Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File:                     6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier:          mTTg0dwehjuoeOVKjmWHJUH1RjeS8VFNTEIJJcl7UkU=
Subject key identifier:   CC:F1:4D:BD:07:22:3C:03:28:CC:F5:E1:6A:5F:20:5B:80:EB:E1:DC
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer:       /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial:       019EC224CB2B6E3EE5DD2A7F3FE19D539C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number:          0D96
Signing time:             Sat 13 Jun 2026 18:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:51 +0000
Files and hashes:         1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: q3HjNxdjQnhSratefwpfD49GdCS5y9o2c9v8TGlAh6w=)
                          2: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (hash: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:cb:2b:6e:3e:e5:dd:2a:7f:3f:e1:9d:53:9c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
        Validity
            Not Before: Jun 13 18:00:51 2026 GMT
            Not After : Jun 14 18:00:51 2026 GMT
        Subject: CN=ccf14dbd07223c0328ccf5e16a5f205b80ebe1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:34:02:58:30:42:75:7d:cc:f0:50:9e:b4:
                    23:00:19:bc:fd:73:e1:02:1a:f2:69:5a:45:0e:cd:
                    f1:67:00:73:11:58:ca:55:47:04:e2:33:bf:ca:4e:
                    4d:e8:4f:4f:42:44:80:fb:50:e7:c8:a8:d2:e2:e6:
                    87:a6:00:80:a8:f2:7c:4e:01:a6:b4:3a:69:d3:ce:
                    0c:e9:cb:aa:1f:4b:18:e0:83:8a:77:22:f3:4e:0f:
                    af:25:f6:92:78:c3:af:eb:3c:0c:2a:35:06:6c:80:
                    fe:65:d4:b5:e5:bc:35:48:7c:6c:31:9b:f5:82:a2:
                    da:72:a1:b9:82:44:33:57:b0:75:c5:83:0b:4c:e1:
                    ab:71:4c:36:23:6b:69:2b:78:0e:12:f9:19:c6:f7:
                    78:3e:28:27:27:e3:c3:28:5c:66:1c:91:79:71:91:
                    78:24:69:ab:d7:16:4b:17:6c:c6:de:79:f6:28:88:
                    d8:eb:6d:97:ed:41:3b:b7:f4:a7:b9:67:ea:b0:0d:
                    c8:bf:64:86:bc:e7:fd:1e:57:04:9a:d4:68:40:1e:
                    14:ed:ae:1c:85:fd:af:e6:bf:ef:df:82:c4:3a:aa:
                    a1:34:46:d9:ff:5a:21:ca:87:69:33:9e:40:20:b4:
                    62:09:22:6f:4b:4f:c7:09:3e:3b:63:22:60:53:ec:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F1:4D:BD:07:22:3C:03:28:CC:F5:E1:6A:5F:20:5B:80:EB:E1:DC
            X509v3 Authority Key Identifier:
                keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:87:e2:13:06:2e:ed:a8:6e:8b:6e:09:94:c1:28:63:54:82:
         5b:cc:bb:48:53:10:c6:08:fb:da:d3:7b:13:86:cd:d1:c5:9a:
         3e:20:b3:c0:be:f5:0c:7c:5f:cd:1e:80:b6:9d:80:b2:28:be:
         2d:66:89:38:cd:85:c8:27:a6:92:cf:8f:80:0a:81:83:7b:cd:
         ce:2a:ee:d2:b4:27:35:8d:06:7c:f4:6b:7a:d9:f9:37:e1:f3:
         26:c3:07:2e:6b:d1:93:3b:ae:24:a4:a1:3c:0b:ae:9f:17:e1:
         d3:5e:4d:4b:57:94:47:1d:a2:6a:c6:1b:63:74:ec:69:2e:1e:
         37:d4:2d:a0:83:a7:df:bf:27:f3:be:11:77:4c:69:cf:00:6c:
         a3:4c:9e:c6:ea:c2:2e:0c:94:d7:d8:74:f9:4a:c5:7b:71:21:
         fd:b4:83:3e:d9:0c:43:8d:b9:09:23:11:7d:51:75:25:7a:a9:
         0a:9c:6f:91:bc:55:0d:89:31:56:df:1d:aa:4d:0b:88:55:09:
         d9:93:47:36:dd:1e:64:bd:e7:d3:40:c7:f1:83:78:e3:63:c9:
         b2:f7:c5:8e:99:af:b2:79:f9:4a:df:32:d8:6c:dc:4e:10:58:
         62:aa:dc:a4:13:45:f6:3c:82:2c:02:82:f2:d2:9c:1f:f2:7d:
         0c:e3:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:40 2026 by rpki-client