Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File:                     6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier:          Q1OIcUAkWHT2rm7nT4ju7pRwDBYtTJNh72fySDHpH5I=
Subject key identifier:   83:1B:DF:DB:99:A3:7A:23:B7:D1:C9:A1:CA:44:3C:8B:4A:6C:85:70
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer:       /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial:       019EBF916E2463F76FABC15A0727DA79EE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 06:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:39 +0000
Files and hashes:         1: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: +7YLC8B4aAdOUHz9NBcxCbKBIzChqShELLK7HUt2a6Y=)
                          2: kyiZYLBaKIrj5tT8RkwqZracJC8.roa (hash: vKqajVq23PYVXFkY+10uAWZKmF5NFtLP9M4UhXMBcyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:6e:24:63:f7:6f:ab:c1:5a:07:27:da:79:ee:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
        Validity
            Not Before: Jun 13 06:00:39 2026 GMT
            Not After : Jun 14 06:00:39 2026 GMT
        Subject: CN=831bdfdb99a37a23b7d1c9a1ca443c8b4a6c8570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:30:4e:29:87:5a:d5:dd:90:87:47:44:4b:
                    99:36:33:be:c7:81:91:00:9b:1e:14:f2:0c:d5:2f:
                    14:2c:53:18:45:1f:30:24:1b:a1:5b:15:de:ac:e6:
                    7a:40:a2:63:85:d2:36:a0:47:c9:5d:da:62:86:b0:
                    35:0a:67:bf:42:c1:e8:56:c7:ea:c6:9d:a7:d6:00:
                    6d:86:8c:b8:da:3a:39:ba:b3:f0:27:02:13:60:00:
                    42:78:05:72:89:25:ae:a3:f1:10:63:73:b6:bb:74:
                    2a:80:3b:46:9d:bb:c9:49:9a:07:e2:ea:04:10:6a:
                    f9:24:40:f0:33:84:46:dc:eb:f9:fb:0e:ca:1c:b9:
                    05:b1:d4:7e:02:c2:b8:52:83:b7:c2:2d:d4:e0:77:
                    24:9c:a9:c5:4b:fb:5f:2e:8c:6a:8a:fa:b7:92:5a:
                    da:c1:49:93:6b:8e:b7:53:4d:46:b9:f5:57:32:c4:
                    57:d8:ed:0b:da:08:c0:e9:1f:cd:44:f1:c0:3b:fc:
                    bd:cd:a9:b6:e3:7a:c4:48:71:e6:72:36:53:b6:fd:
                    7c:78:c0:78:95:48:5c:2a:7c:ea:36:af:13:90:e3:
                    75:ea:cb:c8:83:d7:0e:22:fa:09:32:09:48:53:b3:
                    e4:3c:bc:0f:f4:d1:ac:b4:5b:00:53:4f:2b:73:3e:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1B:DF:DB:99:A3:7A:23:B7:D1:C9:A1:CA:44:3C:8B:4A:6C:85:70
            X509v3 Authority Key Identifier:
                keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:83:1a:68:4f:00:f9:ae:17:45:46:18:eb:a6:07:6f:e1:23:
         7e:8e:6b:c6:5c:e3:bb:6b:2e:c6:b2:a2:82:29:5b:92:20:da:
         19:da:86:15:61:fc:e3:af:13:16:1b:29:bc:fc:d7:8f:8a:77:
         af:24:9c:05:ad:c2:74:e1:d3:70:da:e9:cd:5a:3b:04:79:67:
         1d:d3:c3:69:a5:29:b9:1a:96:fa:92:2e:b2:24:9a:c2:b9:b6:
         8f:d2:6c:b1:9e:10:00:34:84:06:f5:69:d4:99:c4:38:b4:e0:
         c4:b9:76:7e:57:b7:a2:40:4d:1f:86:2e:88:09:47:7a:12:f5:
         33:08:eb:96:a6:0c:d4:34:a5:8a:b6:67:51:4a:92:ff:b3:0e:
         9b:05:0e:a9:f6:d8:19:a8:93:1b:9d:0a:68:7d:e2:7b:b6:78:
         68:1f:5d:a1:8f:d1:35:5b:e6:c0:5d:38:95:aa:27:0c:f0:cc:
         a5:1e:2e:87:e6:64:ed:f7:4c:61:f4:a6:27:30:26:d2:23:0f:
         9e:cd:30:76:d6:18:9b:61:fc:6e:75:4e:ba:7b:e4:72:35:15:
         80:c6:bb:c4:11:c0:25:d3:be:5f:f7:c0:dc:9d:e4:1c:bb:9c:
         b6:f9:2b:19:a2:eb:0c:79:91:9d:06:0a:fd:0c:c3:fc:01:68:
         58:ef:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:18 2026 by rpki-client