Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          Jda+LEy5slmu2Gij1mgfqboKHjwZKhjMj6n+i1Fymd8=
Subject key identifier:   0F:77:0B:55:EA:B0:66:A6:13:60:AE:BF:FE:3D:22:60:C9:51:C0:46
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       019F9135FAC4131BBCE4158E7B2F0B8F9133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          10FF
Signing time:             Thu 23 Jul 2026 23:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:01 +0000
Files and hashes:         1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: 3q0Ou+KHomdvYuzoJO9GqyJTHmwDo9e/SEy9d4I1BRg=)
                          2: tzRdx4BT786qNcQZeRMNg_SKiRI.roa (hash: T/qoi141JqlXpa6Bw1J2VzP/DVBAdA7o+aP6DP3caPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:fa:c4:13:1b:bc:e4:15:8e:7b:2f:0b:8f:91:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: Jul 23 23:01:01 2026 GMT
            Not After : Jul 24 23:01:01 2026 GMT
        Subject: CN=0f770b55eab066a61360aebffe3d2260c951c046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:d3:5d:85:6c:3d:62:13:a7:08:42:5e:4e:
                    12:e5:c3:ce:55:fa:22:b9:20:ad:e0:49:a4:57:63:
                    ff:6f:c2:98:cb:ec:0d:4f:f5:1a:40:5e:60:25:d0:
                    6f:00:dc:87:79:7e:4b:59:02:52:de:8a:c4:35:c8:
                    57:87:7f:4e:95:2b:65:95:5a:28:1d:a6:0c:76:a1:
                    75:53:e3:1d:27:8a:09:b5:25:cf:c5:80:81:28:4c:
                    22:54:a8:5e:c8:81:72:26:a0:60:0f:c7:6e:0e:fb:
                    cf:e8:d6:e3:b7:c3:46:21:91:87:fc:3f:c5:53:7a:
                    04:a0:da:f0:4c:10:65:3a:76:cf:21:07:c3:13:64:
                    65:55:14:1d:0d:b4:c3:e3:d3:86:61:73:ae:2e:a4:
                    04:01:10:47:20:84:6f:1f:38:65:05:f0:e3:8d:d6:
                    f1:0a:dd:fc:69:57:90:16:91:29:32:27:bb:5e:cc:
                    58:bb:d9:4a:5a:f8:ec:6b:79:62:17:85:08:5f:07:
                    2c:59:23:b4:92:a2:77:dd:b1:76:88:1e:bc:5c:68:
                    2a:76:4b:3f:7e:a9:6b:fd:c5:e5:40:50:dc:65:77:
                    60:01:2c:34:09:1d:f8:88:5e:da:41:72:75:2c:19:
                    7f:5b:12:8d:83:69:d6:13:66:65:55:8b:d8:8e:47:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:77:0B:55:EA:B0:66:A6:13:60:AE:BF:FE:3D:22:60:C9:51:C0:46
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:f7:6d:6c:77:c0:af:58:bc:4f:54:52:58:54:7c:28:89:
         8b:11:2e:48:86:7f:be:a8:4f:30:34:bc:b4:b1:46:8a:a2:34:
         2b:89:7b:be:f4:f8:9d:50:0a:5d:c9:b4:e7:9b:b9:7a:b8:1a:
         3b:34:b4:ae:c4:d1:f3:ce:dd:60:01:0a:56:2a:96:a2:76:93:
         72:ef:41:0a:0d:b1:6f:2d:5b:1b:98:b1:56:f1:38:b7:24:97:
         f4:62:53:73:10:78:0e:73:2e:26:32:d0:ca:69:80:89:2d:aa:
         20:65:71:96:0b:b0:d1:b1:5b:b1:5e:09:ea:bb:30:49:ae:38:
         c1:8d:6e:d3:61:24:ee:9d:c9:d1:3e:ba:dc:4d:39:7e:a1:b6:
         87:52:b9:88:17:41:10:8c:3e:09:a7:3b:50:96:7d:93:ca:98:
         af:97:da:85:f1:71:29:ed:5e:78:a2:86:00:10:2b:96:c0:a0:
         6d:13:28:db:c9:e8:fd:b2:fb:7a:61:db:ec:8d:82:4c:8c:d9:
         24:4c:4d:5b:eb:08:bf:97:6a:c3:4e:2b:df:da:3e:5d:e9:0b:
         64:73:df:dd:eb:e8:64:de:10:dc:62:b2:d2:a5:15:b5:fa:26:
         78:fc:09:9b:43:64:08:2a:e3:cd:b1:8d:aa:cb:2e:05:aa:5e:
         2e:64:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:42 2026 by rpki-client