Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          Yc0swlxS4bscGlTEqkCvIqU3+dOyZ3C9f0KBAZbkVMc=
Subject key identifier:   D9:D4:1D:9A:64:B2:1E:23:22:63:28:D8:FA:7D:8C:26:C8:A9:86:FA
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       019FA9070271F7391CD326B9DEE07B8A0C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          10B4
Signing time:             Tue 28 Jul 2026 14:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:36 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: tG1ZhF4RRnODYR+k6v6d5fMKkI1JVhGy0lR9NS/sg6I=)
                          2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:02:71:f7:39:1c:d3:26:b9:de:e0:7b:8a:0c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Jul 28 14:00:36 2026 GMT
            Not After : Jul 29 14:00:36 2026 GMT
        Subject: CN=d9d41d9a64b21e23226328d8fa7d8c26c8a986fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:4c:40:96:49:0a:72:81:9e:d9:07:9c:dd:
                    db:75:ec:10:24:cf:b1:a2:f4:42:03:d6:e1:22:62:
                    47:de:bb:b6:a6:d1:6a:60:48:91:85:9d:39:1f:20:
                    ed:f5:05:aa:33:98:2c:78:2a:02:e2:f5:a4:84:10:
                    a8:57:df:c9:dd:68:6d:2f:e5:2b:69:c2:c1:25:ea:
                    bc:72:d7:01:86:cd:ac:8f:0d:3d:b8:b8:ca:84:4c:
                    84:cc:27:41:20:f5:21:07:8b:b0:f4:e0:13:24:e9:
                    1c:ec:32:c8:72:f7:2e:74:39:2a:4b:bc:26:d1:a1:
                    5a:ef:fd:bc:d6:55:5c:79:54:d6:b9:00:7c:ec:bf:
                    30:1d:45:e4:8a:5b:a9:7c:3c:d5:4d:12:57:a8:30:
                    cc:f2:ab:e7:df:6b:76:a4:2f:fd:53:28:b5:68:f3:
                    cc:43:d0:cc:d6:23:e2:40:64:96:b2:2b:23:f4:cc:
                    07:9a:00:ae:fd:e6:cc:d0:5f:23:7e:a9:f2:c4:24:
                    2f:c2:65:e6:b2:05:67:a6:56:7f:80:60:e4:c0:c1:
                    69:5c:f3:64:9b:af:58:76:be:f6:ef:0d:2f:fb:28:
                    35:b3:f3:49:83:ab:d9:eb:5d:b5:40:2e:32:c7:64:
                    62:c0:fb:f2:49:43:2f:3d:57:01:d2:ff:d4:3c:85:
                    9e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D4:1D:9A:64:B2:1E:23:22:63:28:D8:FA:7D:8C:26:C8:A9:86:FA
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:10:13:d7:e0:5f:eb:56:7d:d9:11:54:88:ed:6d:5e:7f:a9:
         a9:81:17:1b:1c:10:d0:7d:b1:4b:2b:67:96:47:62:c2:02:34:
         a8:12:a3:fe:88:92:de:e2:18:01:a5:bf:c2:25:d6:3f:9f:a8:
         85:e2:4e:d1:30:28:6e:df:42:d9:8a:dc:1d:86:61:d4:b8:c5:
         d8:e7:32:c5:17:c7:28:0d:17:f0:f2:b6:2c:7c:e3:97:1e:f5:
         27:04:4c:94:a8:35:b9:74:5a:a3:28:a7:6f:4a:a9:3d:a5:be:
         6c:96:29:27:16:69:19:0b:7c:c2:36:db:f4:18:b9:df:c5:d5:
         13:d7:5f:ed:4d:4d:02:77:6f:98:74:a2:5c:21:05:75:2a:33:
         0e:b6:af:f4:73:54:e3:e1:62:85:3f:a7:6e:5e:05:5d:05:5f:
         b8:a8:44:c2:41:70:ec:56:d6:d6:bc:3e:ec:18:6d:b3:36:08:
         e1:e7:5b:7f:2c:b4:1b:ea:0e:0c:d8:2c:a5:f2:47:fd:f0:a9:
         0c:bb:ae:9f:c4:51:67:8a:27:79:02:f0:8d:f6:1e:8a:6d:aa:
         0a:cc:07:a2:2a:ac:f6:a1:bc:e1:93:45:80:09:f4:ce:0b:59:
         34:4e:1a:53:72:1d:ba:5f:50:37:ac:05:e4:2a:8d:1f:fd:ba:
         34:c7:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:01 2026 by rpki-client