Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File:                     0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier:          lq86iBUiBr0OPKSNR1yVnXkPK2pj/QuvojTR17qzfZE=
Subject key identifier:   7B:28:25:48:1E:3A:21:E6:5B:8E:09:7D:9B:D8:20:11:18:8D:07:89
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer:       /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial:       019F8F109D5D65F2C4FA89FC5547C6F3F1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number:          0AF4
Signing time:             Thu 23 Jul 2026 13:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:58 +0000
Files and hashes:         1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: M6Q59gO3LJXp5Ftiev63uutnRN5bqVIYqNdPrAecVM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:9d:5d:65:f2:c4:fa:89:fc:55:47:c6:f3:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
        Validity
            Not Before: Jul 23 13:00:58 2026 GMT
            Not After : Jul 24 13:00:58 2026 GMT
        Subject: CN=7b2825481e3a21e65b8e097d9bd82011188d0789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:22:7a:bc:a3:9e:37:87:e8:b8:31:7c:91:
                    6d:70:5c:4e:2d:a4:29:5f:4b:65:ca:3a:64:a2:a4:
                    86:ce:17:7a:1a:1b:9c:b5:a7:92:14:61:65:dd:86:
                    45:22:63:76:9b:96:3a:5d:a3:41:51:0d:65:31:0d:
                    14:c1:aa:ec:b8:c2:af:91:9d:b2:4b:62:6f:cf:29:
                    ca:7d:f6:f5:b4:f6:38:ed:4c:11:07:d4:60:94:e5:
                    4c:76:0d:6b:18:16:2a:0f:26:69:47:a7:1e:09:7e:
                    4c:c9:9f:f5:24:91:3a:0a:e3:b3:b7:c9:c0:92:71:
                    ef:54:cd:e6:f7:01:cd:69:0d:d7:69:ee:5c:15:0f:
                    81:c5:bc:75:56:c1:da:47:fd:fc:f7:57:5a:b0:b6:
                    88:4c:22:84:52:96:23:f4:61:c3:09:fc:d4:bd:dc:
                    ea:9a:d1:be:ef:7b:d1:d2:49:07:5a:0b:a6:8b:fa:
                    db:69:5e:dd:dd:49:54:49:a4:58:16:78:08:cd:c0:
                    f1:af:4e:2b:13:a1:34:fe:ac:23:9f:27:65:f7:26:
                    cf:b6:74:38:d6:d5:52:8a:a3:50:d2:40:4c:ef:80:
                    73:e6:fa:25:74:d8:62:d5:a6:26:72:b4:ab:05:c3:
                    cb:82:a4:31:bb:01:54:ba:70:a3:41:38:0b:b9:f1:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:28:25:48:1E:3A:21:E6:5B:8E:09:7D:9B:D8:20:11:18:8D:07:89
            X509v3 Authority Key Identifier:
                keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:a4:7d:11:ad:da:4c:18:2e:d8:8d:05:3f:9b:a0:85:15:
         09:35:00:7a:62:c7:e2:c4:10:57:75:4e:75:c6:8d:0d:73:f7:
         05:5a:2e:6a:77:1d:d2:da:78:0b:72:49:56:82:ab:e5:93:bd:
         d7:bb:17:77:0e:83:9f:49:e2:4c:3c:aa:ef:d4:6e:be:46:f8:
         7d:5a:46:6d:cb:81:d7:8b:8d:91:c6:fb:a4:c2:34:78:08:ff:
         e0:06:fb:eb:51:97:cb:0f:5a:54:51:09:95:76:2b:a6:e9:19:
         cf:54:79:d6:83:f9:37:7c:d7:4d:ce:55:3c:e5:ff:75:02:52:
         bd:81:3a:17:60:29:2d:8d:4b:13:93:c2:6a:29:86:86:32:77:
         cb:ef:75:57:36:49:c1:fc:62:61:e5:ea:5b:fa:3e:c1:38:b6:
         68:53:6c:a7:cc:62:a4:31:4e:e5:37:1b:3b:e6:c2:4e:02:64:
         db:fc:4b:24:44:4f:d7:42:3b:fe:2d:0a:56:86:0c:63:19:23:
         02:81:dc:66:2d:4c:a2:7c:83:61:ec:a4:5b:9a:4e:17:22:de:
         f3:87:43:f0:87:95:05:07:b4:6b:8b:8f:f3:53:4e:94:da:38:
         b3:7c:6d:cf:cb:64:62:1d:3f:e6:9e:e2:bf:ec:7f:dd:eb:32:
         f5:08:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:55 2026 by rpki-client