Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File:                     6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier:          yzHRJluNrHyFcp6rZBJKsJSKyD8MwS2FSRWUM3hpvB8=
Subject key identifier:   48:54:2B:AE:30:A0:84:81:66:CB:11:E9:2D:2E:90:3E:9E:11:5B:DD
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer:       /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial:       019FA93E5BE3BC59EC5EF09259F157B0EA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number:          0E8B
Signing time:             Tue 28 Jul 2026 15:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:03 +0000
Files and hashes:         1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: lizPtG8+wYOKHveM1xh/ktqLKI26IG16Z19Uje92juM=)
                          2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:5b:e3:bc:59:ec:5e:f0:92:59:f1:57:b0:ea:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
        Validity
            Not Before: Jul 28 15:01:03 2026 GMT
            Not After : Jul 29 15:01:03 2026 GMT
        Subject: CN=48542bae30a0848166cb11e92d2e903e9e115bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:3b:81:38:f7:71:55:41:91:05:b6:3e:9a:
                    9c:fe:7a:23:2b:45:fe:e3:29:f1:4f:fe:4a:ec:08:
                    b5:c1:bb:ba:21:22:18:d9:59:7b:3b:39:16:12:96:
                    0c:dd:02:88:f1:26:39:db:2d:84:89:0f:d2:53:93:
                    28:28:45:1f:ac:3c:99:42:5c:ab:92:5e:61:bc:b5:
                    20:8a:d9:09:a6:1a:ec:48:c5:ca:ca:b3:fe:0b:41:
                    31:e8:e4:89:17:f2:4f:c6:48:7d:85:f1:b6:4f:c7:
                    b1:04:6b:ce:13:7c:28:be:50:eb:a4:6e:aa:fe:4c:
                    7e:b9:44:3d:de:40:ed:7c:49:1e:e1:b4:ac:cc:b2:
                    42:0d:6e:d8:c7:24:d5:c9:a7:c8:99:39:6e:ed:ec:
                    77:92:d9:07:76:e7:58:b3:94:ef:2a:91:7c:07:d4:
                    d0:3a:f9:7e:bb:78:68:49:b6:b3:55:99:de:d8:95:
                    0b:9b:9d:a6:44:cd:c2:9f:41:84:58:b8:5e:08:38:
                    f6:92:07:fd:86:ae:be:d6:93:ac:92:47:dc:90:00:
                    42:cf:e5:69:2f:e5:45:e6:b4:b1:4c:c6:42:54:65:
                    40:46:d7:77:a1:38:0d:80:b4:9e:36:24:20:fe:67:
                    6b:b2:0e:94:f4:e3:7a:e2:48:61:fc:71:9a:e9:f1:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:54:2B:AE:30:A0:84:81:66:CB:11:E9:2D:2E:90:3E:9E:11:5B:DD
            X509v3 Authority Key Identifier:
                keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:92:e8:50:e8:6d:fb:4c:7f:bc:65:95:82:aa:69:90:71:ca:
         46:0a:9c:7f:42:29:8f:75:8a:f8:6f:84:25:12:55:5d:b0:29:
         c3:df:d4:78:4a:4e:b8:31:25:f6:a1:96:cc:24:f0:e0:c3:79:
         87:b4:22:5b:c7:e9:b1:0c:86:3d:3d:bf:c8:d3:f9:92:67:5a:
         52:84:08:f0:e2:f8:92:0f:70:d6:0f:a1:aa:3e:cd:ca:e3:37:
         d3:80:8a:84:8a:40:60:a7:92:f1:1e:56:fc:28:ed:39:ba:77:
         b1:fa:e3:89:64:d1:60:7e:46:3d:11:36:8b:85:66:6e:9f:a5:
         3b:3d:98:ef:cc:bc:3a:24:18:ae:db:c2:fc:60:44:bd:4f:92:
         47:49:c8:7f:25:b4:ea:b6:37:8f:db:98:37:82:60:ce:95:8d:
         15:1d:d0:8c:13:c3:99:ca:d5:b3:71:b3:62:5d:9f:9f:df:9d:
         7b:7f:45:9a:8e:a6:48:07:5e:7b:45:34:14:d2:ad:cf:ec:00:
         95:35:69:ab:f3:46:89:b9:6d:c6:94:64:9e:90:9d:53:ac:97:
         9e:f3:a2:f8:a8:0b:6e:d7:c3:bf:c2:28:55:de:bc:81:4b:ef:
         09:af:b3:a9:86:da:fb:9a:ac:00:ad:74:84:97:f6:2b:16:4e:
         c6:b8:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:20 2026 by rpki-client