Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
File:                     6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft (raw, json)
Hash identifier:          FWorftIjZcVC0Q1TVtFRX2sJ7yG03PQZAae4LQdkw9Y=
Subject key identifier:   DA:77:A8:70:8D:A0:9E:B7:8C:D5:38:56:D5:4A:BE:4F:60:AA:8E:4F
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Certificate issuer:       /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial:       019F9022A6C640B37550FB0F1FCC413DCC96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
Manifest number:          0A37
Signing time:             Thu 23 Jul 2026 18:00:17 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:17 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:17 +0000
Files and hashes:         1: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl (hash: G2/tw8KbMX6IFASiwyWoHXm+jO3Ey/joxqJs5Xbfe6E=)
                          2: 7lvjfYbr9G0PNBw25lw_gjQVNAc.roa (hash: Q4GZSTUw+N9EKoJs3VO+IluZlSIov3jTQ/daTNuT5H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:a6:c6:40:b3:75:50:fb:0f:1f:cc:41:3d:cc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
        Validity
            Not Before: Jul 23 18:00:17 2026 GMT
            Not After : Jul 24 18:00:17 2026 GMT
        Subject: CN=da77a8708da09eb78cd53856d54abe4f60aa8e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:49:21:a8:25:b1:d5:9b:f3:ff:c9:56:33:
                    d8:73:32:30:59:74:0d:eb:61:54:92:55:77:f1:35:
                    01:be:e8:5f:f4:c3:45:3b:40:82:14:2f:83:a8:80:
                    4e:14:f8:53:ee:c0:e2:71:20:c6:64:b3:b4:d0:e8:
                    17:2b:51:aa:d4:a6:df:b7:e2:ff:31:8b:e4:23:9b:
                    70:15:eb:dd:22:45:b5:b5:6c:2b:ba:6e:c0:bf:ba:
                    4d:b9:d8:44:b8:30:22:5d:7e:89:df:09:75:e8:fd:
                    5b:a4:ab:bf:99:2a:65:ee:2e:b4:10:d4:eb:77:14:
                    75:68:0e:a2:e8:21:bf:8b:c8:7d:b7:f7:9b:9c:1c:
                    3d:a5:42:ee:aa:0f:a6:96:9e:5e:01:36:98:73:2b:
                    83:37:f8:29:88:de:c7:a6:84:78:8c:90:c4:a3:83:
                    93:34:2b:7c:00:65:18:a3:3c:47:45:ea:b6:5a:94:
                    21:c9:43:f1:57:87:04:90:30:91:70:e3:d6:42:d8:
                    21:7b:5c:ce:e0:8f:92:40:8f:af:2b:49:55:1b:f7:
                    6a:e5:e3:55:83:41:52:34:06:d9:58:fa:ad:8e:4d:
                    76:8a:76:0b:21:6e:d5:ab:fc:7e:5b:ec:91:f4:bb:
                    de:21:3a:89:b8:f8:6c:58:f2:b5:b9:74:9e:fe:d8:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:77:A8:70:8D:A0:9E:B7:8C:D5:38:56:D5:4A:BE:4F:60:AA:8E:4F
            X509v3 Authority Key Identifier:
                keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2b:4b:aa:3d:7f:f6:3c:a1:99:78:67:01:47:b0:34:87:b9:
         64:98:81:ca:2f:95:a6:7e:ea:21:25:d2:4b:1d:02:2b:d7:9a:
         76:0b:3e:b7:5b:a2:2c:25:d6:e7:94:a6:b9:54:62:40:46:41:
         89:91:0b:ec:ce:d1:92:c5:1f:9f:52:ab:00:49:01:b7:64:77:
         6b:aa:e0:5c:08:d9:bc:e2:e2:93:9e:36:19:44:60:0e:56:69:
         aa:1c:35:52:4d:f5:0f:5b:1c:b3:59:de:28:51:84:ab:48:b6:
         b9:59:84:89:c3:c7:37:fb:3a:25:fa:6f:bf:2a:3f:ef:da:73:
         c4:86:a2:05:d6:09:7a:b9:69:aa:ac:9f:10:04:7e:cd:04:16:
         a7:89:b5:51:7a:48:da:d5:ea:64:66:8a:fa:0b:d3:cd:05:b2:
         56:31:4b:da:c8:88:69:51:6f:c0:83:e4:62:c7:72:45:f6:a7:
         33:8a:ba:d1:86:2e:5e:e0:b8:e5:d2:18:22:cc:fc:9f:d6:a7:
         fe:64:b9:22:0b:d4:4c:b3:c0:4f:ca:bb:2b:b8:3d:77:a9:14:
         c6:c8:24:f6:79:54:dd:a1:b7:22:72:fc:34:4a:b8:f9:99:f3:
         56:f6:f9:22:3d:79:15:90:43:a7:7e:a4:53:58:dd:9b:22:9d:
         42:1c:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:15 2026 by rpki-client