Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File:                     6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier:          0uvgzJ4nmbTeMOHe2jt2Sxt6EsHWHiPhfy/49GmgOeM=
Subject key identifier:   11:69:B9:12:84:A4:29:76:7E:43:11:F7:7A:FC:03:8B:91:37:DB:F1
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer:       /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial:       019EBEED3A4EF483110C87A14D08E134E53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number:          138B
Signing time:             Sat 13 Jun 2026 03:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:18 +0000
Files and hashes:         1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: qUq/W+lRZt1tTP7fCa3KMGYunwPq5zyVEiTlMjbJXYY=)
                          2: wgAilhNk_JB54zRjveL96EA9LP8.roa (hash: 5g3uDJFZLAanJ1siT+5xFo3dY/KZA0bidkW5vxOC84c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:3a:4e:f4:83:11:0c:87:a1:4d:08:e1:34:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
        Validity
            Not Before: Jun 13 03:01:18 2026 GMT
            Not After : Jun 14 03:01:18 2026 GMT
        Subject: CN=1169b91284a429767e4311f77afc038b9137dbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:67:7f:b2:fb:dd:e9:2b:41:68:d6:ff:60:
                    27:ad:e0:ec:34:02:bc:a4:ba:f4:5a:42:34:fe:4f:
                    e1:01:de:15:ba:13:dd:28:7b:0f:cc:73:dd:de:57:
                    0a:08:7e:2f:fb:a1:be:02:d4:81:7d:a5:55:5e:d3:
                    ee:f1:13:55:ad:b0:30:e8:ac:a3:0f:3b:41:0b:a7:
                    94:64:c1:d0:8a:49:32:32:a0:7a:46:70:49:68:84:
                    41:37:43:78:74:46:df:06:1b:99:ef:52:45:22:34:
                    f1:b7:1a:e0:6a:ac:2a:93:06:22:6a:e9:d6:97:b0:
                    d6:2f:ad:d7:9c:80:10:e5:78:39:f4:3d:14:b0:e0:
                    87:e5:28:1d:0a:16:0b:7d:2e:07:f4:95:69:8f:88:
                    be:ca:76:f9:ea:90:aa:6c:f5:11:0e:47:db:b2:13:
                    81:9d:9b:aa:86:a0:43:51:5c:ae:fb:7e:5c:33:9f:
                    49:9c:36:4d:41:b3:45:c2:bb:65:23:ed:51:96:aa:
                    e6:80:67:5c:ba:30:e8:0f:f6:ac:8b:c2:ac:eb:0b:
                    06:68:ed:ca:9e:60:d1:f0:65:92:07:94:0b:58:d6:
                    9b:46:b7:66:36:51:79:f9:45:eb:ac:b9:79:d9:b6:
                    e0:f6:0e:54:d1:2b:57:67:d8:51:8d:43:26:3f:0d:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:B9:12:84:A4:29:76:7E:43:11:F7:7A:FC:03:8B:91:37:DB:F1
            X509v3 Authority Key Identifier:
                keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:64:52:5b:ed:44:8f:e2:cd:af:b7:99:3d:b3:3d:cd:b9:
         a1:a3:7f:5f:ff:6d:47:89:9c:e0:97:fd:26:df:e8:d8:c4:ec:
         38:8c:f5:50:5e:ce:b8:d3:f2:11:12:2a:b1:24:77:44:e7:d3:
         91:b8:d8:11:05:ab:6f:1a:b1:61:74:23:36:70:65:79:19:6a:
         92:47:b0:a2:94:23:80:52:d7:68:20:06:2c:ed:a3:07:f1:e6:
         4e:43:f7:e1:0e:55:e7:d9:e5:da:fa:a9:c8:31:45:8c:5a:a1:
         72:ce:5c:af:08:17:26:14:cc:22:d5:ef:be:99:e1:b8:2b:ea:
         8f:58:27:43:1f:83:e9:46:8a:62:1c:bf:d3:96:c7:81:fb:1e:
         bd:f4:58:1e:77:02:9c:55:ac:49:f2:96:79:7a:70:08:13:29:
         be:04:6c:77:d5:56:fb:2f:3f:ca:a6:36:80:78:84:e6:f5:67:
         20:19:a4:18:c4:bd:1e:cb:00:43:3c:97:b8:88:cd:20:03:40:
         d0:29:03:dd:15:e7:08:a5:e4:2d:90:d4:5d:f2:9e:74:e7:a0:
         07:bc:1f:f6:82:5e:28:f8:7a:5d:f5:cf:24:0b:eb:ed:b1:77:
         45:5b:b9:aa:e5:0b:1a:ed:0c:58:bf:57:b0:36:f3:28:f6:77:
         e1:7e:93:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:49:34 2026 by rpki-client