Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File:                     B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier:          3zCvj0omI3ZcdWfJAa4OF49DcJ/rvPN4pSyxyPFY0I0=
Subject key identifier:   7F:73:A6:2A:56:0F:FD:CD:F7:AA:0C:7E:AE:7E:BB:57:54:85:56:C2
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer:       /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial:       019FA9E28AAA740C3CF9E82995C98185D8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 18:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:23 +0000
Files and hashes:         1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: m4ekiIC4+N25od3rDwX0pPONEkDidg2IJG6c24Wb0YY=)
                          2: dao3SWGJzmepZe0dSnkxYr7fl80.roa (hash: uVlf5UoF7g9PK+9JqyskFv6IV1mCuEzrCLxi9t1Xg1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:8a:aa:74:0c:3c:f9:e8:29:95:c9:81:85:d8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
        Validity
            Not Before: Jul 28 18:00:23 2026 GMT
            Not After : Jul 29 18:00:23 2026 GMT
        Subject: CN=7f73a62a560ffdcdf7aa0c7eae7ebb57548556c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:60:82:d6:7c:f7:45:e7:08:6b:f3:4d:ea:
                    8d:78:af:58:68:83:fa:4f:d9:ab:37:3a:1a:0b:18:
                    dc:67:03:0e:e7:3b:ab:f9:f2:fc:bc:72:69:eb:22:
                    56:c6:f9:ef:a2:a5:95:d6:66:ae:cc:90:e4:fc:20:
                    fe:e7:6a:fd:b5:a8:94:b4:e8:69:a9:d4:47:86:ee:
                    b3:48:e5:9f:86:d4:d2:6f:00:0b:47:9e:1b:7d:de:
                    e8:b7:64:5b:1f:4f:cb:61:77:a1:29:5d:21:7b:dc:
                    8f:bb:f7:21:70:84:f5:d8:4b:8d:2b:d7:46:85:5f:
                    14:9a:e3:79:24:fd:42:89:44:8a:dc:e6:1e:95:e5:
                    b5:a4:35:3d:67:92:b4:ff:23:8f:10:5b:5f:49:e9:
                    2a:7d:c3:23:99:2f:f6:81:ac:3a:9a:2e:93:9b:f9:
                    ab:c5:43:53:2a:98:f0:1e:18:6a:d9:9a:79:5d:2c:
                    b3:cb:9a:37:83:0a:14:1c:16:27:23:f6:c6:81:a9:
                    aa:cc:60:f1:3c:d6:5b:16:50:f5:0d:94:3d:8d:be:
                    fc:e1:f1:21:eb:44:2b:42:95:8f:99:94:21:0a:69:
                    45:6f:18:fa:a3:77:50:39:a7:5f:39:56:f4:97:58:
                    9c:2d:f5:51:02:c9:39:c4:c9:c7:da:62:8f:90:b8:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:73:A6:2A:56:0F:FD:CD:F7:AA:0C:7E:AE:7E:BB:57:54:85:56:C2
            X509v3 Authority Key Identifier:
                keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:95:af:5a:1d:5e:0e:7c:58:8f:f4:7c:3d:64:09:1f:19:
         86:77:02:25:01:a0:c7:76:91:31:8d:b4:a5:e2:04:cf:5d:15:
         e1:c3:be:15:8a:76:de:0f:86:5f:be:c9:58:05:7f:1e:a6:24:
         72:8c:61:63:71:e9:ed:8e:90:29:0b:5a:e8:7b:15:91:3f:26:
         2f:90:81:9e:fd:0c:7b:96:6c:fb:4c:e0:21:58:53:e3:ca:db:
         6a:a0:eb:b8:37:7e:98:4e:2c:9c:b1:9f:97:48:f5:86:12:05:
         34:d7:c7:e8:82:57:2f:b0:60:55:d1:01:f4:3a:a3:2f:4b:46:
         29:c1:88:d2:12:40:0c:46:5f:57:97:05:f1:fa:42:0d:ba:f4:
         1f:54:d0:e1:f4:1d:d6:c7:a7:3c:ff:4f:75:67:2c:fd:1b:a2:
         eb:41:66:cf:f0:b1:02:ff:32:b5:de:62:ee:87:22:e3:89:4d:
         eb:cf:c5:72:c7:f7:be:e2:b6:87:fd:44:5d:b6:3e:cf:e8:23:
         4d:0f:ef:26:98:a8:e3:c8:b7:6f:03:f2:a2:1c:55:d4:f2:b8:
         fe:2a:d0:c8:2f:91:2e:41:11:e5:b3:ec:95:c2:e7:44:e9:7e:
         7b:fc:7b:74:70:04:6b:b1:d6:98:7c:e8:a1:17:28:42:68:77:
         72:a7:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:42 2026 by rpki-client