Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
File:                     x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json)
Hash identifier:          Y65LTT8cuS1hqxYTugeESRVvY8jo/maEKiThrsXm6Hk=
Subject key identifier:   B9:98:24:83:04:8A:62:9A:EB:42:92:DE:34:F6:50:DB:E6:5A:DA:06
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Certificate issuer:       /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial:       019F92ED3BA2DCE94614023BC89F3B0F6DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
Manifest number:          131A
Signing time:             Fri 24 Jul 2026 07:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:48 +0000
Files and hashes:         1: gnw06N0gGBhicL_ONKvoP4ddQbU.roa (hash: 4gwJwDTmq+vkyn3oS5mRGQ3lROpbTUw7uW4+i/6DJjc=)
                          2: kpH5WlJCrMlmeeDd1J72A3S1E9Q.roa (hash: x6Dsqlz32ptPq4ZLP9ca9ot80w2DB6vu3sGi4SsF0p4=)
                          3: nZFYyUW-U0GOW9DpQejYoKAABk8.roa (hash: A9mI4AyUEreH1zF5qVOwvuDaDAKnjfc/wviBAZmJU6w=)
                          4: rqNF1I8XEuKDsKwv-z0vODcozOI.roa (hash: XEf3TPaRLCkLG6LuuSH50p5GGro0k1ye4U4n69uzWYI=)
                          5: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: UVJQYcJ/20YuqFQedXZqpo/Kqor8B4tSbu7HCPcrxxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:3b:a2:dc:e9:46:14:02:3b:c8:9f:3b:0f:6d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
        Validity
            Not Before: Jul 24 07:00:48 2026 GMT
            Not After : Jul 25 07:00:48 2026 GMT
        Subject: CN=b9982483048a629aeb4292de34f650dbe65ada06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:1a:a8:0a:12:46:da:a6:73:90:05:38:5e:
                    0e:10:1b:17:9f:51:e1:db:b1:3d:71:c4:29:5b:9c:
                    db:57:55:2c:d8:99:73:6a:df:19:25:e8:26:33:42:
                    44:17:4d:e1:54:99:92:71:67:86:0c:b5:05:d4:a2:
                    af:09:45:c5:44:e1:bb:75:d7:09:ec:14:95:ba:36:
                    32:4c:97:c4:14:2e:cc:83:97:38:db:b2:18:eb:55:
                    b0:26:00:b7:5f:09:05:ce:75:eb:be:cf:9f:43:87:
                    e2:cf:aa:61:3e:8f:e2:6a:2b:57:0a:8d:14:74:2e:
                    05:1a:ef:ab:c2:4d:75:d1:59:eb:32:36:5f:89:1e:
                    b6:5f:52:28:ca:aa:a9:22:32:db:c2:93:01:ef:c1:
                    bc:ca:d9:b9:d4:a9:05:91:7d:53:62:7d:4a:62:42:
                    f5:1d:e1:bd:0f:ee:2b:33:b7:2f:f4:3c:b0:a3:28:
                    f2:55:05:57:f7:24:2c:64:d4:76:b9:b5:1a:3c:46:
                    3e:e7:ea:40:97:67:18:12:b0:9d:18:91:25:24:5c:
                    67:c1:57:af:8e:90:2e:7a:8a:32:12:1a:cf:2d:0b:
                    0e:1f:c2:fc:9e:56:70:97:3f:35:34:92:49:e2:3e:
                    10:04:eb:24:94:51:f5:07:1f:36:5a:a5:82:aa:1f:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:98:24:83:04:8A:62:9A:EB:42:92:DE:34:F6:50:DB:E6:5A:DA:06
            X509v3 Authority Key Identifier:
                keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:47:26:d9:dc:7e:8b:c1:45:9f:43:14:ca:88:cb:41:fa:d3:
         51:9e:cb:dc:ce:90:9b:0a:51:0a:76:29:50:33:a2:01:c9:5e:
         e3:a6:82:ea:74:37:bc:a3:6b:08:73:c6:28:09:b8:73:5e:bc:
         6a:25:1a:6c:00:1c:3f:a1:3d:15:25:a4:1d:a9:e0:8e:24:10:
         37:2c:6b:fa:19:f6:b0:29:c3:bc:23:02:b6:91:e4:82:52:1f:
         32:9a:46:84:ef:4c:45:bc:36:a7:2f:d0:3b:32:96:d0:65:09:
         6e:65:96:9f:f3:6f:b2:ea:d2:a4:65:48:58:85:b8:3f:1d:08:
         09:0a:92:80:26:c0:ed:3e:ca:31:05:6c:8d:72:6b:04:a2:14:
         8d:03:3b:c8:fc:b8:8e:12:a1:be:c6:7a:2d:0b:89:77:97:3e:
         c5:b8:77:52:c0:ae:4d:ac:11:f5:67:24:86:4e:ee:00:89:4a:
         99:d8:80:95:35:92:6b:f5:f7:93:bd:1a:83:89:3a:a6:90:66:
         74:43:cc:57:62:8c:ef:a6:f1:a4:3a:f0:18:66:0e:8f:e4:71:
         04:b3:b7:83:b2:69:ff:49:5f:42:4a:c7:af:59:ec:76:55:36:
         d8:a2:65:fb:3c:08:2f:d4:84:21:88:56:3d:6c:96:b1:22:52:
         80:30:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:51 2026 by rpki-client