Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
File:                     T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft (raw, json)
Hash identifier:          +OyVpdy5g6tyMdxfilcpIIKiAwhfo//E7on/lrcVgGQ=
Subject key identifier:   07:32:FD:E1:1B:F9:76:66:1B:A4:C8:A9:BB:5F:5E:A9:83:F4:47:6E
Authority key identifier: 4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
Certificate issuer:       /CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Certificate serial:       019FA7F4A7C19490408A3B8DEA5AF5501169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
Manifest number:          D6
Signing time:             Tue 28 Jul 2026 09:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:56 +0000
Files and hashes:         1: T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl (hash: llj0aC0uoAP7KEmveQCgyZm2BBZCWbZsgpLcIohH3qw=)
                          2: Yw4KeJZQd4fDI6XgNROc612klZ8.roa (hash: ksqJ6JeWEi7OT1uotIS0TGh2mFny8Jt60myfEmkHw/w=)
                          3: uU9s_hgnyGbwJP-PZge6doa0Dj0.roa (hash: IozYYJrZLQXcxcMBB1MOmIfAjaC0gRCqNhs5hWCQTC4=)
                          4: wZtpSjAJt4SmvvP0YnSsE7TQrWE.roa (hash: 5MBdGENxe3OadAvEH+VeBbaYBKVIJ8gWBwpRTn1w1GM=)
                          5: yclqX8OxwLUeoLNmUdSazDYDII4.roa (hash: Rr2Lk5K8PcJhPAAwTj/NBcChacy1opQ3AXffZPPG+hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:a7:c1:94:90:40:8a:3b:8d:ea:5a:f5:50:11:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
        Validity
            Not Before: Jul 28 09:00:56 2026 GMT
            Not After : Jul 29 09:00:56 2026 GMT
        Subject: CN=0732fde11bf976661ba4c8a9bb5f5ea983f4476e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:b8:52:bb:22:42:20:19:df:94:9f:b9:57:
                    8d:65:04:14:c6:c5:ff:1f:c4:0d:7d:ac:e4:6d:52:
                    80:4e:2e:76:c1:92:ad:92:a0:c6:62:61:f6:6f:88:
                    a3:57:20:2c:a5:52:a4:f8:1d:19:ef:ce:8d:6d:55:
                    1a:e3:af:47:1a:56:ad:0f:e9:7b:b6:e1:34:b4:21:
                    dc:85:b6:f9:d7:1d:67:7e:a3:fc:a0:7e:41:9b:33:
                    a1:ea:e5:19:61:1f:12:a4:10:ee:89:96:a2:ea:ea:
                    5e:7c:7e:62:a5:4a:cf:ac:2d:e2:0c:4c:4f:89:0a:
                    e9:28:42:b0:3e:4c:6d:d7:ca:23:1f:34:b9:eb:61:
                    df:17:89:87:ec:95:31:b2:8e:d4:d0:2c:f3:7e:22:
                    4f:55:bd:3e:2b:2d:25:94:41:0c:26:5f:93:d0:00:
                    69:dc:f8:ae:6b:8d:8e:0d:ce:49:a4:9a:97:4d:41:
                    ab:b9:b3:e9:10:66:67:33:4b:46:25:65:31:c1:af:
                    a1:ac:0d:d0:1d:dd:8f:33:99:09:4b:e3:85:27:5f:
                    8f:93:2c:03:6f:83:ef:f5:b4:e3:f7:50:cd:6b:01:
                    5f:06:98:31:32:31:3e:99:23:5c:67:b7:1c:cf:e0:
                    cd:ac:41:f2:61:8f:5e:94:dc:f7:54:74:a4:6d:98:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:32:FD:E1:1B:F9:76:66:1B:A4:C8:A9:BB:5F:5E:A9:83:F4:47:6E
            X509v3 Authority Key Identifier:
                keyid:4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:da:81:f3:e1:fe:38:dc:7a:0c:03:ec:a1:e9:8e:b1:0d:
         e9:a6:70:cd:a1:15:fd:97:8a:fc:c4:27:65:04:d9:46:d8:cc:
         01:9e:df:22:86:83:32:e8:b2:e6:e3:fc:29:58:52:df:2d:21:
         7a:bc:8f:d3:17:7e:4f:b9:2d:fc:ee:a8:a3:b6:bd:b2:e9:c2:
         ec:d3:fa:a0:41:ef:a7:6e:ad:0a:a8:58:4a:e3:4a:31:72:8f:
         cd:61:a0:44:34:fd:e2:d8:6d:e5:5a:5d:60:26:28:83:9a:7b:
         72:74:a2:b6:6a:32:d4:36:c8:c2:81:df:83:03:51:b5:d0:de:
         0b:db:08:2a:73:b7:5e:a9:8a:b3:69:7f:68:23:9c:c1:b4:61:
         42:dc:ad:50:fd:31:d8:f7:dc:e4:c0:da:92:de:6e:43:b8:92:
         c1:0a:b5:d4:4e:d3:e3:8f:6b:8f:2b:8b:fb:03:a1:8f:de:c5:
         f1:b8:c5:7c:25:23:33:e7:e0:49:0e:94:95:48:7b:fe:47:92:
         d9:55:7f:85:a5:ca:0c:b0:fe:a5:e3:c3:f6:44:e8:cf:ca:75:
         07:b5:9e:db:ee:d0:4e:69:75:19:0f:e6:8f:57:4c:03:80:be:
         76:c9:00:ba:f7:f1:45:57:7a:e4:62:f2:23:5d:ec:e5:e1:1e:
         fc:99:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:58 2026 by rpki-client