Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File:                     1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier:          Dox3MA5Ngd5lFTHZ40XJgSp1b5yGeaWfn6AYvBz/sCs=
Subject key identifier:   81:B4:BB:70:69:F1:7C:EF:2B:DA:D0:01:24:71:4B:88:43:F7:13:1C
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer:       /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial:       019EC111C2DDD3C41A50773221AA0FD7CEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 13:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:27 +0000
Files and hashes:         1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: TSRVjwzMdUqN7ksuYZx2mwSX3mbC75B12IjmaNQHVJw=)
                          2: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (hash: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:c2:dd:d3:c4:1a:50:77:32:21:aa:0f:d7:ce:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
        Validity
            Not Before: Jun 13 13:00:27 2026 GMT
            Not After : Jun 14 13:00:27 2026 GMT
        Subject: CN=81b4bb7069f17cef2bdad00124714b8843f7131c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:50:09:4c:9f:77:55:c3:1e:fe:e7:3b:1b:
                    99:d2:2d:27:4f:f4:25:b4:29:e2:05:2e:73:90:29:
                    1a:1f:f8:32:f7:74:97:a7:44:ce:e8:3c:5c:84:cb:
                    e4:4c:72:18:61:51:cb:e8:92:65:e2:77:8b:f8:89:
                    34:c6:e7:7c:67:6b:7a:24:3e:f7:51:e7:23:2c:e9:
                    b9:5f:73:60:5e:f1:70:d3:b2:a0:fb:a9:88:bf:a4:
                    d3:6d:dd:3e:a1:51:01:b0:24:bb:41:86:f7:4d:2e:
                    09:ec:cf:01:22:e9:d6:56:40:f8:06:90:9d:a4:56:
                    71:dc:34:e5:44:72:83:e1:11:a8:50:e5:e6:e8:fd:
                    b3:75:38:45:c0:6e:a6:5f:c2:cf:ea:7d:ef:ff:ff:
                    ad:82:e8:39:51:e1:e8:e3:a5:d9:31:e1:c8:1f:2a:
                    28:34:8f:9d:c1:7d:75:de:a4:5f:01:1b:71:cb:c9:
                    a8:3f:5f:bc:f5:84:2b:85:59:0a:43:c7:e7:e0:45:
                    39:b6:0b:d6:39:9a:35:2b:64:2f:29:17:8f:46:01:
                    19:7f:62:6e:2c:3c:82:25:22:c1:35:ab:68:a4:b6:
                    20:3a:62:75:db:5f:a8:dd:ff:32:90:0f:6b:85:e4:
                    55:3e:18:52:6d:43:48:5e:1e:62:4d:b7:e6:17:92:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:BB:70:69:F1:7C:EF:2B:DA:D0:01:24:71:4B:88:43:F7:13:1C
            X509v3 Authority Key Identifier:
                keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:2a:99:15:1a:77:21:a8:bc:39:cb:79:40:84:55:ff:49:
         6b:ef:13:c2:4d:5a:e6:f7:b6:58:4b:f8:4d:78:56:c3:cb:e3:
         a5:00:18:b0:ac:c5:19:6e:66:d7:84:ad:44:1d:2a:dc:8b:a8:
         26:8d:70:71:16:93:2b:cd:69:f9:07:a1:a1:16:af:fb:fa:1b:
         c3:98:a3:89:a2:e1:19:a2:ac:0b:18:65:e4:fc:79:f1:a1:01:
         f8:5d:4e:18:6c:c4:cf:05:7f:f5:44:e4:7b:8e:29:9a:51:67:
         4b:a4:f0:af:4e:f9:74:21:50:0f:74:e8:b8:fb:9b:4c:4a:da:
         bd:ed:ec:33:23:93:c1:b7:1d:e6:50:76:e1:c3:38:fd:48:07:
         f8:27:33:e4:d6:c8:a3:ae:21:6a:dc:e3:e2:43:48:68:28:f5:
         92:e4:44:85:57:7d:6f:47:9f:96:69:4f:2e:6a:24:05:4a:eb:
         8b:4c:a8:dd:59:6a:26:90:78:c1:5a:87:d5:d3:d9:b6:66:a4:
         cd:6c:80:16:4b:67:f5:24:65:bf:07:b2:d1:eb:b6:6a:cb:96:
         09:57:60:8f:8a:b4:a2:0a:40:64:ca:7c:58:2d:e4:0e:b0:0a:
         48:b6:b1:d9:08:bb:c3:20:08:0d:60:d0:21:8f:6e:40:67:cf:
         9e:ee:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:53 2026 by rpki-client