Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          HN4c+KBOjaE+CtavuWNHSD4e1czNOUOJpbdK/e2ePFo=
Subject key identifier:   A3:F7:43:58:4F:F0:92:A3:18:D0:D7:17:CD:4C:77:DA:BD:58:4A:47
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       019FA82B9419F0BE8A0147188BE1904C1ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0DBB
Signing time:             Tue 28 Jul 2026 10:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:55 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: VR1apPwrGwDBQK9YPRA2lLKbVwciJHr+vv76mk1avlc=)
                          2: QS3mViuWefpzRVuut9BCujNEHBk.roa (hash: pncFDsfj5PoDws+gFKzvHR1BHzgW/TNAwcyb1+Rx/Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:94:19:f0:be:8a:01:47:18:8b:e1:90:4c:1a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Jul 28 10:00:55 2026 GMT
            Not After : Jul 29 10:00:55 2026 GMT
        Subject: CN=a3f743584ff092a318d0d717cd4c77dabd584a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:f7:5d:99:2d:0b:2f:20:de:bf:f2:21:6a:
                    0a:28:c6:f1:62:74:2a:bf:32:46:1b:7d:8d:bb:d5:
                    28:66:77:64:5b:c0:0d:e8:41:f9:50:b2:e3:2a:e1:
                    ac:01:0f:f5:0d:eb:c2:a3:7b:aa:ae:36:18:6d:7d:
                    13:e5:3c:c1:51:4f:76:e4:5a:b2:ef:58:3b:0f:f0:
                    4b:e5:1c:05:ad:d5:23:23:05:bd:58:fa:75:b9:a8:
                    cc:23:1d:3a:05:36:60:c7:bf:d4:50:0e:55:f3:27:
                    83:af:98:2c:fd:f4:4f:6d:58:39:6a:ec:24:78:a4:
                    3c:5b:cc:6b:e1:91:b7:58:2f:b7:52:f6:9c:bf:db:
                    c1:ca:5e:4e:cc:33:cd:ca:54:91:bf:95:af:ca:80:
                    29:d8:75:da:a1:e8:a8:63:5d:41:ee:9e:ea:0b:df:
                    51:0a:e7:69:d5:fb:90:53:70:e2:64:85:be:14:88:
                    51:01:0f:37:5e:c4:40:0e:9a:22:ed:07:72:ae:ce:
                    76:04:47:f9:1b:56:ac:8a:b5:45:7c:4e:0d:71:10:
                    95:2d:8c:61:53:4d:fb:d9:06:1b:a0:d5:56:43:f0:
                    74:45:79:68:c8:f5:0c:a4:50:ed:43:a6:92:80:81:
                    43:99:dc:03:95:cf:8b:43:d7:1d:f6:78:4b:98:db:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F7:43:58:4F:F0:92:A3:18:D0:D7:17:CD:4C:77:DA:BD:58:4A:47
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:56:19:19:79:cf:89:bd:d7:6d:39:68:72:b5:d9:38:1c:03:
         c9:2b:89:eb:55:67:43:c3:ee:72:f2:c1:69:a8:cb:9a:bf:0f:
         db:45:e6:99:34:bc:b5:14:24:e1:c1:a6:21:7d:8f:81:d1:7f:
         94:de:18:f5:96:9d:9b:1e:b5:a8:44:ac:a2:3c:7c:00:1c:27:
         b4:91:9a:49:80:8a:d3:00:8b:d7:d7:21:10:99:44:8a:0c:af:
         12:d8:c5:1d:94:95:15:45:85:f1:eb:d7:cf:8a:63:3b:92:6e:
         21:11:7f:aa:17:0e:be:d6:9a:66:39:f8:15:c5:54:f6:30:bd:
         03:9d:2b:e5:90:a1:d4:66:e3:81:e5:e1:c3:31:8c:2f:4e:53:
         2f:76:01:99:b5:a8:4e:d4:ac:4f:a5:d6:f5:ce:cd:52:85:3f:
         10:76:a6:7b:a6:7f:c1:19:f1:e0:fa:eb:5b:d2:a6:46:e4:25:
         3e:01:e2:11:ac:a4:e3:59:bb:66:50:de:13:e6:1c:89:6d:e4:
         32:cd:30:5e:82:01:9f:4a:93:8f:80:02:1b:87:76:92:d2:69:
         bc:2c:49:63:b4:50:a1:89:43:7d:ce:2b:3f:6b:91:04:8d:5c:
         7e:d5:63:b7:4f:aa:48:22:f0:83:de:25:39:f4:00:73:a7:91:
         c9:9d:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:42 2026 by rpki-client