Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File:                     6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier:          liM02OFBPLqyBSD+bRip0eBvg010PFMIOoHQoKZQzs0=
Subject key identifier:   81:06:47:55:6B:C5:87:D6:EC:6F:A3:6E:E3:2A:FE:69:6D:6F:E4:D7
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer:       /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial:       019F94000F90A475A88CEAECDF412125C9CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 12:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:59 +0000
Files and hashes:         1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: GVSkrPeQWqvr+qYLfOls93quyH8Y7x0YNr+hKcoczE4=)
                          2: hm0yzTK0b7qXlzutucuPmlCxGCU.roa (hash: hv0VBvVubXMhG6KhX/vN7Xc4XTlNc7CyGB6Tgv3eXXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:00:0f:90:a4:75:a8:8c:ea:ec:df:41:21:25:c9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
        Validity
            Not Before: Jul 24 12:00:59 2026 GMT
            Not After : Jul 25 12:00:59 2026 GMT
        Subject: CN=810647556bc587d6ec6fa36ee32afe696d6fe4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fb:2a:25:a5:ab:20:af:2a:04:75:80:45:9e:
                    90:2c:ff:0c:05:c4:d1:19:70:61:38:42:80:d9:67:
                    a9:4c:f1:dd:f7:23:59:79:83:6c:2e:b4:4b:7a:de:
                    aa:19:72:c1:d3:cd:24:85:7f:6b:b9:2b:5c:9a:2b:
                    af:16:b5:e2:65:b1:d8:48:e5:52:f1:23:cb:04:c6:
                    62:a8:a1:e2:3b:a4:a7:3c:e7:f5:78:c1:38:30:b4:
                    43:2c:3a:26:4e:ae:16:85:93:2f:db:97:26:94:93:
                    e3:e1:f0:9f:67:ec:f5:ae:2b:87:b5:85:d2:a3:d4:
                    94:ef:28:04:ef:c4:f1:43:89:f8:5f:5a:f9:e5:da:
                    35:0e:a6:41:7b:a5:33:06:ee:0c:30:d3:fc:62:fa:
                    d6:19:aa:8e:14:01:0d:eb:72:0f:cd:26:ca:c6:5b:
                    ac:81:6f:f8:8d:44:7c:a9:32:eb:d6:69:58:7f:1d:
                    b3:c9:72:94:05:db:7c:27:ae:94:83:56:ab:2b:ec:
                    a0:72:1a:4d:d5:2f:a0:32:47:59:28:30:f4:2e:1a:
                    a9:b8:02:a9:0f:a9:b9:49:80:c0:6f:e8:50:0e:29:
                    d1:cd:d0:db:a8:3d:b1:f8:5b:28:f4:98:39:0a:c0:
                    57:47:ab:8e:0d:b1:bd:70:55:60:89:bc:12:8b:5b:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:06:47:55:6B:C5:87:D6:EC:6F:A3:6E:E3:2A:FE:69:6D:6F:E4:D7
            X509v3 Authority Key Identifier:
                keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:03:7c:27:04:3d:35:4b:cf:e9:e2:3f:38:67:a9:dc:f0:
         ca:19:23:d3:7d:e9:5a:0d:56:51:79:ba:d4:cd:f5:9d:4c:94:
         bc:57:96:9f:75:d0:9c:98:c4:b0:92:e2:f2:ff:40:89:e8:8a:
         94:1e:d7:d0:5e:62:41:56:ed:cb:4e:cf:3c:b5:19:60:1d:c6:
         84:18:15:38:c3:8c:65:76:fb:a8:d2:f6:c7:47:7d:cd:7c:ea:
         30:06:ac:1c:8c:da:74:64:0a:6a:d9:ff:e1:ef:30:c0:9c:64:
         da:2e:d7:bd:0e:d1:e6:ab:5d:30:5d:45:5d:ce:21:51:71:1a:
         41:b3:cb:8a:c5:fa:dc:9e:46:78:47:98:97:39:46:3e:f0:4f:
         bf:ef:d0:0f:04:a8:ce:00:9e:26:ad:bf:0c:f7:48:3d:73:97:
         72:8a:bc:ed:c5:67:f0:dd:49:c7:fb:ef:27:6f:0b:f4:87:63:
         dd:ff:ae:d7:9c:1a:ab:af:78:90:96:68:b6:de:8d:88:0d:b9:
         5d:2e:de:9f:13:67:08:2d:a2:49:4e:9c:48:0d:fc:63:3a:a0:
         fc:e4:55:e5:c4:76:4b:58:d5:00:7e:d9:1c:f1:14:3a:ce:ca:
         88:e5:89:b5:03:92:89:42:e8:41:81:fd:ac:76:2c:74:70:41:
         2b:a7:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:45 2026 by rpki-client