Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File:                     6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier:          oGNWhQK/yVRrqRCZlDT+VwS9pcrwtHKJgvUl2kVSR0M=
Subject key identifier:   85:56:A1:CA:A4:F5:A8:39:D6:7D:F5:84:EF:3E:77:7E:5F:08:DD:4A
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer:       /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial:       019F8E34D5C85C0E5863DEBB4FFAB844EBC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number:          078D
Signing time:             Thu 23 Jul 2026 09:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 09:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 09:00:54 +0000
Files and hashes:         1: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: xjAPZqzhp0r48IY/JQeQxdIuOkwRSLwOi9xxICkEb2s=)
                          2: IiDxsemJXJ9syn7DVcgqBSOdwiU.roa (hash: Mg74FQv3qsWZUHALx/g3ZFqZVMyPoPwX8V5c9fFl5ko=)
                          3: NN0QHkAo8YjbrqzfVegC-uPDydo.roa (hash: LNKR2uGp+5Bgg5S1vn+NiLyxeC2w80ohFJfAfQHeysY=)
                          4: X-_TS1I4t-DVqUxoc-khUSm_viU.roa (hash: ODLd3VbptYoQMKlYYBjJpRqUDy9+T6ytXSUAIjxuWLg=)
                          5: jfDD09NObibNSCqsuP6YEF4AHQw.asa (hash: z9lStU54maQh1nylnfpkGX/TJ5sM/hZvxITIIcS0yK0=)
                          6: k4uRfVLkiFx02imsmzFdIo0Ou9I.roa (hash: 9rPMDuoX5kSVG70I/Za6IhaLgJW41gakMpsQjx7kJlA=)
                          7: rIDOAUoKFwKwGINXnPmMsHQWi5c.roa (hash: NW5RLPV2D9akEYqeNDha9BvwB/AzK2kgHaHsg+BPsU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:34:d5:c8:5c:0e:58:63:de:bb:4f:fa:b8:44:eb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
        Validity
            Not Before: Jul 23 09:00:54 2026 GMT
            Not After : Jul 24 09:00:54 2026 GMT
        Subject: CN=8556a1caa4f5a839d67df584ef3e777e5f08dd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:d4:1a:75:36:cb:61:82:35:51:83:e8:e5:
                    c9:50:05:b0:3a:72:b7:af:e1:7f:08:96:b9:78:dc:
                    d4:41:5d:dd:fe:e9:92:46:00:c2:2e:c0:50:1e:ef:
                    cf:17:dd:dc:86:8a:ce:20:0c:7e:7a:be:47:06:fe:
                    1f:65:95:d4:87:1b:23:36:83:59:48:24:b8:62:62:
                    46:a7:4d:a3:ca:04:c1:3c:67:dc:a6:f8:09:95:4b:
                    33:0e:76:0b:0a:0e:b1:20:6e:9e:42:b7:e2:d9:3c:
                    ca:85:ba:da:21:2c:52:0f:65:00:4b:a6:39:96:ad:
                    10:ee:32:4a:bc:28:d1:04:9f:1a:ef:98:d8:19:e5:
                    d3:e8:c2:3e:16:f0:a8:f7:e8:de:f4:0c:64:a0:d9:
                    b8:a1:5b:3e:44:27:61:49:97:d2:ec:52:1c:70:d9:
                    fa:19:fe:c1:cd:c6:f1:9b:df:d6:11:06:c7:1b:bb:
                    dd:6b:7c:9f:75:f7:eb:5f:e1:c4:10:2c:6f:15:17:
                    b1:f9:82:b3:a6:71:6f:89:69:fd:84:7e:99:b2:8b:
                    69:c2:a6:da:17:f3:2d:14:22:d7:0b:f2:77:12:d4:
                    63:3b:17:72:6b:da:6f:f0:60:dd:3a:a4:95:81:4c:
                    2b:27:8c:69:8a:3e:fc:a4:e3:e9:f4:bf:a7:23:c0:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:56:A1:CA:A4:F5:A8:39:D6:7D:F5:84:EF:3E:77:7E:5F:08:DD:4A
            X509v3 Authority Key Identifier:
                keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:81:fd:36:3e:3c:d8:19:e5:8d:87:6f:0d:21:ec:75:19:7c:
         f3:9a:3f:71:87:01:c9:0b:ed:87:5d:91:c3:9a:67:2e:46:89:
         c1:b0:17:28:17:c4:56:89:36:84:69:4c:03:47:b0:a9:06:63:
         68:1c:6c:8d:71:0c:d6:ae:44:3c:a2:34:97:1b:7e:6f:c5:6b:
         6e:49:ac:0a:b3:ed:f9:d4:7d:a1:e8:1e:92:b4:40:bd:d3:a4:
         7a:97:89:96:11:23:ae:92:f4:9a:1a:58:41:89:99:9b:0e:22:
         49:b5:4f:7c:65:ca:9f:74:f8:f8:8c:87:cf:d6:d9:a9:23:8a:
         04:87:46:6c:9f:96:34:b1:54:a1:d0:1e:5b:82:38:40:01:55:
         ed:55:a5:1b:d9:12:7c:69:d6:24:8a:88:51:70:db:8c:90:10:
         b3:88:2d:f4:f2:3c:7c:e7:e3:4a:9c:fa:e7:c1:1f:42:07:08:
         98:95:a5:9f:00:01:09:de:41:31:9a:4f:45:d5:6a:ee:82:5b:
         e4:1f:5e:6f:f7:92:e7:be:52:75:a6:aa:5d:a8:e9:37:b6:f1:
         11:5b:d0:7b:4e:c6:98:15:79:7a:7a:0c:db:92:33:49:11:bc:
         07:7a:70:d7:dd:76:fc:70:a5:10:32:27:99:ed:b5:b8:fb:a6:
         c8:94:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:20 2026 by rpki-client