Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
File:                     ar0nEML89VGzH9fMxg3x9rtKksQ.mft (raw, json)
Hash identifier:          jG8kPr28sF0SjvPrV/PqKo6W62ihscyyUSOouW6aozw=
Subject key identifier:   17:B4:46:CA:1D:ED:27:19:AF:8E:8D:C5:7F:EA:2A:8D:25:7C:E6:EE
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Certificate issuer:       /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial:       019F90236AEF31BBF078034777C96EDB5A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
Manifest number:          0FF2
Signing time:             Thu 23 Jul 2026 18:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 18:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 18:01:07 +0000
Files and hashes:         1: aY-gHcvtsPJsNOwIpm_qT_fqvQ8.roa (hash: wNGsaDekSfzDyxVuy33QU7KevVbyLx5/MhnPP194+qU=)
                          2: ar0nEML89VGzH9fMxg3x9rtKksQ.crl (hash: an7WzZlK2FRcW4gE8t3DRqtBSTjdLjFPRk7Aj6tL07w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:6a:ef:31:bb:f0:78:03:47:77:c9:6e:db:5a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
        Validity
            Not Before: Jul 23 18:01:07 2026 GMT
            Not After : Jul 24 18:01:07 2026 GMT
        Subject: CN=17b446ca1ded2719af8e8dc57fea2a8d257ce6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:c5:23:aa:45:01:d6:de:49:42:f7:a3:1c:
                    b4:65:a7:2a:10:00:ed:f8:f4:ae:df:e8:f2:a6:cf:
                    0d:df:9d:a4:4c:9b:e7:b5:fb:be:82:1e:dc:d8:bf:
                    da:21:fb:0a:72:24:c8:07:71:c9:d8:0d:31:53:87:
                    7e:c2:52:82:7d:44:ef:0b:92:f7:09:75:be:36:61:
                    0f:3e:3d:57:77:ed:2e:f7:1c:7c:9e:19:b5:7c:5e:
                    00:1a:30:4a:b5:c3:d1:aa:28:e5:2c:33:3b:03:bb:
                    0f:67:45:13:9d:ce:86:33:7d:c4:e7:fd:b5:a1:5a:
                    56:c4:98:8c:1a:73:31:76:ca:78:36:bb:b0:47:df:
                    d9:44:73:1c:3b:92:07:61:14:8a:d7:32:32:f4:3a:
                    5e:b3:0e:62:3a:e8:1b:66:41:92:04:57:13:94:7b:
                    7d:6b:9a:ba:b4:71:97:b5:72:12:b4:78:26:22:89:
                    5d:49:f3:e4:c4:7b:99:67:c8:1a:f8:bb:59:d7:f2:
                    5e:64:0c:8a:5b:f0:64:7b:53:2f:d0:cb:fb:47:09:
                    f1:b0:af:9b:ed:8e:e5:95:36:ac:4e:c3:7f:dc:18:
                    34:cc:8f:67:55:cd:96:f6:91:c0:ae:ef:5a:a0:75:
                    28:b6:a0:bd:76:2b:eb:20:6d:1f:11:14:24:95:14:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B4:46:CA:1D:ED:27:19:AF:8E:8D:C5:7F:EA:2A:8D:25:7C:E6:EE
            X509v3 Authority Key Identifier:
                keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:93:34:c6:69:13:5b:59:17:2d:8a:a6:70:27:f7:da:3d:44:
         19:2a:1d:4e:6f:67:06:14:94:38:9d:85:80:87:c1:4d:92:2b:
         3b:cf:ad:90:78:19:ec:6c:9c:6e:6b:a6:7f:17:f5:b2:c1:e7:
         90:5b:41:77:ca:d3:7b:f9:99:c6:b9:4e:08:ae:b0:ef:0e:f4:
         31:e3:ea:a6:ac:b7:63:09:15:36:51:14:37:a9:14:fd:7c:21:
         b6:7c:f3:b6:7d:67:c7:01:e7:4c:56:a5:f9:d3:7b:8b:af:10:
         b0:81:e2:94:1f:32:77:1b:5d:3f:76:10:91:d9:ab:de:a9:f2:
         e4:42:e3:82:36:1a:5d:c1:6d:3d:f0:8d:18:4e:32:1a:4d:4e:
         bb:57:e7:84:26:08:2c:f3:a6:c3:57:04:ea:f7:99:ba:38:5f:
         d4:ee:c5:61:38:cb:fa:69:ce:c4:32:dd:1b:01:f5:04:80:77:
         f1:ec:d1:18:a4:d9:39:b7:c6:62:70:77:aa:ea:d1:32:c8:f8:
         e8:0a:e0:6d:7c:ce:b9:54:ef:dd:be:28:ca:5b:2b:31:8e:99:
         81:b2:33:42:98:ad:e6:3e:e3:f8:57:a2:5c:39:57:34:a1:30:
         ec:7f:6f:16:ce:ef:99:11:96:78:72:6b:0b:c2:20:32:55:24:
         e8:c5:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:44:12 2026 by rpki-client