547f44c7734eedd0d05f6ef7cf2e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:d6:3d:51:98:a9:5b:4d:b1:3a:01:9f:0d:
                    ab:3a:05:b6:7e:05:08:ce:18:df:71:95:e5:6b:f2:
                    75:29:b8:eb:86:78:3e:0c:94:2f:bb:aa:9c:96:28:
                    78:99:9b:54:e4:c7:f4:6d:d5:e6:2e:76:b8:ef:df:
                    0a:d4:56:a0:69:6e:2f:e7:5f:d2:e6:73:47:ed:bd:
                    7c:69:07:5c:9b:1a:76:ed:c6:24:8c:eb:b6:a7:48:
                    37:dc:7d:08:21:eb:6a:d3:25:72:45:31:a5:80:90:
                    5a:d3:2a:de:05:ac:47:19:f8:72:ea:17:d0:b8:c0:
                    e9:e6:a5:12:2d:d6:a0:97:8b:91:6a:0b:d1:ae:9f:
                    4c:d7:17:9f:88:03:b1:0c:af:10:62:08:29:b6:ed:
                    dd:f8:9a:17:ac:e2:6e:6f:aa:70:03:c6:44:60:e8:
                    b8:a9:e1:a9:a4:36:4a:04:8e:c7:e5:de:92:d0:a5:
                    72:59:75:b1:83:45:37:53:11:b5:02:31:8b:96:48:
                    cb:d8:45:db:ff:d0:f9:00:c2:5d:80:e0:22:77:da:
                    1e:9c:7b:35:64:cf:55:27:79:0d:e0:1b:c1:d1:bd:
                    11:0a:5f:d9:d2:6d:aa:74:fd:38:5f:2f:04:93:c1:
                    85:ac:c9:24:11:23:52:cf:ce:f0:7d:76:d4:39:27:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AC:B6:89:EA:54:7F:44:C7:73:4E:ED:D0:D0:5F:6E:F7:CF:2E:4D
            X509v3 Authority Key Identifier:
                keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:5f:48:76:cc:cb:5b:52:2e:c1:dd:a2:35:93:48:06:e9:
         c4:f3:5d:55:0d:19:36:4f:d2:02:94:5e:a9:d0:2d:5a:f5:ea:
         e7:5d:28:b9:43:52:f5:5c:d3:05:2c:70:f5:ad:a6:ac:f1:bb:
         1e:04:ed:c8:a1:e9:24:05:6a:c7:d4:08:99:3e:3b:05:50:60:
         be:2c:3a:3c:b5:35:fc:a1:f5:ae:8e:3f:1b:8f:00:94:7e:02:
         f3:cf:a5:0e:42:b7:64:13:e3:3d:3f:c8:3c:a1:98:9c:26:5d:
         c0:2a:53:58:09:3e:34:7f:13:a9:ae:60:ba:73:64:a4:06:dd:
         21:7c:e1:ae:d5:49:e1:45:26:d8:7c:26:17:b1:0c:55:5e:48:
         8c:12:c5:a4:82:d0:9f:17:20:4b:a3:73:a1:53:f5:70:33:8a:
         f5:dd:e9:8b:91:36:67:aa:aa:15:f0:9d:ed:de:73:1e:09:ea:
         b4:73:22:48:f1:d4:de:b7:18:ca:1f:5b:89:a2:66:05:35:88:
         17:31:6a:c4:82:b8:e2:89:28:32:34:22:57:73:64:88:7b:61:
         f1:1f:d5:e8:e9:92:76:00:c3:ed:9a:62:8c:9b:ce:41:8c:7a:
         10:de:da:c8:af:57:67:4c:d7:9d:78:2b:3a:7f:57:8b:9c:05:
         b0:47:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:31 2026 by rpki-client