Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File:                     6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier:          cosB5UKRG4RqpU2866WHq9jlUDC5kIgRmeI0cldaNA8=
Subject key identifier:   48:6A:52:4F:D0:A6:05:65:55:F3:E5:55:7A:C5:21:9D:66:A7:93:F7
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer:       /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial:       019F9059CF583354576DBA74409685C9067A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number:          1164
Signing time:             Thu 23 Jul 2026 19:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:32 +0000
Files and hashes:         1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: Qys31xOEmD8eQcWOq7YjCjloqYoA3x3LLW47fSYqbnc=)
                          2: vGQ0FlfBg9HurxXzBHSCF8IWFRQ.roa (hash: vG2KyLa3eKD4ni6LSYbmZcxZgH0oTjxPgZTSDvuGGJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:cf:58:33:54:57:6d:ba:74:40:96:85:c9:06:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
        Validity
            Not Before: Jul 23 19:00:32 2026 GMT
            Not After : Jul 24 19:00:32 2026 GMT
        Subject: CN=486a524fd0a6056555f3e5557ac5219d66a793f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:73:85:fb:5f:e9:e3:58:6e:55:fc:2a:4f:
                    9b:03:d0:01:16:84:2f:f7:95:0a:47:9b:21:51:b5:
                    f1:78:7d:71:e8:d5:e9:84:0e:c6:ac:db:ab:fa:6e:
                    7d:ca:f5:64:0e:bc:5d:4f:da:6d:08:a6:5a:c2:b4:
                    3b:63:7c:5a:5e:42:f1:aa:03:e1:f1:ec:e4:5d:90:
                    a9:3c:52:7a:39:0d:06:69:55:6f:7e:84:af:9d:09:
                    3f:1f:b3:17:41:6c:47:5f:c7:b6:7a:44:b9:b0:2b:
                    7f:a9:a7:4a:67:f4:47:84:01:10:22:74:b7:b1:4f:
                    26:1a:e0:a9:ee:02:d5:61:6b:7a:24:23:25:a0:72:
                    4e:d0:91:0d:cd:8c:70:3e:6f:74:fa:0c:6b:f6:94:
                    ea:11:5e:4b:fa:5c:0e:24:8c:60:69:09:7c:35:92:
                    89:fd:54:ac:f1:90:53:42:41:ae:4b:20:d0:67:38:
                    33:38:3d:ee:ba:78:da:3e:f8:85:4d:42:3c:66:13:
                    46:4a:73:c1:7c:22:61:25:e7:70:0e:5e:31:fd:86:
                    31:ea:18:1b:fd:e8:3b:e1:38:2d:e3:78:41:ce:ca:
                    bc:34:ce:f1:a9:15:77:ca:83:04:9c:34:61:d0:18:
                    e1:8b:2a:ad:b4:5f:b9:11:3c:ab:b2:55:f8:83:72:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:52:4F:D0:A6:05:65:55:F3:E5:55:7A:C5:21:9D:66:A7:93:F7
            X509v3 Authority Key Identifier:
                keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:02:b5:02:74:bc:58:8c:a6:4c:cf:2b:2a:9e:ff:93:66:45:
         cd:f2:e9:27:7c:42:b7:70:2a:2b:46:95:7e:0f:72:be:fd:99:
         90:45:6f:8e:4d:c5:fe:4b:b1:84:92:ba:94:2e:d8:fd:99:a5:
         78:af:a5:c1:1a:eb:92:7e:8c:3d:cb:b2:f8:9e:2e:b7:66:c1:
         e2:0d:41:6b:ae:ff:81:e4:47:e2:17:76:1c:c4:b7:55:c1:44:
         56:34:21:4e:d0:47:06:bb:95:91:6d:22:00:a7:9b:68:5e:4d:
         10:f5:54:b0:f0:f2:10:5c:27:34:fa:4f:02:d2:27:0b:34:f1:
         fc:fe:d3:f3:65:f9:96:7f:c2:3f:c3:59:06:2c:c4:e1:ea:91:
         8b:2e:3b:18:bc:51:42:c6:1d:68:16:d0:9a:59:8b:2a:87:b2:
         c3:2e:01:3b:a6:10:32:15:1d:8b:eb:14:fb:8b:22:1e:21:5d:
         2f:04:6d:b3:f1:da:c4:3e:aa:32:5b:27:ad:e5:d5:cf:46:19:
         c6:0f:da:a6:7b:65:70:b0:29:78:c7:48:bd:61:e3:8a:17:d2:
         81:0c:e9:76:8d:38:88:6a:6c:57:4a:81:d6:d3:b7:52:89:28:
         ea:f7:01:56:93:f0:fe:54:aa:5f:ee:b7:2a:b9:1b:d9:07:fc:
         fd:ab:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:41 2026 by rpki-client