Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          92vxHLXA+jtrgrEdWvxJlwooqD/cfq8RTJ3a+0yWCpM=
Subject key identifier:   ED:4F:62:F0:B0:19:E4:71:00:1C:74:25:F3:B6:E6:21:8C:0E:A6:AE
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       019FABD195C33AEDEEB8A1FA11C73498C164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          04E7
Signing time:             Wed 29 Jul 2026 03:01:07 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:07 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:07 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: vcfh0Xj6JFRbGm21Xf36epW7nfYw8LY8JEKQVrof1yw=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:95:c3:3a:ed:ee:b8:a1:fa:11:c7:34:98:c1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Jul 29 03:01:07 2026 GMT
            Not After : Jul 30 03:01:07 2026 GMT
        Subject: CN=ed4f62f0b019e471001c7425f3b6e6218c0ea6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:11:b1:f6:13:29:cc:45:40:0b:33:23:ed:
                    c8:3f:a3:54:ee:85:74:f0:80:43:5b:b9:af:63:63:
                    ee:a8:39:36:d4:8b:3f:ff:16:2b:10:7b:e7:12:56:
                    95:11:46:6f:83:79:87:2c:6c:32:46:b4:30:e1:70:
                    24:3d:c9:56:8c:2e:8b:17:86:ac:8f:48:a5:ac:73:
                    c8:67:4c:bd:4b:56:fa:4b:af:eb:34:58:80:19:e0:
                    8b:33:25:fe:06:cb:d8:15:93:e6:e6:eb:d6:eb:1f:
                    40:47:c2:03:68:9b:23:75:4c:98:e8:37:9a:57:62:
                    58:07:f2:b9:f7:8c:d8:d1:71:ec:38:b8:5b:7c:16:
                    24:dc:d8:ff:90:60:51:3a:a9:cc:90:9e:06:95:79:
                    6a:89:49:a8:9e:d5:27:59:44:01:10:c5:29:1a:96:
                    a8:2c:2f:31:a3:68:2a:b4:8a:cf:0a:9e:57:d9:c9:
                    da:72:8a:65:d7:78:91:6a:86:2f:42:22:d8:3c:22:
                    a5:f9:f7:c7:ea:6c:e3:8f:77:aa:bf:1c:a7:0b:0e:
                    78:6f:d3:82:d4:18:bb:89:4b:05:4b:b4:08:13:03:
                    3a:2c:d0:66:4f:56:04:4d:87:01:b6:62:aa:a9:12:
                    12:20:81:63:f9:c4:1b:b3:2b:5d:9e:6a:a5:c0:92:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:62:F0:B0:19:E4:71:00:1C:74:25:F3:B6:E6:21:8C:0E:A6:AE
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:86:0d:d2:53:09:84:c3:42:86:34:bf:34:99:9b:1f:33:cb:
         6a:62:f2:98:d5:82:d0:1c:96:44:55:7d:60:48:3b:22:5e:46:
         74:f6:f9:dc:1c:73:1f:81:77:bb:8c:fa:26:77:73:43:8d:fc:
         d1:98:83:a5:b5:ab:d6:e4:4d:d3:db:2b:e5:6c:05:71:5d:e4:
         fd:59:00:e8:d2:49:8f:33:e6:a0:d5:cd:d7:b1:23:d2:2b:e6:
         41:01:32:89:d9:3a:da:04:60:33:08:2f:1b:6f:78:0c:16:a1:
         a9:6f:ca:56:38:ce:69:2c:72:d2:54:44:bf:2c:c8:ff:9b:91:
         3b:c0:34:07:c3:89:9b:58:69:3d:77:60:3a:25:ad:f6:4f:db:
         49:be:96:12:0d:91:c9:35:35:24:07:c2:bc:60:83:f3:b6:c9:
         cc:37:63:71:da:d4:1a:b6:2a:0d:53:78:5c:70:28:e9:65:17:
         03:30:77:1c:fb:c7:86:ca:0a:61:91:b3:5f:76:fa:2f:d9:58:
         3c:76:24:ff:e9:71:79:28:a0:f6:47:14:58:ad:81:7d:64:2a:
         a3:63:8a:91:95:44:e0:fa:68:50:79:d9:7a:d1:b6:84:62:83:
         34:6a:ce:4e:43:f1:33:1f:b7:38:47:c5:78:a7:82:a1:a5:69:
         4e:c0:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:36 2026 by rpki-client