Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
File:                     b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft (raw, json)
Hash identifier:          ybeZJfZlRRVU0AX1RSd6UwGwutONu/1wyfs9ReEeJxk=
Subject key identifier:   DA:6D:EA:0F:63:77:5E:97:F1:47:B2:B6:7F:F0:F5:38:2D:83:62:7A
Authority key identifier: 6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32
Certificate issuer:       /CN=6f440c018544050e5ced0252080f7e8348b00a32
Certificate serial:       019FAB9A1B650BD7349346C20096755D7ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
Manifest number:          2C
Signing time:             Wed 29 Jul 2026 02:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:31 +0000
Files and hashes:         1: OKB0ZYiH8sOfjxMzFBevSOeR-Ak.roa (hash: krXlvjFt9NCXRRmt007odYfXYU/aWUJjsKmTewBAXzA=)
                          2: b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl (hash: wS+Aoys3+TD4QAgnpcG0ZDxXhWGdOCcLfDpy73EaEkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:1b:65:0b:d7:34:93:46:c2:00:96:75:5d:7e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f440c018544050e5ced0252080f7e8348b00a32
        Validity
            Not Before: Jul 29 02:00:31 2026 GMT
            Not After : Jul 30 02:00:31 2026 GMT
        Subject: CN=da6dea0f63775e97f147b2b67ff0f5382d83627a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:50:80:c2:6c:cc:a8:f6:89:b7:7a:fa:f0:
                    16:81:c8:be:3f:6d:10:30:68:6d:3a:8d:29:b8:f1:
                    10:a1:0c:46:18:56:31:73:ba:ea:32:58:3f:06:ac:
                    a5:34:7f:66:37:f1:23:91:d0:ab:0c:63:af:0c:3b:
                    00:e3:26:62:a8:21:fb:19:2d:13:4c:6e:13:46:b7:
                    03:70:11:21:2e:0b:9d:8a:64:de:6d:0b:88:21:7c:
                    03:38:d3:41:c8:99:6e:3c:9a:e3:38:c0:de:1e:89:
                    20:21:21:53:e6:5b:f1:be:b3:f5:ea:38:35:82:a8:
                    8d:ab:04:41:3d:c5:d2:ed:2c:7e:cd:00:87:35:90:
                    04:40:35:a6:0e:0f:62:04:ba:04:c2:d5:a9:45:cd:
                    cc:97:54:2a:7b:0e:fe:35:e9:df:52:30:ad:09:a8:
                    95:a5:c0:65:3d:ac:0a:6e:ec:9c:97:d4:36:42:91:
                    1a:7a:99:79:cd:2f:4d:4d:d1:7e:f1:70:fa:c4:d2:
                    41:19:06:19:39:18:b2:70:fe:bf:ad:32:59:43:d1:
                    d3:e3:dc:13:85:04:0e:93:ae:43:65:66:d1:55:9e:
                    74:c3:62:ba:56:69:0f:9d:9f:44:80:18:5b:04:89:
                    92:9d:06:fe:48:81:ba:b2:c5:55:7d:08:56:d8:c7:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6D:EA:0F:63:77:5E:97:F1:47:B2:B6:7F:F0:F5:38:2D:83:62:7A
            X509v3 Authority Key Identifier:
                keyid:6F:44:0C:01:85:44:05:0E:5C:ED:02:52:08:0F:7E:83:48:B0:0A:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3633c-b196-4f46-9203-9b1f59dfc234/1/b0QMAYVEBQ5c7QJSCA9-g0iwCjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:60:96:c2:ce:78:7e:6d:06:6d:64:af:22:d5:b0:5b:fe:b4:
         fe:0c:86:db:f0:b4:e2:14:dc:08:7f:6c:85:9a:d7:e1:7b:f3:
         8a:00:ed:37:7b:f8:ac:aa:b9:88:d8:88:c5:40:e2:fc:c5:69:
         25:c6:7b:0d:ae:7f:c5:be:e8:b6:11:2e:24:2f:41:ed:76:f8:
         40:5a:86:1f:9a:18:0c:11:80:45:f6:94:0e:3e:18:b7:37:99:
         73:a6:31:10:c9:ed:c5:36:30:62:a2:a6:0c:7d:11:43:50:d5:
         97:ec:f5:eb:f7:f1:95:6c:3d:c0:cf:6d:a1:ca:a1:49:96:d8:
         f6:f2:e3:d4:c2:55:ce:ff:4f:09:76:99:aa:aa:12:3d:71:7b:
         a2:1d:80:2e:c9:81:74:ee:c7:e6:d7:cc:6d:50:ef:ed:d0:fc:
         4f:22:b1:ef:24:68:18:d8:3f:f0:80:97:01:11:c1:dc:ca:bc:
         d5:cb:db:96:78:09:1c:75:ca:13:a9:ba:35:a7:e1:07:a1:8a:
         1d:85:ad:08:81:af:9b:08:b6:ce:d7:fd:33:1d:56:a6:20:d2:
         d8:6f:8a:69:5d:16:8d:46:2e:9f:c1:11:f0:fb:21:55:43:71:
         d5:d1:5e:fc:1b:57:1b:50:20:ac:3f:20:a1:f2:f6:be:f2:bd:
         7c:e2:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:50:05 2026 by rpki-client