Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File:                     s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier:          B0cp6bhYLrj/RZrs5P5b2SF53iAmIESfFhal6AJ4Icc=
Subject key identifier:   A4:53:DF:35:5C:7A:28:91:C5:EA:C8:6A:11:51:7B:85:8F:7A:16:79
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer:       /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial:       019EC1B691874C0F078CE4CEBF1736EA844A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number:          16C7
Signing time:             Sat 13 Jun 2026 16:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:27 +0000
Files and hashes:         1: IdBqw0A4TK6uyYCMeFPtnqsmeRc.roa (hash: 5nFwsjED/xvOkZjCNJO1OpoEyT7doRuSAQWm9AMMmaE=)
                          2: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (hash: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU=)
                          3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: zYQlsc9Jn/Hij56KRcLm2TRWiYHKJjcFPpF2boVCyv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:91:87:4c:0f:07:8c:e4:ce:bf:17:36:ea:84:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
        Validity
            Not Before: Jun 13 16:00:27 2026 GMT
            Not After : Jun 14 16:00:27 2026 GMT
        Subject: CN=a453df355c7a2891c5eac86a11517b858f7a1679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:9f:4a:2b:96:2d:0d:36:f0:5d:ad:5d:57:
                    85:90:b2:9d:3e:93:95:cc:ff:dc:6b:b2:7d:7f:45:
                    c5:0a:9e:2d:cf:1b:c1:51:5d:c8:0c:f4:e5:93:03:
                    9f:3a:a9:79:71:1c:62:a5:f2:35:9b:4b:2b:9f:06:
                    73:e0:f5:c5:f6:7a:71:a0:c0:93:5c:3c:9b:0e:2b:
                    71:3e:3d:f5:04:46:19:fc:74:b5:fd:aa:bc:95:15:
                    02:0f:02:06:aa:f1:53:34:59:21:f3:47:7a:16:9d:
                    9e:2e:bc:e9:9f:a2:5b:88:69:62:2f:0d:4f:18:32:
                    67:2e:5e:1e:12:a1:92:8f:bd:9e:b9:c4:3a:6f:2e:
                    44:68:24:b7:a6:b5:78:62:17:8e:c2:62:71:64:79:
                    26:bb:97:7c:f4:d4:4d:78:d9:d8:05:16:62:3a:50:
                    5a:fb:26:fc:38:06:0e:11:86:ea:ab:a0:1d:3c:85:
                    a0:61:30:07:9d:7d:5d:17:27:88:3c:97:6b:a1:d7:
                    82:94:21:7f:f8:c4:6c:0a:4e:a1:a5:af:8a:b1:1a:
                    89:3d:64:b3:99:3c:54:0b:15:76:53:cc:79:b7:d0:
                    f8:0d:30:2f:d8:91:42:89:44:1c:73:ee:cb:92:2a:
                    94:4d:8e:05:5d:e2:e8:6c:e9:46:fb:35:2f:36:2a:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:53:DF:35:5C:7A:28:91:C5:EA:C8:6A:11:51:7B:85:8F:7A:16:79
            X509v3 Authority Key Identifier:
                keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b3:05:80:31:cf:d4:6e:38:68:87:5a:7a:fa:6a:db:72:76:
         dc:c6:03:5f:ab:b0:9e:9c:e5:1f:15:88:df:4b:f5:57:5c:ac:
         a7:d0:c8:0c:27:b2:40:7f:49:0e:ed:7e:cc:af:5c:ab:38:8b:
         76:88:7f:1e:6f:78:fd:dc:e0:45:21:85:65:74:a7:ca:06:7e:
         88:fc:9c:ca:90:90:8c:6b:ed:0c:0d:a9:c2:05:45:e8:73:ac:
         63:65:0a:ce:34:4b:f0:c3:8f:58:b2:7b:d6:8a:99:7c:5d:c8:
         d3:23:6c:82:6a:db:d7:73:3c:28:17:42:7d:e1:01:d9:3a:81:
         dd:02:37:c4:35:95:e6:35:70:f0:22:af:53:58:fc:7b:45:2b:
         5f:36:98:2b:96:4e:e0:4b:ca:90:1d:6e:32:19:af:39:11:6b:
         a2:b9:a9:6f:d7:23:27:25:b0:b4:c4:86:f0:93:dc:02:d1:4b:
         b7:c0:0f:ae:e0:b9:bf:d7:02:a6:f2:c0:d4:de:08:71:11:82:
         12:e9:0c:f9:f0:1e:84:e8:53:72:12:32:07:e0:b0:ad:60:f6:
         55:e2:f8:06:8e:62:54:2c:c3:ef:15:7d:e9:b4:61:96:be:3f:
         79:97:13:e3:42:b2:a2:d2:a9:f1:cf:64:18:ab:09:15:a4:23:
         8a:e2:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:56:31 2026 by rpki-client