Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File:                     6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier:          jLxZaFeSgF8imW3N5CMVncixIkr1h1CRE27m3V/t+fA=
Subject key identifier:   4A:A8:DB:2B:BC:14:72:D1:2C:84:59:3B:5B:63:81:9D:45:99:DF:C7
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer:       /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial:       019EBEEC75DA270DA4CA8EBC61A1114507D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number:          14D3
Signing time:             Sat 13 Jun 2026 03:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:27 +0000
Files and hashes:         1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: IL+KEubOHu0llCDMRO7b+nhGrIxXaqD7CNSXNV46VRM=)
                          2: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (hash: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:75:da:27:0d:a4:ca:8e:bc:61:a1:11:45:07:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
        Validity
            Not Before: Jun 13 03:00:27 2026 GMT
            Not After : Jun 14 03:00:27 2026 GMT
        Subject: CN=4aa8db2bbc1472d12c84593b5b63819d4599dfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:54:da:96:43:04:cd:79:ff:e3:85:2c:3b:
                    f1:41:b6:1d:75:6e:c3:7a:52:f1:90:c7:f3:26:ca:
                    1f:ea:9e:da:4d:0d:35:4a:a4:34:54:c3:58:32:b2:
                    3d:e6:bd:43:05:64:6c:3a:63:48:46:22:fd:87:7e:
                    3d:d5:5f:51:2a:9d:6d:89:e3:a1:50:b4:fe:ac:e9:
                    4b:93:fb:23:d2:e9:3a:2b:c5:f7:65:e6:ff:91:31:
                    73:ba:53:e3:63:63:69:6f:7c:27:b5:7d:a1:8a:03:
                    41:47:85:fa:c2:c7:a9:01:a6:97:1f:2d:ec:1c:af:
                    5b:32:01:c5:74:32:6a:c7:cb:d5:d0:5d:77:f7:45:
                    05:e2:b7:51:3a:1f:52:4c:6a:3a:e1:f8:c8:17:b1:
                    d2:79:17:4a:04:61:3b:5a:b2:ea:c3:61:00:34:53:
                    07:ad:1a:76:9a:d6:ed:3d:e5:75:a4:cb:53:13:58:
                    4c:e0:27:49:5a:66:84:20:f8:f7:6d:fe:fb:49:d7:
                    76:32:64:9d:69:02:70:a1:5d:e4:d1:d3:a7:99:97:
                    65:b9:a3:03:62:5c:05:6f:f8:b0:c3:07:29:70:13:
                    af:31:fa:00:83:1d:e8:f4:b3:be:ac:da:54:8c:de:
                    9d:d4:1a:76:e8:bb:dd:39:5b:d7:c3:42:0e:e6:1f:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A8:DB:2B:BC:14:72:D1:2C:84:59:3B:5B:63:81:9D:45:99:DF:C7
            X509v3 Authority Key Identifier:
                keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:57:58:fa:52:f0:c6:aa:5d:55:67:1d:6e:f8:ab:f5:7d:
         53:fe:d9:fd:fc:a9:e4:8a:50:c5:02:2d:62:1d:24:1c:18:6f:
         20:b8:47:37:4f:b3:9b:14:ce:12:47:c7:0d:e3:c6:af:76:52:
         4f:ff:45:3c:2c:ae:7c:78:f1:b1:b0:0b:13:fc:6b:91:2c:cf:
         ab:bd:3d:a0:aa:42:8c:92:b7:a6:4a:cc:42:2d:cc:ed:e9:84:
         c5:a8:87:0a:57:4e:30:79:59:5d:22:e6:fd:b1:4b:13:6a:a2:
         f1:bd:98:34:76:c2:2f:3b:21:3c:fe:da:cb:17:cd:e3:99:e8:
         64:83:fc:89:0f:50:60:fc:54:33:3c:af:49:e0:de:4a:d6:d7:
         ec:e2:e0:cc:2d:e6:51:f3:2d:a5:00:7e:7a:3a:a7:79:01:34:
         6c:05:a8:a6:ce:ed:72:52:e8:17:e7:10:1a:32:fe:a8:6e:8d:
         44:2d:48:5d:13:a8:03:9f:35:58:b2:7d:47:b3:60:22:3a:d1:
         e0:48:8b:38:1e:47:12:db:7f:76:37:6d:e2:56:73:7d:f9:22:
         fd:ea:66:fc:c6:cf:68:48:fd:2d:09:f6:ef:e3:83:f8:22:17:
         9c:9f:65:ae:7a:1c:fb:f5:ed:67:4a:2f:a3:8a:b7:6f:cc:7e:
         74:e4:92:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:38 2026 by rpki-client