Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          k+Mzq1ZL8tr3Fmtxk1hKUJz3qVuv3KAv8wiAdb1E59c=
Subject key identifier:   3D:B9:97:BD:3E:88:D5:B4:A7:8F:7B:42:20:0B:44:AC:6C:BB:35:33
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       019F90C7A8F69B0F8A5DAEC5F94152B5D4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          0B40
Signing time:             Thu 23 Jul 2026 21:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:31 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: oGlaAutF2PP/gnEJLY1w7hv0u8J14i6wMUVMpZ5QaIA=)
                          2: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (hash: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a8:f6:9b:0f:8a:5d:ae:c5:f9:41:52:b5:d4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: Jul 23 21:00:31 2026 GMT
            Not After : Jul 24 21:00:31 2026 GMT
        Subject: CN=3db997bd3e88d5b4a78f7b42200b44ac6cbb3533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:8a:a6:eb:4f:4c:45:0a:54:de:78:c5:b4:
                    cf:c2:aa:74:b7:ec:2d:b8:b9:02:0b:3e:e4:6e:04:
                    41:03:21:4e:f7:1e:9c:8e:e3:5b:b0:53:28:83:32:
                    f3:51:d0:8b:67:f8:70:ba:09:1b:e6:44:46:fb:41:
                    5e:b7:2e:7c:f4:07:16:6e:30:c8:43:1f:c9:d9:1a:
                    e4:0f:88:cc:cc:4c:ff:aa:aa:8e:31:cc:63:05:12:
                    f0:d0:b4:07:8b:c4:f1:73:c6:b5:ad:92:da:df:20:
                    86:ff:6e:6c:f0:1b:0b:81:f4:36:c1:a1:1f:b7:f2:
                    4b:a4:61:ea:f8:fe:0e:12:d9:4c:05:8e:42:d2:65:
                    6f:0b:54:21:fd:7e:db:83:47:10:3d:db:6c:63:8c:
                    d3:ea:a5:2b:63:43:26:69:e7:7d:21:fd:0e:1e:32:
                    d4:54:06:21:50:48:72:7d:61:a8:3f:d4:c7:5a:26:
                    db:6a:80:7a:f0:96:0b:2f:67:18:6e:01:e8:cb:e6:
                    9e:a5:a2:49:c5:a7:e4:08:8e:a6:8b:4e:a3:f6:a8:
                    88:89:63:79:70:e7:73:4d:92:8b:18:8f:10:f5:c0:
                    40:d9:9a:02:b9:d2:79:99:a2:3c:09:08:d2:b5:a7:
                    a0:c5:36:63:d3:2f:d5:46:92:93:67:34:aa:bf:1e:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B9:97:BD:3E:88:D5:B4:A7:8F:7B:42:20:0B:44:AC:6C:BB:35:33
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:67:13:5d:db:3d:36:72:c7:f7:f7:ec:70:32:bb:b9:ca:
         f6:8d:5b:49:50:f7:7a:64:89:ef:9a:2a:26:de:14:a5:93:24:
         79:69:78:38:54:d2:3c:40:ab:72:3a:27:b3:fe:e7:19:03:97:
         85:e3:32:1b:d6:a5:65:fd:8d:59:e7:67:dd:a8:b5:37:cb:9e:
         e7:07:b9:ab:92:f3:73:63:6b:94:fe:99:cd:46:46:ad:e9:dc:
         cd:a4:8d:f6:94:4f:af:ee:84:fb:d6:1c:fe:c7:d7:32:68:42:
         4e:e9:d9:bc:67:25:95:37:58:91:c5:4b:6c:83:6d:4b:91:86:
         3b:e9:2c:d8:79:57:29:04:64:33:7b:ec:7d:59:d2:60:f8:5f:
         63:e8:94:c1:6f:e1:7d:67:75:95:7c:35:14:44:74:e0:4d:27:
         25:8e:35:f7:a9:54:ba:22:d4:bf:d1:2c:d1:a3:dd:56:a1:b2:
         5f:a6:5a:a8:c7:ae:ac:6a:82:1f:fe:15:12:c9:76:7d:b8:2d:
         5d:6b:70:09:ab:d2:1f:07:ed:b7:5e:1b:4d:da:69:f9:06:19:
         2d:ac:5c:61:bd:a2:39:74:12:f4:cd:8b:e6:bd:a6:13:31:dc:
         b8:11:19:cf:75:cd:21:62:fa:28:2f:07:7c:62:3d:4f:58:b5:
         8b:00:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:45 2026 by rpki-client