Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          TOmxNsi80Ybg3XaImE+61g50tfbOw2SvX0s8NQFjNes=
Subject key identifier:   FF:1D:59:88:D2:C7:8F:AE:10:B8:7F:BC:F5:14:A5:28:7E:05:39:21
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       019F90FF5E7152101C8AFB91D032B44F54EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          0644
Signing time:             Thu 23 Jul 2026 22:01:22 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:22 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:22 +0000
Files and hashes:         1: 1-l1XYb54g6dJ2IJlw79HqDOL1T8.roa (hash: 4KNw2FZJhBfZz/48eB8kUaq/nOVXJqe8YKN+AfMvBMc=)
                          2: 6Rv-YhkvK1GX0Te8-Dludeyqizk.roa (hash: UKGgcZcFKJuJZXLZiTLAH1hiVg42URiO+gpL2ayx09I=)
                          3: M63i7t4WYWQQDzdvsxsD0FnhDM0.roa (hash: /hhr1Y2Fr2l9zEhKAXJKXJb3IP8nSXMJwlawHmCx9tk=)
                          4: NKFYjT8NOU2nNm75iC1mMdUvWRg.roa (hash: T+3lCMY+jPZeKCOFr2ByuWF+cVwT3gGdpsce+k/SCB4=)
                          5: O92NJ5Awv2BDng61oOd15HuLqPA.roa (hash: X8BuUjbEcw4gYt0kVOFHS871nwSuI6STGkEuR3rs+f4=)
                          6: TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa (hash: 3A8wQr5AdN0RkrLyZ9wt0wnQNwX319OG4uYDw/IVg1U=)
                          7: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: QvMZ5HJcM8ORq4xHgmG0pRzQVOOEsG/Oktr9cJ1WYTI=)
                          8: gxpra8bjT86QjvorDqlEdlvdpME.roa (hash: DnaPkGQB16vLrL61uoIdPvxbl7A+RDJ1GPaU9N31TNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:5e:71:52:10:1c:8a:fb:91:d0:32:b4:4f:54:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Jul 23 22:01:22 2026 GMT
            Not After : Jul 24 22:01:22 2026 GMT
        Subject: CN=ff1d5988d2c78fae10b87fbcf514a5287e053921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:22:2e:b9:b0:b5:e5:22:10:34:bb:75:f2:
                    85:35:77:51:80:a8:f7:a4:72:43:d0:99:a9:79:08:
                    ae:9b:05:3c:f3:66:09:29:6c:2a:e6:f1:ac:03:3b:
                    65:72:9c:c4:92:55:7c:e5:fb:b2:9a:c9:eb:e3:f5:
                    0a:8a:d9:be:2b:54:7f:45:27:44:8a:a8:de:07:c0:
                    12:ef:b1:ed:10:31:9b:0b:a1:d4:a3:c3:2c:9d:33:
                    69:34:50:a5:9a:e6:11:ce:12:4e:a9:c2:e5:8b:f5:
                    e5:4b:91:b3:39:c9:63:d4:92:29:ca:a3:9a:66:78:
                    7e:5e:88:2f:dd:f5:1f:11:5a:f4:e5:73:b0:aa:5e:
                    8a:8d:2c:fb:20:bf:ae:ca:1d:d0:ef:bc:1f:60:a7:
                    31:f5:f2:53:02:ab:85:8a:e8:0d:25:0a:0f:02:4d:
                    5b:66:49:c1:41:42:4e:79:c1:d2:03:8b:18:cb:62:
                    5f:b7:d1:93:56:5e:82:0a:fe:84:0f:db:81:f6:dd:
                    8f:91:9e:3a:99:56:f7:4b:5c:21:29:ad:a3:2f:4e:
                    d6:21:ac:0b:a0:af:9e:f8:f2:92:06:77:e3:29:34:
                    27:11:8c:05:ba:50:54:32:ca:b5:d6:c9:79:a2:16:
                    06:d8:62:c9:a2:92:f6:22:d7:c4:d8:c0:a0:cb:5b:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1D:59:88:D2:C7:8F:AE:10:B8:7F:BC:F5:14:A5:28:7E:05:39:21
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:d5:40:ec:70:32:30:94:3b:a0:31:79:65:66:99:15:a0:
         a7:c8:8e:9e:c5:66:ff:05:87:54:0a:5d:09:56:18:1d:e3:00:
         cb:36:b3:fe:b6:83:8f:c4:c3:7f:3a:1f:bd:4e:ef:18:d2:06:
         31:5d:20:c7:51:af:b5:b8:81:9c:ec:f8:e7:c4:7d:b0:8c:11:
         14:4a:b6:4c:45:cd:9e:ff:d7:57:05:f1:ec:64:ef:82:f6:a1:
         06:b1:19:f0:48:84:32:9d:94:00:9f:39:fb:4a:5a:b3:a5:1c:
         83:91:98:bf:31:94:9d:b2:ad:fb:ff:36:85:b5:aa:d5:0f:ee:
         d1:05:05:66:47:2d:73:67:dc:41:be:d0:f4:c1:97:9b:6c:6c:
         10:23:35:d1:81:f9:bc:e7:91:fc:76:2c:cc:f6:7c:de:69:58:
         6e:c0:90:45:01:71:58:2f:5f:f3:e2:b6:5e:34:00:a6:5b:07:
         ab:c5:bb:7c:82:b0:8b:1e:f9:7c:5d:2c:d6:ee:c0:53:21:bb:
         9e:cf:0c:8f:ba:57:1f:49:89:b4:fd:29:48:c2:df:e6:e6:50:
         fd:bd:4a:7b:c0:60:be:4d:99:98:b6:02:70:ec:2e:46:f9:29:
         e0:b4:eb:65:9d:8b:96:4d:3e:d5:ac:96:3a:0c:95:fa:03:35:
         8c:cf:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:33 2026 by rpki-client