Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
File:                     6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft (raw, json)
Hash identifier:          WERTelkDrv5XMu3GzFSwfmglikNvJM7hqCVZS6sVb5U=
Subject key identifier:   E2:9A:1D:F2:83:B1:EC:8E:62:26:29:67:84:3B:28:DD:87:AB:24:44
Authority key identifier: E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F
Certificate issuer:       /CN=e8a247598cc32160328417a1b10db67fdf59f10f
Certificate serial:       019ED34F623867D7FC1C3FD29B1C17D4BC82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
Manifest number:          0240
Signing time:             Wed 17 Jun 2026 02:00:55 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:55 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:55 +0000
Files and hashes:         1: 6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl (hash: cF9yXKES5gCFxFbx8CzqgR3FaDFSC/iZj6oN+B6kzLw=)
                          2: yGHbr2ivA9pRP9yvd8p4VSdt5fE.roa (hash: HjBy12YC1Gx1u2mMvJAV9cdmHNtVXZmrkIO3OMSXlIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:62:38:67:d7:fc:1c:3f:d2:9b:1c:17:d4:bc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a247598cc32160328417a1b10db67fdf59f10f
        Validity
            Not Before: Jun 17 02:00:55 2026 GMT
            Not After : Jun 18 02:00:55 2026 GMT
        Subject: CN=e29a1df283b1ec8e62262967843b28dd87ab2444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6a:8b:eb:b7:ae:38:57:0f:16:ac:60:74:3a:
                    33:87:84:e3:d9:f3:ff:1d:16:a3:f2:94:d4:13:80:
                    b4:ab:c8:02:ae:1f:ba:46:6b:6a:12:6c:34:8b:c4:
                    b8:a4:29:56:82:28:14:a6:92:da:24:5e:a4:37:da:
                    b1:c6:87:e3:ef:d3:d1:c1:5c:88:4e:25:a5:d0:2d:
                    2f:dd:0d:8e:2d:e3:7d:ac:39:da:aa:7d:1a:6a:ef:
                    fb:e5:b9:8f:6c:a4:2c:8c:07:ef:a3:07:ea:89:81:
                    7f:0c:85:95:7b:80:27:b6:ef:f4:0e:e6:52:68:91:
                    b0:d3:f0:3f:dc:39:9b:5d:da:35:bc:77:11:be:84:
                    5b:c9:ed:ea:4a:6d:ce:3c:73:7b:e5:35:63:af:25:
                    cb:f6:91:50:f9:bf:9d:23:19:27:f8:39:b3:8a:44:
                    53:1b:0d:8e:0a:66:c9:f1:78:8a:e0:6c:ab:22:20:
                    0c:94:5f:c3:5d:77:d4:37:42:c4:a1:f1:c0:e0:62:
                    ab:f4:67:7b:63:88:73:ef:18:14:d6:df:1b:fb:8e:
                    3a:85:68:1c:1e:0b:5a:cf:31:ab:ec:f8:19:af:23:
                    c4:b9:2d:10:2b:db:bc:38:65:eb:1d:61:7a:8c:4c:
                    67:f5:53:d4:27:e7:b0:68:a7:8b:52:7d:40:87:44:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:1D:F2:83:B1:EC:8E:62:26:29:67:84:3B:28:DD:87:AB:24:44
            X509v3 Authority Key Identifier:
                keyid:E8:A2:47:59:8C:C3:21:60:32:84:17:A1:B1:0D:B6:7F:DF:59:F1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KJHWYzDIWAyhBehsQ22f99Z8Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ebc57d-5c3e-4bad-b70d-819680db4358/1/6KJHWYzDIWAyhBehsQ22f99Z8Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:d1:70:46:4c:d4:23:bd:0f:61:f8:b1:e2:67:80:f3:0a:
         7c:94:af:5f:06:1e:d1:d7:7a:61:81:3c:7e:c5:4e:d3:f9:77:
         a5:72:da:c1:06:bc:51:f4:ad:6b:b5:bf:fb:78:87:f9:ed:ea:
         35:0c:65:b4:15:11:9a:a5:8a:f9:64:0d:6d:a9:d0:93:8f:96:
         d3:34:d9:83:9d:3f:90:9c:07:bd:6f:e9:3c:aa:22:9b:ea:91:
         f6:e7:15:78:57:9c:3b:21:1c:31:94:05:53:7f:e5:36:65:43:
         d9:56:2b:cf:99:29:25:7e:0c:17:fa:2b:f5:1d:29:23:37:0b:
         00:2c:03:99:02:fb:48:1b:01:27:cf:a8:65:8c:74:0e:99:23:
         7a:f2:72:39:e0:91:39:0a:b2:69:1e:bd:79:e3:55:ae:ca:53:
         97:b1:26:ab:3f:65:0d:54:48:b0:1b:db:c2:50:bc:77:d9:7a:
         cc:8c:03:b6:6d:22:81:98:80:00:db:27:3f:92:df:3f:d7:8f:
         2f:9e:d8:10:3e:ca:33:06:bc:69:10:86:a2:fa:3c:c2:0e:41:
         2c:ea:f2:0a:46:8f:0f:3a:40:e4:f2:61:eb:3e:10:c0:6a:c1:
         80:24:c6:da:1b:9e:9b:a9:72:76:dc:8a:02:6d:49:d5:63:a2:
         c5:ae:48:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TT2I4Z9f8HD/SmxwX1LyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTI0NzU5OGNjMzIxNjAzMjg0MTdhMWIxMGRiNjdmZGY1
OWYxMGYwHhcNMjYwNjE3MDIwMDU1WhcNMjYwNjE4MDIwMDU1WjAzMTEwLwYDVQQD
EyhlMjlhMWRmMjgzYjFlYzhlNjIyNjI5Njc4NDNiMjhkZDg3YWIyNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WqL67euOFcPFqxgdDozh4Tj2fP/
HRaj8pTUE4C0q8gCrh+6RmtqEmw0i8S4pClWgigUppLaJF6kN9qxxofj79PRwVyI
TiWl0C0v3Q2OLeN9rDnaqn0aau/75bmPbKQsjAfvowfqiYF/DIWVe4Antu/0DuZS
aJGw0/A/3DmbXdo1vHcRvoRbye3qSm3OPHN75TVjryXL9pFQ+b+dIxkn+DmzikRT
Gw2OCmbJ8XiK4GyrIiAMlF/DXXfUN0LEofHA4GKr9Gd7Y4hz7xgU1t8b+446hWgc
HgtazzGr7PgZryPEuS0QK9u8OGXrHWF6jExn9VPUJ+ewaKeLUn1Ah0QzDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKaHfKDseyOYiYpZ4Q7KN2HqyREMB8GA1UdIwQY
MBaAFOiiR1mMwyFgMoQXobENtn/fWfEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQt
ODE5NjgwZGI0MzU4LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lYmM1N2QtNWMzZS00YmFkLWI3MGQtODE5NjgwZGI0MzU4
LzEvNktKSFdZekRJV0F5aEJlaHNRMjJmOTlaOFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKnRcEZM
1CO9D2H4seJngPMKfJSvXwYe0dd6YYE8fsVO0/l3pXLawQa8UfSta7W/+3iH+e3q
NQxltBURmqWK+WQNbanQk4+W0zTZg50/kJwHvW/pPKoim+qR9ucVeFecOyEcMZQF
U3/lNmVD2VYrz5kpJX4MF/or9R0pIzcLACwDmQL7SBsBJ8+oZYx0DpkjevJyOeCR
OQqyaR69eeNVrspTl7Emqz9lDVRIsBvbwlC8d9l6zIwDtm0igZiAANsnP5LfP9eP
L57YED7KMwa8aRCGovo8wg5BLOryCkaPDzpA5PJh6z4QwGrBgCTG2huem6lydtyK
Am1J1WOixa5IfA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:11 2026 by rpki-client