Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
File:                     6zN-rWubk90NdYq_nXswMHKpnrk.mft (raw, json)
Hash identifier:          RsP8Nm3LybPaYKg9sv/M+XUhRcsI2byivuBTq9aTzJo=
Subject key identifier:   4D:78:54:82:1E:FB:BD:29:93:02:85:F2:58:39:41:F1:9D:A5:50:26
Authority key identifier: EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9
Certificate issuer:       /CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
Certificate serial:       019F90FFA2F7B692BEE4D3B6FFE8A20EBC14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 22:01:40 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:40 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:40 +0000
Files and hashes:         1: 6zN-rWubk90NdYq_nXswMHKpnrk.crl (hash: zZYlRxh9SbjR9C99QH9UVpsgCvmW2f0FCxpEZBQsweg=)
                          2: zG_KNlp2ov-Eb_r8DA6akL2rZTg.roa (hash: AJBQtpRLkRSZKhdaLX+ia9/jPSSmkNLT+zLAkaVXhn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:a2:f7:b6:92:be:e4:d3:b6:ff:e8:a2:0e:bc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb337ead6b9b93dd0d758abf9d7b303072a99eb9
        Validity
            Not Before: Jul 23 22:01:40 2026 GMT
            Not After : Jul 24 22:01:40 2026 GMT
        Subject: CN=4d7854821efbbd29930285f2583941f19da55026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:05:5f:0d:64:4b:92:9e:2b:20:65:58:e3:
                    d2:04:47:26:3d:24:50:5d:03:61:42:46:f7:c9:1f:
                    ee:c3:69:15:5d:e0:8c:42:e8:98:9c:18:fa:89:de:
                    b0:ba:d1:c5:1c:dd:db:2e:3f:61:72:eb:83:fe:7a:
                    62:94:42:3d:65:2d:d1:87:f9:d1:2f:a5:fe:31:38:
                    32:ca:b3:9f:55:cf:a8:1f:49:37:47:01:f0:19:08:
                    bd:ac:56:b6:be:c8:ba:71:2a:e8:64:1c:35:5d:b7:
                    48:16:ca:7b:0d:35:a0:78:98:c5:36:45:9e:20:4a:
                    55:7b:b6:d4:66:9c:1a:37:95:09:e4:c9:a0:9a:6c:
                    09:e1:65:29:36:0f:58:06:06:ff:de:70:45:2c:4d:
                    72:83:a7:3b:3d:b3:90:b8:a5:72:05:35:8b:16:89:
                    9e:1b:dd:a2:70:a9:67:83:a3:ab:37:07:3f:ee:27:
                    68:18:8d:31:2c:93:51:78:27:0c:a7:12:be:8e:c0:
                    5d:f9:61:00:b5:f9:0a:18:b9:94:98:5f:ff:4a:5b:
                    a3:c2:29:c1:32:92:13:aa:f7:4f:f3:15:5f:58:6d:
                    ac:e9:9b:ec:cf:d2:39:e7:ee:f0:d9:f2:e0:e7:8c:
                    5e:a9:ba:c7:cd:2d:55:2a:95:64:ac:0b:ad:6d:9e:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:78:54:82:1E:FB:BD:29:93:02:85:F2:58:39:41:F1:9D:A5:50:26
            X509v3 Authority Key Identifier:
                keyid:EB:33:7E:AD:6B:9B:93:DD:0D:75:8A:BF:9D:7B:30:30:72:A9:9E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zN-rWubk90NdYq_nXswMHKpnrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b8c30c-82d9-46bb-bb07-9ca100428f10/1/6zN-rWubk90NdYq_nXswMHKpnrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6f:d1:0b:6b:23:a8:4b:b7:bc:3c:45:c7:64:69:87:d2:83:
         b7:49:77:d4:87:bc:2b:df:fd:a7:55:ae:71:eb:67:c1:9b:bb:
         01:91:58:b6:12:33:44:94:1f:eb:0c:a7:b9:54:88:72:2c:75:
         3f:a2:26:52:88:89:0c:43:4d:53:40:6b:5f:9c:a5:26:23:d9:
         38:f2:bf:c4:de:f1:0c:92:68:ca:ea:2d:5d:35:18:76:3c:99:
         44:e2:b4:df:3f:4e:a6:ab:ce:6b:0a:4c:6f:fa:ae:45:ed:99:
         dd:43:99:f0:c4:84:fe:2e:e0:82:33:d4:13:f8:52:f4:05:35:
         c0:38:fb:ff:c9:3f:1c:4b:89:8b:f3:3a:5a:1a:74:d6:02:49:
         36:2f:da:03:d1:3a:ca:93:23:00:5c:08:e3:61:9e:58:27:e4:
         ab:8c:fc:df:22:79:7c:8b:85:f4:f0:22:ca:34:4a:3b:5a:ee:
         f7:7e:c4:48:d3:d8:fe:da:bc:e0:dc:3a:c1:f7:b0:8e:6e:dc:
         80:c8:77:a1:26:b6:cb:03:1e:c4:54:cb:d7:97:18:cd:d4:80:
         41:84:67:70:e0:6c:a2:5f:85:f8:d3:93:b5:e6:d3:01:fa:2e:
         ea:cc:1f:58:a3:fa:6e:23:6a:c3:7e:76:85:fe:7f:9e:7e:6c:
         a8:c4:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:24 2026 by rpki-client