Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          2hvkLNjlNTWS+LN8kKv7DCm+p60pJiKzPN9FbZAWKvw=
Subject key identifier:   74:42:04:58:84:0A:77:2C:1C:74:06:66:4D:27:6C:ED:43:67:2C:F2
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       019EC0DB1348EF76898AA7D7AC7BC66C772F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:43 +0000
Files and hashes:         1: 5Iruj7Q04-dIh4ZGTzY2lg5RxnQ.roa (hash: x1HpRiyK6tLqJ4m++Ue3xBke0BVmx3kiw0XUNo5+ScQ=)
                          2: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: 4O2hx1CciKctogoTfpr7SQkb0IhePmigrkv52Rv3fnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:13:48:ef:76:89:8a:a7:d7:ac:7b:c6:6c:77:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Jun 13 12:00:43 2026 GMT
            Not After : Jun 14 12:00:43 2026 GMT
        Subject: CN=74420458840a772c1c7406664d276ced43672cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:d5:8b:c9:8b:92:4e:14:a7:ea:39:cc:30:
                    59:63:07:f0:6e:45:55:4e:51:43:08:35:af:ec:c1:
                    8a:6d:95:89:d4:63:69:a6:6c:fa:9e:f4:53:43:a0:
                    f8:0a:12:57:cc:0f:4a:77:2f:8f:24:95:e7:58:16:
                    c9:ed:a9:93:c8:e9:a9:de:5b:6b:a6:25:a9:24:2c:
                    ad:d9:02:14:26:1f:8a:ec:b5:df:9c:21:ec:ef:3a:
                    7b:a5:e1:ce:47:8a:18:60:fb:0e:46:7b:52:e1:93:
                    25:dd:92:cc:26:e2:3d:ed:d3:65:81:86:b2:f5:0c:
                    a0:a1:95:91:ba:f4:36:59:f5:08:9a:2c:00:c3:a0:
                    44:64:d8:8c:a0:a6:d0:4a:e0:a7:26:9e:ef:7e:1b:
                    03:6d:24:a3:b8:94:8e:8e:a0:cc:5d:9a:d4:20:28:
                    67:b0:98:64:01:ca:ff:2f:29:11:62:12:6f:a9:8c:
                    7a:10:7a:f7:e4:30:45:ba:69:a3:87:29:b5:0b:0e:
                    67:b9:46:d0:38:a3:aa:ad:1c:12:81:40:15:be:24:
                    99:7c:44:fe:15:90:ad:9c:be:e3:2c:8d:b1:79:a6:
                    0a:18:af:d9:43:f6:39:ff:8b:ad:9f:42:da:f6:87:
                    47:e0:1a:1a:c7:64:4e:1a:63:af:be:94:e8:78:bf:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:42:04:58:84:0A:77:2C:1C:74:06:66:4D:27:6C:ED:43:67:2C:F2
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:a1:c9:b5:22:d5:94:c8:9c:c2:e2:b3:d1:b7:ad:2f:f5:
         d6:3b:6d:d4:19:f9:07:be:f3:35:d8:0f:aa:c3:d9:2d:bd:68:
         a5:bf:88:5c:0d:1f:10:41:7e:17:46:db:ce:6d:f7:ed:b2:f0:
         d7:ee:1d:2f:79:e2:18:f2:c5:80:4e:25:8c:54:d7:d1:89:fb:
         3c:f2:0b:bc:55:48:87:f1:80:51:d0:98:27:48:ea:d2:b0:e8:
         16:29:30:4e:dd:e3:93:41:89:f0:b2:1d:a9:24:df:a3:9c:c5:
         a6:92:cb:ef:59:f4:80:f6:e8:5a:39:44:bb:6c:fa:71:0f:61:
         bb:2d:b3:2f:11:10:f3:6d:44:80:ff:dd:c9:fb:f2:2e:64:14:
         f3:01:79:4e:dd:4a:6e:31:42:14:9b:8a:9e:f1:31:18:e9:1d:
         af:b6:df:c0:46:28:71:92:95:7b:2e:d9:1a:c0:4c:21:91:c3:
         41:a1:63:82:b8:c2:8f:0d:4f:4b:6e:45:b1:21:a2:26:c4:01:
         f5:04:5e:97:47:18:b4:ab:03:d7:44:4a:27:8a:bc:5f:a3:0d:
         6d:e8:8a:0b:e6:2a:52:8b:d1:35:70:1a:58:fe:d8:09:bd:13:
         a3:ce:1f:03:4b:e2:97:26:de:58:17:a5:bd:c6:f4:10:8d:85:
         a1:1b:c8:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2xNI73aJiqfXrHvGbHcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MWQyZGNmMmI2OWFiZGJkNjA5NDM2NDQwMTE1YTllNGVh
MTlhMDUwHhcNMjYwNjEzMTIwMDQzWhcNMjYwNjE0MTIwMDQzWjAzMTEwLwYDVQQD
Eyg3NDQyMDQ1ODg0MGE3NzJjMWM3NDA2NjY0ZDI3NmNlZDQzNjcyY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMXVi8mLkk4Up+o5zDBZYwfwbkVV
TlFDCDWv7MGKbZWJ1GNppmz6nvRTQ6D4ChJXzA9Kdy+PJJXnWBbJ7amTyOmp3ltr
piWpJCyt2QIUJh+K7LXfnCHs7zp7peHOR4oYYPsORntS4ZMl3ZLMJuI97dNlgYay
9QygoZWRuvQ2WfUImiwAw6BEZNiMoKbQSuCnJp7vfhsDbSSjuJSOjqDMXZrUIChn
sJhkAcr/LykRYhJvqYx6EHr35DBFummjhym1Cw5nuUbQOKOqrRwSgUAVviSZfET+
FZCtnL7jLI2xeaYKGK/ZQ/Y5/4utn0La9odH4Boax2ROGmOvvpToeL9rLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRCBFiECncsHHQGZk0nbO1DZyzyMB8GA1UdIwQY
MBaAFOgdLc8raavb1glDZEARWp5OoZoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEt
MjJlNTU0NzMxNmI1LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEtMjJlNTU0NzMxNmI1
LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/GhybUi
1ZTInMLis9G3rS/11jtt1Bn5B77zNdgPqsPZLb1opb+IXA0fEEF+F0bbzm337bLw
1+4dL3niGPLFgE4ljFTX0Yn7PPILvFVIh/GAUdCYJ0jq0rDoFikwTt3jk0GJ8LId
qSTfo5zFppLL71n0gPboWjlEu2z6cQ9huy2zLxEQ821EgP/dyfvyLmQU8wF5Tt1K
bjFCFJuKnvExGOkdr7bfwEYocZKVey7ZGsBMIZHDQaFjgrjCjw1PS25FsSGiJsQB
9QRel0cYtKsD10RKJ4q8X6MNbeiKC+YqUovRNXAaWP7YCb0To84fA0vilybeWBel
vcb0EI2FoRvIZg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:11 2026 by rpki-client