Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft
File:                     2muiKY_gnTGl_1TyuBbEAVAtu_8.mft (raw, json)
Hash identifier:          6Bdq57IqdOZcoTDhrRE7lTGjSbTqJPtok+p++lKHKJM=
Subject key identifier:   E6:AC:66:54:49:19:10:F4:0E:A3:81:B0:64:38:21:C5:8C:45:32:DF
Authority key identifier: DA:6B:A2:29:8F:E0:9D:31:A5:FF:54:F2:B8:16:C4:01:50:2D:BB:FF
Certificate issuer:       /CN=da6ba2298fe09d31a5ff54f2b816c401502dbbff
Certificate serial:       019F9090F66AE6D58909A1774CDE4231A4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2muiKY_gnTGl_1TyuBbEAVAtu_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 20:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:47 +0000
Files and hashes:         1: 2muiKY_gnTGl_1TyuBbEAVAtu_8.crl (hash: 4PdKyE+xxApj4CBJm+srBIzC1a7QkPYdfvtmakRQKeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2muiKY_gnTGl_1TyuBbEAVAtu_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:f6:6a:e6:d5:89:09:a1:77:4c:de:42:31:a4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6ba2298fe09d31a5ff54f2b816c401502dbbff
        Validity
            Not Before: Jul 23 20:00:47 2026 GMT
            Not After : Jul 24 20:00:47 2026 GMT
        Subject: CN=e6ac6654491910f40ea381b0643821c58c4532df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:c9:33:8f:74:9b:3e:12:c1:13:97:5b:52:
                    fb:01:85:3f:b0:33:7a:04:0c:42:b7:4d:d9:a0:c2:
                    7e:2a:00:1d:7d:f3:09:50:a0:d5:5b:bb:57:ac:5f:
                    e0:16:a8:f4:ca:9f:25:84:cf:9b:c4:66:e4:bc:26:
                    76:9a:17:97:18:ee:b7:c1:b5:00:d3:ce:dc:b2:ee:
                    7a:19:1c:d9:86:3c:7f:2d:a4:98:f2:2d:1e:64:4c:
                    f5:92:fa:24:69:50:32:43:1f:df:c6:a4:4b:5d:a6:
                    75:2a:54:2e:c9:2f:30:af:91:31:18:c2:dd:d5:a7:
                    8f:b1:ce:88:8e:a4:af:b4:c3:cb:89:63:92:9f:cd:
                    77:76:ba:6c:3e:a4:3c:3b:0f:63:d6:0f:56:2e:94:
                    97:7d:84:00:24:53:58:0d:cb:3c:4b:33:24:13:38:
                    48:e4:a7:16:b8:c9:85:e1:cd:92:e5:f1:ec:d6:3d:
                    3e:ee:11:e4:fb:57:9e:f4:b8:0d:8b:64:7e:8f:21:
                    9e:93:5a:da:38:95:2d:ae:a5:41:dc:39:5e:59:83:
                    6d:d5:6d:da:b2:2f:cc:39:c0:ba:b7:c1:31:6f:dd:
                    69:28:50:26:ba:c7:b7:08:30:59:4d:a6:06:61:e4:
                    7a:93:0e:e1:5e:30:e1:9c:70:a9:f3:30:b9:58:29:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AC:66:54:49:19:10:F4:0E:A3:81:B0:64:38:21:C5:8C:45:32:DF
            X509v3 Authority Key Identifier:
                keyid:DA:6B:A2:29:8F:E0:9D:31:A5:FF:54:F2:B8:16:C4:01:50:2D:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2muiKY_gnTGl_1TyuBbEAVAtu_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:07:ec:8c:78:ca:23:d2:11:d1:04:26:39:c7:4a:ad:1c:
         d3:03:b8:f9:dc:e7:14:7d:3e:86:49:aa:2f:db:e5:30:cc:7b:
         60:34:0a:ea:ef:15:4a:8d:68:7e:84:c4:3b:9d:57:b6:cb:a2:
         9c:f6:aa:eb:d2:d3:8a:af:f2:4e:3b:a8:2a:6b:2c:da:4c:d1:
         e9:10:40:3c:b3:f9:51:f4:07:70:86:f4:1c:67:7a:91:f2:f4:
         fc:bf:df:99:b0:d4:af:cc:b1:7b:4e:a1:51:1c:08:8a:6e:89:
         a2:bf:f9:98:7b:79:64:a6:40:e2:3c:e7:e6:cf:19:0a:d6:ff:
         cf:53:e6:14:f0:73:fb:91:7f:f5:b3:7d:2b:d1:99:50:c9:35:
         d3:e2:46:97:62:17:82:f5:a1:71:83:a3:7f:8f:93:79:24:f3:
         dc:04:c3:a4:15:26:d1:e0:f5:43:34:63:68:01:70:6a:80:99:
         d9:52:7d:56:97:a7:81:fc:68:86:46:eb:53:38:e2:b3:83:a8:
         f9:5f:c5:ea:f5:92:2b:b2:7f:3a:f1:ab:8c:45:e6:4e:5d:9f:
         d2:a5:fd:aa:c5:b1:79:37:37:c0:e6:88:23:e9:bb:52:75:9b:
         48:5a:d3:3d:f9:03:14:22:cf:78:c5:9c:09:20:25:c2:8f:dd:
         a9:e1:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----