Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File:                     A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier:          6NIAkz/oJyfKVTk76BrNEBsncf5/SY0O7txmyTqArjA=
Subject key identifier:   75:E2:E6:CE:4A:83:E1:8E:C5:D3:A5:37:AA:A3:33:B7:2E:CC:BC:7A
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer:       /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial:       019EC3A582464C7AC102C5061F249855C865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number:          0687
Signing time:             Sun 14 Jun 2026 01:01:04 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:04 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:04 +0000
Files and hashes:         1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: FaZyOGRHGIsdMaK+xXduq/KBG9XehAFFlV5A+yUj99k=)
                          2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:82:46:4c:7a:c1:02:c5:06:1f:24:98:55:c8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
        Validity
            Not Before: Jun 14 01:01:04 2026 GMT
            Not After : Jun 15 01:01:04 2026 GMT
        Subject: CN=75e2e6ce4a83e18ec5d3a537aaa333b72eccbc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:c0:3c:ba:c2:b7:14:34:25:c6:79:57:26:
                    e6:58:c8:67:42:bd:c5:2a:30:23:ea:f0:3f:ef:5e:
                    00:e3:79:02:89:1c:1c:fc:7c:62:10:b5:c9:4d:0c:
                    f4:a2:09:b8:95:70:d1:0a:72:84:bc:d0:5b:fc:09:
                    91:14:43:2c:6d:31:24:64:53:cd:a9:d6:a3:82:7a:
                    05:40:3a:aa:f2:83:b6:98:1d:b9:d1:fd:60:26:b4:
                    86:d8:3b:00:28:2b:e4:7f:e5:1e:64:d4:c8:1e:6e:
                    93:34:01:c8:fa:54:e1:d8:a8:9a:82:78:1a:f6:26:
                    08:ef:d0:81:cf:6b:72:82:da:4e:41:de:66:84:e7:
                    10:21:be:c1:8b:42:b3:12:33:c1:48:a8:93:54:3e:
                    28:f3:cf:8c:95:4b:2c:e5:d8:f4:e7:0d:b8:c3:e4:
                    96:e8:3f:b7:87:15:ec:88:23:e8:be:a4:88:f7:55:
                    8f:54:a2:66:d2:f2:6e:68:63:be:54:91:b9:48:62:
                    1a:53:4c:20:28:ff:7a:00:d8:bc:63:16:1f:58:65:
                    cc:30:d7:9a:c2:cd:a5:36:d2:45:91:31:f5:3c:9a:
                    d0:a7:a1:b1:78:b4:90:4d:2d:fa:01:2b:ac:2c:d2:
                    e8:f1:33:b2:a0:25:43:38:14:61:ce:8a:bd:b5:21:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:E6:CE:4A:83:E1:8E:C5:D3:A5:37:AA:A3:33:B7:2E:CC:BC:7A
            X509v3 Authority Key Identifier:
                keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:f3:e0:61:74:09:c1:b7:7b:08:18:81:d9:5d:dd:0d:79:
         ce:d1:f1:f9:94:34:fb:19:95:d0:92:68:49:78:4c:4f:3f:d3:
         6c:22:a8:de:72:f3:1d:2a:02:26:41:33:51:69:5f:06:e2:23:
         72:27:07:3b:78:c4:ea:bd:ba:c3:b9:d3:5b:4a:83:26:24:db:
         4e:47:7b:a1:3c:21:b8:7d:a9:bc:9f:02:e9:e9:3b:e4:a4:c9:
         2d:89:8c:7c:a1:9e:ab:36:94:e5:03:d9:d4:e3:08:34:52:51:
         9c:2b:19:d5:95:bc:97:d0:91:2b:8b:af:d5:7a:12:23:da:c7:
         42:a2:53:e6:87:bc:59:c4:1a:c3:1d:3b:c0:2b:f7:fb:58:9e:
         f8:5b:b8:21:03:62:37:b9:da:a5:b8:f9:93:50:90:ab:5d:24:
         bb:d2:e2:d7:33:17:c4:7a:79:13:ef:00:80:e7:f8:02:61:9b:
         40:69:6c:34:30:62:cf:2a:2a:a8:a5:da:59:a4:72:af:c1:d3:
         36:ad:ac:12:5f:b7:95:cb:ad:57:48:4d:b5:a5:74:35:be:a0:
         dc:ab:d5:c9:86:c5:2e:c5:f7:6c:20:7a:7b:55:6b:ef:ed:a5:
         7d:f1:36:7b:18:c7:c3:e4:5d:44:7f:74:a8:f7:8c:cd:ec:17:
         7c:74:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:51 2026 by rpki-client