Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          Aa0TFkp41q9+AL4Q72u5lfeMWX95ANZSSiOlreesXa8=
Subject key identifier:   E1:AE:BD:A4:B3:E3:D8:06:2D:01:87:41:25:7B:A3:3F:5E:A7:DD:C0
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       019F905A8F39D0AB6DE12F7064952861824C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 19:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:21 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: d+GE69WBPBiRcGO8qrjHgkAhjhIxCfHJRRQ2aNi9beY=)
                          2: NmgUP7e3LyCZ01solEPz1wLS4js.roa (hash: sfFMunag9+kvFAdBNDhMKRmeQWkcnrliO5pG/CNIgmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:8f:39:d0:ab:6d:e1:2f:70:64:95:28:61:82:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Jul 23 19:01:21 2026 GMT
            Not After : Jul 24 19:01:21 2026 GMT
        Subject: CN=e1aebda4b3e3d8062d018741257ba33f5ea7ddc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:57:38:2d:da:7e:65:0c:2b:a3:8e:69:64:
                    ba:89:13:f3:f9:be:a5:96:35:0a:75:27:25:cf:68:
                    02:b4:a2:09:40:39:7e:4e:56:96:07:59:94:3d:b4:
                    c3:1c:c1:fc:90:11:7d:07:7e:15:e9:5e:61:52:32:
                    b3:a8:38:fd:2c:6b:ad:0b:34:7b:ae:fb:66:f0:89:
                    f4:1e:75:bc:d2:72:a7:55:58:4a:5a:0c:a1:9d:84:
                    17:2b:e7:fb:64:58:29:76:54:d1:8c:52:ab:f0:9c:
                    84:75:b9:94:2a:46:b6:95:e7:ca:91:a0:e9:97:40:
                    00:a9:17:8f:c6:84:32:ff:5f:49:cc:76:36:ad:68:
                    b3:f6:4d:93:2b:f9:6c:f7:01:9a:a1:e2:4c:36:2f:
                    74:be:30:ea:96:0c:1d:a1:e9:4d:12:2d:32:1c:3b:
                    58:f0:75:d3:39:36:b0:1f:45:70:28:aa:ef:66:9f:
                    94:76:dc:bc:d4:16:22:62:6f:17:e6:cb:f1:e9:76:
                    24:68:e2:08:2d:c7:59:0a:fa:87:99:b1:2c:bc:3a:
                    2f:16:b1:ad:7c:68:f5:db:85:7d:36:49:e0:b4:a3:
                    55:ce:fe:d0:92:93:36:94:3d:d9:8c:8c:68:b9:14:
                    8a:4d:a5:4a:b9:8e:e6:9d:40:c4:47:f8:4b:08:22:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AE:BD:A4:B3:E3:D8:06:2D:01:87:41:25:7B:A3:3F:5E:A7:DD:C0
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b0:b0:ae:3f:da:76:be:7d:3e:6c:3b:95:5d:0c:e7:0b:66:
         3b:87:c8:a8:5b:c8:ef:a8:ee:ab:42:98:eb:ea:c2:10:06:3e:
         94:c2:f8:f3:d2:40:33:97:ec:31:b0:aa:2d:2b:85:96:5d:8d:
         81:e2:37:e1:43:a7:c1:47:54:87:72:14:b4:ea:a1:7e:1a:43:
         b7:36:8d:d4:78:d2:0d:bf:cb:27:cc:04:c1:b8:1a:86:f9:41:
         0f:3e:8b:58:d7:0e:43:ef:92:94:9f:33:8f:d9:97:62:40:c8:
         52:58:dc:99:99:a5:8e:e3:4a:77:02:93:de:19:f4:7c:71:95:
         10:f0:47:63:5e:fb:7e:1f:08:da:76:09:d8:dc:3f:42:0d:ac:
         b4:2c:6e:34:46:1c:de:09:05:42:03:97:95:2c:af:d3:a1:03:
         67:fc:fd:ec:91:b5:59:e3:6c:b9:8d:06:04:c3:7d:31:ec:5b:
         4e:c0:c4:6f:c1:e5:8a:41:ca:6d:c7:ba:01:6b:be:76:b3:18:
         8a:5b:73:72:a6:b9:81:b0:ed:26:50:de:6a:4e:5f:1e:29:08:
         61:24:3a:35:3b:82:c0:b3:be:72:88:4c:8f:9f:08:5d:c2:b5:
         40:f9:5f:22:05:09:3b:d1:c3:57:ca:57:e3:11:af:1b:8c:e3:
         b6:c9:b7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWo850Ktt4S9wZJUoYYJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWRjMDBmZDJjMWUzZWFhZmNlY2NjMWI0YmExZjhmZDBh
NGE5OGMwHhcNMjYwNzIzMTkwMTIxWhcNMjYwNzI0MTkwMTIxWjAzMTEwLwYDVQQD
EyhlMWFlYmRhNGIzZTNkODA2MmQwMTg3NDEyNTdiYTMzZjVlYTdkZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTtXOC3afmUMK6OOaWS6iRPz+b6l
ljUKdSclz2gCtKIJQDl+TlaWB1mUPbTDHMH8kBF9B34V6V5hUjKzqDj9LGutCzR7
rvtm8In0HnW80nKnVVhKWgyhnYQXK+f7ZFgpdlTRjFKr8JyEdbmUKka2lefKkaDp
l0AAqRePxoQy/19JzHY2rWiz9k2TK/ls9wGaoeJMNi90vjDqlgwdoelNEi0yHDtY
8HXTOTawH0VwKKrvZp+Udty81BYiYm8X5svx6XYkaOIILcdZCvqHmbEsvDovFrGt
fGj124V9NkngtKNVzv7QkpM2lD3ZjIxouRSKTaVKuY7mnUDER/hLCCKvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGuvaSz49gGLQGHQSV7oz9ep93AMB8GA1UdIwQY
MBaAFOsdwA/SwePqr87MwbS6H4/QpKmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgt
OTBlMjFkZjAxZTkxLzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81YWI1ODUtYjI5Yi00ZTcxLTgwMzgtOTBlMjFkZjAxZTkx
LzEvNngzQUQ5TEI0LXF2enN6QnRMb2ZqOUNrcVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrCwrj/a
dr59Pmw7lV0M5wtmO4fIqFvI76juq0KY6+rCEAY+lML489JAM5fsMbCqLSuFll2N
geI34UOnwUdUh3IUtOqhfhpDtzaN1HjSDb/LJ8wEwbgahvlBDz6LWNcOQ++SlJ8z
j9mXYkDIUljcmZmljuNKdwKT3hn0fHGVEPBHY177fh8I2nYJ2Nw/Qg2stCxuNEYc
3gkFQgOXlSyv06EDZ/z97JG1WeNsuY0GBMN9MexbTsDEb8HlikHKbce6AWu+drMY
iltzcqa5gbDtJlDeak5fHikIYSQ6NTuCwLO+cohMj58IXcK1QPlfIgUJO9HDV8pX
4xGvG4zjtsm3MQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:20 2026 by rpki-client