Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File:                     6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier:          NT0CaFQArYo8kv6n2qIWV0cV5Bqc+vmep0TU78qNGkA=
Subject key identifier:   DD:D0:C3:2E:F2:84:D1:38:F9:B9:42:E9:16:54:C3:68:6D:0B:BA:E8
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer:       /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial:       019F905A96905307806F05CAFC28E3B317EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number:          1958
Signing time:             Thu 23 Jul 2026 19:01:23 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:23 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:23 +0000
Files and hashes:         1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: MR60yEMtJm3IVS5TJE9Z/yyv3JEfgWd4SSq78AwdQwI=)
                          2: m2Z0wBEzN8fscwTDloF7hDYFp-U.roa (hash: RR+TM2qfe7c3hOxq3hLFeEmbYbML3r9sN4F/EITsexg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:96:90:53:07:80:6f:05:ca:fc:28:e3:b3:17:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
        Validity
            Not Before: Jul 23 19:01:23 2026 GMT
            Not After : Jul 24 19:01:23 2026 GMT
        Subject: CN=ddd0c32ef284d138f9b942e91654c3686d0bbae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:64:45:66:9f:40:0f:b1:7d:5f:f8:4f:78:
                    82:b4:79:c3:7d:38:67:bb:fe:10:f8:a6:7f:5d:af:
                    59:cc:a7:cf:5e:12:25:60:7f:e4:ee:c1:d2:53:67:
                    85:41:99:ae:38:54:7c:9c:e0:2c:6e:6c:0f:11:ca:
                    78:9a:d6:99:27:94:03:cc:8c:b7:7b:a1:64:f2:16:
                    ff:67:f3:bf:9c:58:47:28:1b:05:c2:9c:e9:a0:72:
                    d3:3e:72:b7:9f:6b:1e:47:c4:e0:4c:48:ac:6f:67:
                    a8:76:96:a4:aa:9b:65:01:ec:f3:a8:6c:e0:ac:f0:
                    75:b8:79:eb:a2:6d:26:66:01:96:f9:a0:90:63:60:
                    f0:07:1f:13:b2:2a:89:69:7d:eb:80:7f:2b:d3:bc:
                    0b:13:c3:ea:73:a1:2f:88:fd:76:1b:41:ff:f8:54:
                    30:55:75:ef:d8:f6:10:fd:cf:5a:68:81:cf:93:45:
                    e2:4f:45:21:ca:f3:8e:4e:2b:1a:aa:07:98:6b:4a:
                    d5:ff:14:c9:d7:5f:0c:45:70:f0:c8:9c:3a:70:fa:
                    11:57:16:7c:69:c7:17:15:d5:24:4f:f0:27:d0:52:
                    70:2b:d4:c1:05:e8:d1:10:03:27:6c:34:1d:e8:e4:
                    8a:e6:72:fb:7b:71:6f:c3:83:4c:06:48:7d:10:55:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D0:C3:2E:F2:84:D1:38:F9:B9:42:E9:16:54:C3:68:6D:0B:BA:E8
            X509v3 Authority Key Identifier:
                keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:24:fb:5f:19:4d:95:b0:15:e1:ab:6f:25:50:53:b0:50:ca:
         d7:7b:a2:32:27:12:40:33:56:7b:59:10:70:36:b4:18:be:90:
         57:29:70:e3:b6:38:a8:15:6c:11:f2:8f:d3:41:ad:51:94:58:
         4f:a4:a4:3f:c4:b3:80:48:b8:e3:1a:3e:99:1f:0f:60:9e:db:
         1d:30:a9:3e:47:25:4a:22:12:04:64:df:f4:b9:0b:0d:69:9c:
         c3:c8:f5:fc:5b:f9:59:11:02:36:65:cc:3b:26:9d:1a:bd:d5:
         43:1e:86:27:ee:e7:73:75:6b:3d:81:de:88:5a:d7:0b:88:f7:
         81:62:63:f4:32:19:d7:82:32:42:fd:b1:c2:2a:97:0f:67:9a:
         b1:29:ec:b0:a1:fc:07:12:24:ad:67:8e:44:4b:be:6e:77:ac:
         09:d3:bb:22:fe:0a:01:19:ec:57:8f:46:27:b7:52:ff:7e:eb:
         1f:9d:e0:aa:9e:68:d0:8f:c7:1d:cd:f0:6b:4a:1b:26:58:d2:
         54:9c:9d:37:a3:f5:5a:52:8e:ed:d7:67:61:3a:c2:56:b1:88:
         69:de:8c:69:ad:64:0e:4f:d7:6d:33:b3:4a:8f:d1:72:4d:26:
         a1:61:a1:d0:f5:c7:95:cc:86:7f:30:21:b4:b8:43:29:78:e6:
         87:79:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:34 2026 by rpki-client