Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
File:                     C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft (raw, json)
Hash identifier:          cIVk7b9pnsmVDsFdhb0LYQtaVQy+O0lSGKs8N54hsVY=
Subject key identifier:   FD:97:BD:BB:9D:C7:8E:8E:C3:34:57:EE:A7:92:AA:26:C5:44:3B:B4
Authority key identifier: 0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76
Certificate issuer:       /CN=0ba11a46c44eecf90c6231f8456cc702ae938076
Certificate serial:       019F905A75908BB25867817FB7AC4CA32673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
Manifest number:          020B
Signing time:             Thu 23 Jul 2026 19:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:14 +0000
Files and hashes:         1: C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl (hash: le/xq6YIeHCdTH3twlTTmqkgxzjAPcDnvEdOw5JpU5o=)
                          2: q7WfGeBPEEvSqwuhjuGB9MK0FR4.roa (hash: 6I5OLAD4XJOUPBEb7WYc+qrHbMwA5+oW8O7b01lul68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:75:90:8b:b2:58:67:81:7f:b7:ac:4c:a3:26:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba11a46c44eecf90c6231f8456cc702ae938076
        Validity
            Not Before: Jul 23 19:01:14 2026 GMT
            Not After : Jul 24 19:01:14 2026 GMT
        Subject: CN=fd97bdbb9dc78e8ec33457eea792aa26c5443bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:75:db:a6:79:01:e4:8a:5b:4f:63:dc:17:
                    d7:82:ae:fe:c0:eb:ae:aa:b1:61:2f:3d:39:64:19:
                    2f:5c:ae:c7:54:e2:06:b1:e2:3d:61:0b:56:26:dd:
                    39:b8:1d:8f:64:58:9d:40:de:42:14:7b:e0:95:47:
                    57:0e:df:9e:fd:7e:d4:6a:4b:13:ae:57:3c:16:f0:
                    fa:a1:06:0e:21:ce:24:67:c0:4f:b5:93:c5:98:65:
                    a2:98:4f:1f:bb:0e:23:82:0f:1b:0d:1a:3a:da:73:
                    37:55:28:56:2f:7f:d7:b3:01:e1:5a:9e:06:57:0a:
                    14:6a:87:0b:61:89:c0:47:3a:e5:e5:d5:74:67:18:
                    94:ea:e8:42:f2:28:ab:7b:2e:5d:5c:d3:20:fd:00:
                    82:f7:a0:03:d1:39:12:c8:45:a1:cf:1b:ff:21:72:
                    90:79:d2:2f:70:19:be:f7:da:6c:12:4c:ac:d3:2e:
                    ed:38:03:ce:52:85:c8:b0:02:35:c3:21:61:32:15:
                    3c:d2:f1:2a:52:2d:5b:eb:e5:ff:3c:eb:cc:c2:6b:
                    b5:94:8a:36:5d:f6:b5:b9:42:9c:29:6b:92:42:f7:
                    15:40:89:1c:3e:b4:c0:8a:a4:04:7e:52:94:3a:f6:
                    60:14:1c:32:2e:83:6c:e4:3e:3e:97:e0:2c:8d:05:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:97:BD:BB:9D:C7:8E:8E:C3:34:57:EE:A7:92:AA:26:C5:44:3B:B4
            X509v3 Authority Key Identifier:
                keyid:0B:A1:1A:46:C4:4E:EC:F9:0C:62:31:F8:45:6C:C7:02:AE:93:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6EaRsRO7PkMYjH4RWzHAq6TgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/585e8e-1d19-4b40-9dca-274cfb096ed2/1/C6EaRsRO7PkMYjH4RWzHAq6TgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:df:39:0f:72:bd:d6:43:f7:2d:41:88:23:18:c3:fc:a4:
         e4:e9:77:fa:1b:3e:38:17:d3:93:5c:39:1e:15:b9:b6:9f:07:
         d0:17:d5:66:22:da:a9:10:b8:07:c1:fa:f0:e6:a5:9e:bb:27:
         f8:ef:97:77:6f:32:f9:82:ca:6b:eb:4b:74:50:13:dd:65:dd:
         1d:4b:e2:9e:28:1f:bd:e7:f7:1e:07:63:b3:4c:2a:78:5b:84:
         09:b2:3c:21:7b:09:af:87:a0:f9:f0:55:03:fc:40:39:a3:28:
         a3:7c:9f:00:f1:93:db:dd:15:72:30:c8:b3:8c:e5:3a:d6:87:
         87:43:9a:bb:8e:e9:aa:3c:2e:60:7b:4c:91:1d:4a:ff:1a:ae:
         ae:8b:83:f2:22:3e:1c:39:94:fa:13:15:2f:4e:43:43:1c:9a:
         72:bf:fa:9e:a3:73:1c:63:17:a1:aa:93:bd:12:49:10:02:24:
         10:b3:bc:11:48:26:4a:5b:74:a6:4f:51:af:53:4d:12:3d:3d:
         2e:f2:98:c2:f3:f3:72:6b:21:44:e9:c8:15:ed:73:b0:95:65:
         c3:54:48:f8:62:35:2e:37:4a:03:0e:3e:30:38:27:f5:67:d7:
         77:97:3e:db:34:84:a0:bd:6d:de:d6:a1:75:59:80:31:e4:05:
         af:3a:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:56 2026 by rpki-client