Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
File:                     6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json)
Hash identifier:          FfWxBejnp9ra2BEQzgjMUb7Nfczz/G9NATx6gutB66Y=
Subject key identifier:   28:46:9E:D1:E5:33:BE:1C:4E:CD:B9:C4:F1:D2:1D:1C:27:38:F7:48
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Certificate issuer:       /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial:       019EBD35A0ECC847D582631BB517782CF981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
Manifest number:          12A2
Signing time:             Fri 12 Jun 2026 19:01:08 +0000
Manifest this update:     Fri 12 Jun 2026 19:01:08 +0000
Manifest next update:     Sat 13 Jun 2026 19:01:08 +0000
Files and hashes:         1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: P9x949MAB8AIORg/wwNW/iUyIihkQNb7+tlBB9uT3q4=)
                          2: vHb2PXbLOQDiEgmgNVeM25O_uYw.roa (hash: A0zzK6+DweI9ov6X0YBv5MoDDd8w4Zw2H0qKl9mjATM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:35:a0:ec:c8:47:d5:82:63:1b:b5:17:78:2c:f9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
        Validity
            Not Before: Jun 12 19:01:08 2026 GMT
            Not After : Jun 13 19:01:08 2026 GMT
        Subject: CN=28469ed1e533be1c4ecdb9c4f1d21d1c2738f748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:6c:b5:a0:b8:23:2c:ab:58:cd:f8:93:74:
                    76:bf:90:2e:fe:1b:ad:c5:21:25:75:01:08:3c:4c:
                    06:2e:8c:dd:db:36:d4:e1:84:24:90:db:b2:9b:a9:
                    41:41:4b:ef:d1:c3:e7:8d:27:c6:84:ad:63:12:74:
                    79:9f:56:f1:6e:41:4e:1f:10:b1:91:ff:3a:af:b9:
                    a7:a1:31:62:54:2b:26:b9:c6:a7:4d:ea:5d:7f:86:
                    02:78:d8:90:5c:cb:80:61:06:ac:74:d5:c6:2f:e6:
                    f6:b0:6b:dc:5c:eb:b8:45:6f:8c:0b:c6:0b:9c:aa:
                    92:fc:2d:15:30:99:b8:41:2f:e0:88:20:c8:4c:f1:
                    8f:ed:44:20:0f:67:fb:14:d0:97:ad:7d:51:37:25:
                    66:c4:6b:63:50:20:7f:ac:44:cb:25:22:8e:ec:2c:
                    ab:08:b1:a8:ef:5d:9b:4b:16:49:8d:5f:f2:ad:87:
                    a0:ce:ef:04:95:46:16:d2:3b:dc:69:9c:96:07:41:
                    16:0a:40:5a:c9:9a:8c:15:ec:3b:fe:0c:05:b8:b5:
                    45:b1:bc:dd:82:03:11:58:e1:a7:84:7f:fa:b8:ad:
                    1b:09:21:1b:e5:09:b6:d3:81:75:7c:f3:41:ca:73:
                    36:30:4f:8f:cd:be:8d:b9:cc:2c:56:5b:cc:6b:06:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:9E:D1:E5:33:BE:1C:4E:CD:B9:C4:F1:D2:1D:1C:27:38:F7:48
            X509v3 Authority Key Identifier:
                keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:50:96:55:0b:58:e4:c1:4e:55:2c:ca:45:86:5b:60:f5:f6:
         f9:0d:ee:25:d2:b8:ef:00:df:a2:e2:fd:a1:1c:80:32:91:c8:
         af:4c:8a:56:f8:c6:d7:6b:55:be:8e:8b:f9:4f:82:f6:b3:1a:
         6e:0f:f5:e1:2a:90:c0:1e:35:db:a0:0c:bc:45:20:f8:2f:5e:
         19:8e:30:61:8f:34:17:3d:36:39:54:2c:85:9c:8c:b5:4a:2f:
         73:70:bb:2d:dc:f8:05:cf:5e:42:a0:98:57:8f:68:65:66:d6:
         dd:fb:f1:5b:fb:f3:45:17:8d:84:4e:55:81:04:93:a2:af:61:
         07:00:b6:1b:19:62:51:24:a7:18:85:00:8a:0c:ce:44:f8:5f:
         af:c8:7b:16:45:25:d4:ed:31:13:1e:5a:4f:8c:5c:9c:28:cb:
         d1:3d:42:9c:c3:ed:2c:10:a3:59:8c:a6:a0:b0:cc:d2:95:10:
         a2:d1:dd:20:09:eb:10:db:25:db:f3:7c:ec:75:92:12:9b:a0:
         f5:d8:f6:f8:a0:70:0c:72:c1:c2:2d:ae:f5:4b:87:33:ef:bd:
         90:48:07:c0:0a:ce:59:13:eb:d7:b4:fe:2b:8d:39:f6:80:58:
         d2:5c:cc:8d:02:e2:7f:46:7a:87:d2:d8:98:f1:f8:4b:a2:fc:
         1f:fb:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:31 2026 by rpki-client