Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
File:                     6GvqALV9C5qMrxn23-TdMKT-bEc.mft (raw, json)
Hash identifier:          FA4ebRXacpjXeepnDwHStopY1AL+F+cWIP/NGedE1Lc=
Subject key identifier:   31:81:39:72:A2:1F:B4:E6:59:D8:8C:A0:31:47:06:74:8D:91:5F:B0
Authority key identifier: E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47
Certificate issuer:       /CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
Certificate serial:       019FAA19A601E5CA4D43DF87E3A5BB2CA87D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
Manifest number:          11FA
Signing time:             Tue 28 Jul 2026 19:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:35 +0000
Files and hashes:         1: 6GvqALV9C5qMrxn23-TdMKT-bEc.crl (hash: oW0eHV4lxZeX1X5pI8UJQkDm+JLY8iZ3JioDesPuMjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:a6:01:e5:ca:4d:43:df:87:e3:a5:bb:2c:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86bea00b57d0b9a8caf19f6dfe4dd30a4fe6c47
        Validity
            Not Before: Jul 28 19:00:35 2026 GMT
            Not After : Jul 29 19:00:35 2026 GMT
        Subject: CN=31813972a21fb4e659d88ca0314706748d915fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:fa:df:00:f5:55:ce:9f:fc:cd:3f:11:ff:
                    2d:7b:fd:84:0d:da:20:a8:7c:28:37:cd:77:05:e4:
                    99:95:e5:98:fc:f7:fe:53:e6:98:ca:b7:18:88:19:
                    25:40:dc:c3:ec:5d:ea:14:f9:b0:06:37:8b:ed:c0:
                    41:99:f9:ae:10:56:90:c0:11:1f:a1:01:09:0d:71:
                    8a:c2:74:83:ce:e5:98:97:9f:f4:72:55:ce:51:e1:
                    e5:13:71:84:fc:9c:00:44:22:db:d7:37:c5:a5:8d:
                    b7:ef:66:c2:79:f8:60:e0:01:44:d1:20:b4:95:a8:
                    87:88:c4:ab:53:79:1a:2b:d3:bc:04:bd:d6:5f:d7:
                    8f:de:23:c6:bb:33:62:3c:ee:bd:44:91:7d:34:ec:
                    f6:67:46:d4:fa:d8:e0:a4:30:1b:98:3e:a8:07:82:
                    cd:90:d6:18:00:9b:3c:16:16:1e:87:9e:0d:c4:a5:
                    ff:da:39:f4:d3:ca:66:e2:c1:62:3f:4d:6a:05:9a:
                    41:0c:05:f3:33:30:8d:64:4e:cf:98:b5:79:b4:48:
                    e1:7d:77:c3:0e:56:57:a6:74:a9:61:b9:27:8b:7d:
                    28:07:e4:46:2b:2e:68:05:76:4c:a7:fd:9e:07:ae:
                    5a:09:17:0c:16:fa:51:20:f3:6e:1a:e8:01:c3:0c:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:39:72:A2:1F:B4:E6:59:D8:8C:A0:31:47:06:74:8D:91:5F:B0
            X509v3 Authority Key Identifier:
                keyid:E8:6B:EA:00:B5:7D:0B:9A:8C:AF:19:F6:DF:E4:DD:30:A4:FE:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GvqALV9C5qMrxn23-TdMKT-bEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0f7a98-694a-45ce-9adb-c7f5665cb918/1/6GvqALV9C5qMrxn23-TdMKT-bEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:23:c9:7c:f8:82:fb:50:77:2a:3b:60:17:df:f9:b5:01:
         72:18:52:0f:aa:d4:9c:a4:9d:70:6c:50:dc:26:ef:76:ac:88:
         7d:d0:96:9d:d5:2b:8b:e0:9f:5b:4f:8e:14:a5:8c:5d:48:d2:
         57:a9:97:62:a8:f1:88:b7:15:61:00:f1:36:6e:2d:0c:71:57:
         23:00:88:b7:25:cc:2e:b5:0f:13:2d:ae:8b:71:95:1e:96:44:
         45:09:5b:b8:93:ce:1e:3b:43:20:55:4a:e0:7d:13:37:15:57:
         b1:ac:72:9c:24:f3:00:df:67:f7:4f:95:89:df:20:b0:30:9a:
         2d:07:86:fb:70:3a:13:8f:b7:8a:bd:9e:47:ae:79:7a:f9:d4:
         b0:06:5a:56:47:c0:cd:b5:a5:13:a1:35:12:8f:1f:c5:f9:a4:
         2c:e5:27:45:eb:74:bb:28:e5:f3:c1:4b:84:43:15:7a:f1:7b:
         19:fc:8f:16:f2:c0:81:4f:27:dc:9f:a5:e2:54:a5:a8:2a:35:
         53:5d:f6:6b:41:19:22:22:45:44:51:9e:a6:17:33:0f:4e:b1:
         5f:57:50:8a:3c:9e:65:89:13:81:96:18:27:5b:57:c1:1f:86:
         fa:51:6e:7b:f7:80:57:a1:f6:fd:ee:cb:9f:0a:f4:a2:5c:00:
         91:e8:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:28 2026 by rpki-client