Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
File:                     6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json)
Hash identifier:          vdGI3GfRBDGK1smckJjw3tpU7blgGwDncAI0iiMKufE=
Subject key identifier:   49:6E:35:E1:E5:7F:78:B2:CA:F0:07:F0:55:19:CB:97:C7:9A:D6:93
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Certificate issuer:       /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial:       019F9023462FEFBA7CB1E0B17CC84013C9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
Manifest number:          0988
Signing time:             Thu 23 Jul 2026 18:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:58 +0000
Files and hashes:         1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: xOKag+fOuVuQG5RQjEdI2SoDYTMfAsLAGFQyu2r271E=)
                          2: XpRtGgpQMgfYPr6Ae4n-CrXAlUE.roa (hash: NDYAShaJd5oq4XV/s8UZ9bjqNMFDxRAsxUeNLahhptc=)
                          3: fj5bsSjuUc6EOcUYU_AbknjdJUU.roa (hash: j5vvkFepIgEH6bOjdslOXR9IOh2ESlxcKkI5N8rCJlk=)
                          4: x4UYcdufAL3ng8pGSqFjgdXSCz4.roa (hash: 2STBeULPzfa883nzmJW1aoNIl1q/BlYpn/a/MGYClPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:46:2f:ef:ba:7c:b1:e0:b1:7c:c8:40:13:c9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
        Validity
            Not Before: Jul 23 18:00:58 2026 GMT
            Not After : Jul 24 18:00:58 2026 GMT
        Subject: CN=496e35e1e57f78b2caf007f05519cb97c79ad693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:dd:e7:e2:3b:ac:5a:75:80:f4:4e:b9:db:
                    76:56:ba:cb:d0:fc:16:42:96:0e:40:7d:fe:15:39:
                    7e:04:2f:03:a3:92:cb:af:f7:e1:16:8d:38:ce:95:
                    1b:24:e1:df:7c:2e:c8:55:b1:37:05:3f:a7:1d:8c:
                    4b:92:b4:01:4a:09:54:d4:16:1b:0b:60:9d:9b:5b:
                    1f:b1:6d:3a:21:49:e1:e3:f7:01:d6:ac:bd:94:b6:
                    68:a7:c9:db:65:db:ea:61:de:e0:9c:df:53:92:54:
                    f0:bf:6c:90:64:cd:a4:de:fd:72:9f:64:01:99:4b:
                    41:2a:f7:06:02:ca:5e:a8:38:a1:96:3c:47:b3:09:
                    24:0f:9a:94:bc:ba:92:38:91:56:b2:c5:27:21:ab:
                    ae:65:9d:bb:a6:bb:e6:7f:31:de:01:76:d2:b1:cc:
                    d3:05:52:0e:21:87:dc:1a:c6:e0:9f:1b:68:7e:4d:
                    56:2c:7d:31:3b:85:80:fd:c5:06:24:a4:e6:c1:e7:
                    16:30:34:a7:8c:d5:7d:5c:9a:88:51:02:f3:d7:e3:
                    01:f5:16:0f:35:27:11:59:5f:01:f8:56:6e:98:aa:
                    15:10:56:ee:19:2c:1d:d6:0d:c4:8d:33:b2:eb:0d:
                    bf:82:22:54:8b:6b:73:26:c0:37:c5:ac:69:c9:88:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6E:35:E1:E5:7F:78:B2:CA:F0:07:F0:55:19:CB:97:C7:9A:D6:93
            X509v3 Authority Key Identifier:
                keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:ce:21:32:0d:89:5b:35:da:53:e4:4e:d6:12:fc:14:7d:
         4e:31:d2:25:50:8f:f4:4f:c6:a8:9b:5b:09:84:91:81:33:20:
         e5:ab:f3:51:c5:ee:5f:08:9d:ea:7a:78:96:a5:10:4c:41:be:
         13:ea:57:3b:b4:1f:ed:41:10:58:30:cc:6c:11:a4:89:fc:80:
         47:9a:ca:07:56:d1:15:13:04:d0:7f:b0:1c:67:bb:1d:88:65:
         b3:64:d2:27:7f:3d:50:94:ac:29:9d:cc:7e:50:5a:63:1b:4e:
         05:bb:0d:81:ca:ea:82:e7:7c:86:a4:06:4e:15:a0:a5:2d:58:
         d3:dc:a0:c7:a5:cf:0e:2d:de:30:2c:da:19:b3:bb:5a:1d:94:
         07:58:ed:1f:d1:b2:a4:32:aa:58:15:2a:15:f6:de:23:3a:3a:
         01:e7:bf:7c:96:f8:df:95:f8:df:55:de:60:74:44:e9:ae:06:
         a2:a0:38:85:5a:a8:c9:2b:12:cb:ef:95:38:15:50:d8:ba:4d:
         41:bc:d0:94:1c:3e:cb:1b:54:66:25:1e:b5:6f:e3:fc:dc:f3:
         73:a1:ef:04:80:54:0f:1f:4d:b6:d2:99:49:cd:b4:6d:dd:a2:
         e3:e9:bd:a9:ab:3f:5f:c0:ae:0b:14:d6:59:4c:5f:ca:ca:a5:
         0b:91:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:07 2026 by rpki-client