Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          j7iadQKQdQ6Uk9frn8kNZQbfD2qvGDxooyEB7efPAeY=
Subject key identifier:   30:23:13:88:C6:28:83:53:AC:6A:C6:4A:5E:5F:B3:C5:B4:3B:E6:C6
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       019F905AA547F8CB65320354BF28EBF43AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 19:01:27 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:27 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:27 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: IpFKYqKt34SkL2e5T1ZXkLEakDQCXf+AHs0hxnqTkyE=)
                          2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:a5:47:f8:cb:65:32:03:54:bf:28:eb:f4:3a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: Jul 23 19:01:27 2026 GMT
            Not After : Jul 24 19:01:27 2026 GMT
        Subject: CN=30231388c6288353ac6ac64a5e5fb3c5b43be6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:df:11:b2:c8:ed:84:1d:c1:dd:4b:ba:02:1a:
                    fe:88:ae:05:fd:13:66:8b:1b:61:29:22:3c:84:f5:
                    3d:3c:4b:b9:1c:0e:f7:4a:91:87:7e:49:5b:9b:b6:
                    d8:d7:48:7d:9c:df:27:b5:0a:f6:28:d5:25:81:45:
                    c3:b8:eb:1c:63:1b:6b:9d:88:76:3d:c2:0a:a7:5b:
                    58:35:8a:9f:f4:fe:96:09:a6:46:0a:10:d1:35:8d:
                    58:40:17:40:8f:9f:dc:19:26:ce:02:24:96:90:bd:
                    11:56:08:6d:c7:b7:eb:35:b9:75:6f:c3:cc:bf:b1:
                    a0:db:5b:93:23:03:d6:7a:30:59:18:b8:84:c8:c3:
                    33:4e:fb:75:cb:b1:e4:d8:48:f7:b9:12:bc:bb:7c:
                    85:ec:a0:9f:46:4b:1c:f3:ca:e5:38:0b:5d:16:0d:
                    72:0c:3d:0d:9e:4e:98:a0:2e:f9:b0:34:0b:1f:6b:
                    44:15:e6:d9:97:97:d8:7d:78:b2:e8:55:53:6e:b4:
                    41:be:7b:b1:d2:2f:50:a0:3e:d3:bf:46:14:cf:83:
                    ed:b4:44:38:9c:57:49:2f:e2:f7:5e:46:c3:8c:d7:
                    59:c1:f7:d6:b3:d9:6a:c6:69:11:69:aa:b6:fd:11:
                    59:80:2c:87:5f:58:31:89:4a:7c:5c:60:80:50:6d:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:23:13:88:C6:28:83:53:AC:6A:C6:4A:5E:5F:B3:C5:B4:3B:E6:C6
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:04:e7:b5:1a:8d:51:01:c8:9f:43:5e:77:35:17:94:46:8b:
         60:5c:76:e3:f2:86:3d:bc:91:82:52:7a:65:bb:7d:cc:69:d1:
         59:03:b0:1c:d8:65:27:75:5b:c4:9a:af:5a:13:17:f4:57:3c:
         ed:4d:6c:07:ef:da:d9:56:28:db:a4:b7:4d:eb:bf:f2:cb:d7:
         29:dd:6c:6a:13:0d:28:63:fa:3b:d4:58:f0:93:b8:c1:88:7a:
         21:c9:9a:6b:f0:53:3c:81:ed:22:fe:da:29:91:06:c6:eb:48:
         64:8d:d1:ae:b2:4b:c7:73:22:bb:09:d0:1d:8e:01:15:b3:a0:
         fe:ea:bf:94:fb:f6:c2:5d:f4:92:0b:ab:b2:be:50:35:4f:89:
         ac:c3:ce:80:6f:3b:8b:1b:b0:41:08:e3:50:fc:82:2c:73:59:
         39:4e:31:3b:7a:43:77:31:01:60:68:ee:46:fd:a5:38:c2:26:
         72:58:ee:a6:c7:2e:95:09:66:c1:fa:33:a4:e5:8a:82:5e:af:
         dd:5a:a5:53:b3:14:31:e6:63:ce:7c:cb:c4:dc:15:e4:16:c0:
         34:23:2f:f7:25:e7:bd:85:95:a1:ef:93:38:a0:19:ab:3a:12:
         98:c3:cb:10:62:03:a9:ca:cb:c8:9c:00:67:44:86:ec:18:58:
         f2:56:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:44 2026 by rpki-client