Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          YKXv2IthuoaryII8ERJ5+xKsULeZTWWvntLN45UZleA=
Subject key identifier:   FC:BE:CA:CD:15:80:BF:9A:79:FB:99:D9:26:03:0B:C1:F2:9D:CF:15
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       019EBE479A0BCEF24BCB2903C52B05E963BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 00:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:23 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: hFeNuzvdvY5uhidy5sW28c+tjUdXfWSTbv/dnASLCx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:9a:0b:ce:f2:4b:cb:29:03:c5:2b:05:e9:63:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Jun 13 00:00:23 2026 GMT
            Not After : Jun 14 00:00:23 2026 GMT
        Subject: CN=fcbecacd1580bf9a79fb99d926030bc1f29dcf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:48:c7:67:f5:9f:d2:7c:27:86:97:7f:d6:06:
                    13:dc:c9:f5:ef:72:dd:5d:fe:9f:a2:cb:fd:af:3a:
                    d7:61:0a:e7:a7:0c:71:fe:be:12:8c:b0:87:46:c0:
                    2d:3b:a6:f0:ff:2a:e8:16:62:f5:69:66:9f:c3:06:
                    48:85:2e:cd:9f:7a:aa:6e:20:fa:0a:5f:58:3a:85:
                    66:4f:b2:fa:07:6b:ea:0b:17:17:43:57:ca:f5:9a:
                    e7:49:ba:23:2f:3e:b1:21:55:d6:4c:08:2b:40:1f:
                    54:eb:e7:92:ef:5f:6a:07:9d:5d:e8:5f:6d:84:5b:
                    92:ec:87:39:a1:40:3c:b0:9c:49:7c:da:7e:ed:63:
                    25:58:12:56:45:71:61:e8:3d:4c:e0:a9:75:53:26:
                    50:e3:de:68:67:ff:ae:ea:ff:ef:aa:52:ec:f9:db:
                    24:34:a3:c5:78:87:b7:6e:28:0b:be:04:b6:c4:73:
                    53:76:19:fc:07:a5:37:d8:73:88:73:69:b6:3f:1e:
                    b2:30:74:3e:60:21:4b:6b:92:20:9d:af:7b:9b:b1:
                    38:8d:89:c0:54:c0:f4:1b:f7:d0:a0:d0:c7:bb:32:
                    d4:c5:43:27:29:f9:42:1d:65:49:72:14:52:fa:89:
                    53:52:73:b8:9d:9a:f7:19:3d:67:94:bb:e6:7f:18:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:CA:CD:15:80:BF:9A:79:FB:99:D9:26:03:0B:C1:F2:9D:CF:15
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:0f:2b:d7:27:73:1f:aa:9d:87:f7:59:60:f0:cd:62:cb:
         13:24:f0:64:d0:5c:38:ff:89:fc:bf:45:8d:84:42:b2:79:e5:
         6f:d2:57:9f:db:d1:22:2c:3d:25:cf:7a:5b:4a:c2:a8:c1:f5:
         6c:c4:79:dc:ee:95:8a:9b:83:57:9e:f1:0a:51:b6:ae:4b:70:
         bf:67:92:35:75:20:fc:02:2b:bd:af:b9:f5:76:ee:0b:b7:be:
         e4:cf:82:8c:f6:fc:fa:ee:e3:38:70:58:62:66:5c:1e:4f:f5:
         d7:dd:e6:5d:71:6e:47:ea:f8:10:fe:ec:e6:18:6c:ea:1e:f9:
         79:18:14:ae:2b:55:7f:30:e5:15:12:ee:d6:de:0e:b3:fe:d0:
         f3:b0:4b:d6:f1:ff:f8:d1:32:c1:a5:01:4a:46:e4:ce:27:4a:
         60:43:c9:6b:17:98:91:0f:50:0e:d1:d9:b7:e4:cf:29:71:1d:
         e8:99:76:a0:7e:a1:4c:e0:50:d3:0d:2e:54:6d:0a:04:9d:c4:
         b3:84:65:42:b5:0d:7f:ec:2b:7a:2f:a2:33:d3:cf:2e:0b:87:
         2f:8e:ca:86:66:09:56:e8:08:44:c0:e8:a3:69:2a:8c:76:e6:
         2c:28:fb:f2:eb:ae:20:36:66:08:4c:7c:e2:46:47:87:14:08:
         72:e6:0a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R5oLzvJLyykDxSsF6WO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmM0ZWE3OWRkYjdiMDAzZGUwMWYxZDA1ZjZkYmY3MTZi
MTEzMzYwHhcNMjYwNjEzMDAwMDIzWhcNMjYwNjE0MDAwMDIzWjAzMTEwLwYDVQQD
EyhmY2JlY2FjZDE1ODBiZjlhNzlmYjk5ZDkyNjAzMGJjMWYyOWRjZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kjHZ/Wf0nwnhpd/1gYT3Mn173Ld
Xf6fosv9rzrXYQrnpwxx/r4SjLCHRsAtO6bw/yroFmL1aWafwwZIhS7Nn3qqbiD6
Cl9YOoVmT7L6B2vqCxcXQ1fK9ZrnSbojLz6xIVXWTAgrQB9U6+eS719qB51d6F9t
hFuS7Ic5oUA8sJxJfNp+7WMlWBJWRXFh6D1M4Kl1UyZQ495oZ/+u6v/vqlLs+dsk
NKPFeIe3bigLvgS2xHNTdhn8B6U32HOIc2m2Px6yMHQ+YCFLa5Igna97m7E4jYnA
VMD0G/fQoNDHuzLUxUMnKflCHWVJchRS+olTUnO4nZr3GT1nlLvmfxiBWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy+ys0VgL+aefuZ2SYDC8Hync8VMB8GA1UdIwQY
MBaAFOosTqed23sAPeAfHQX22/cWsRM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMt
MzlmMTNlNzZhZmEzLzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC84ZTdlMWQtMTU4Zi00YzZlLWFiYTMtMzlmMTNlNzZhZmEz
LzEvNml4T3A1M2Jld0E5NEI4ZEJmYmI5eGF4RXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW90PK9cn
cx+qnYf3WWDwzWLLEyTwZNBcOP+J/L9FjYRCsnnlb9JXn9vRIiw9Jc96W0rCqMH1
bMR53O6VipuDV57xClG2rktwv2eSNXUg/AIrva+59XbuC7e+5M+CjPb8+u7jOHBY
YmZcHk/1193mXXFuR+r4EP7s5hhs6h75eRgUritVfzDlFRLu1t4Os/7Q87BL1vH/
+NEywaUBSkbkzidKYEPJaxeYkQ9QDtHZt+TPKXEd6Jl2oH6hTOBQ0w0uVG0KBJ3E
s4RlQrUNf+wrei+iM9PPLguHL47KhmYJVugIRMDoo2kqjHbmLCj78uuuIDZmCEx8
4kZHhxQIcuYKnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:15 2026 by rpki-client