Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File:                     bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier:          1o9DsfQhuy6N5ZXA/e+YepinyF0fIAvwRJP+UNdpA7M=
Subject key identifier:   C1:BD:87:F1:1E:63:56:BD:54:AB:69:11:7F:B1:FF:6C:93:19:9D:DE
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer:       /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial:       019FAA8851A1A6F61E766A23FE8B4D01FA0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number:          0E54
Signing time:             Tue 28 Jul 2026 21:01:28 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:28 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:28 +0000
Files and hashes:         1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
                          2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: O5XmH8ghqMnPX4p830kh5WxG5ga1rlqSmf6+JyL8ims=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:51:a1:a6:f6:1e:76:6a:23:fe:8b:4d:01:fa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
        Validity
            Not Before: Jul 28 21:01:28 2026 GMT
            Not After : Jul 29 21:01:28 2026 GMT
        Subject: CN=c1bd87f11e6356bd54ab69117fb1ff6c93199dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:f5:a6:cb:a3:fb:e7:b7:09:a2:07:29:a4:
                    78:6e:23:20:94:e7:6c:96:db:b6:e9:3a:79:09:4e:
                    93:1f:d6:1c:a7:66:32:e5:e6:56:2a:eb:ea:46:67:
                    75:c4:49:d8:d4:ba:a8:b0:e8:b1:ad:6b:bb:50:ad:
                    2a:0d:fc:8e:c3:91:12:fa:7a:b7:e5:18:68:4b:5a:
                    2c:97:ea:e1:f0:84:5c:5d:6b:50:75:11:a9:cc:eb:
                    8d:8a:f9:fe:ab:3e:02:b1:6e:19:2b:63:26:06:64:
                    16:e9:a3:2a:bc:65:d1:9f:55:7a:3a:af:20:d6:a8:
                    a1:f8:93:0e:27:66:5e:a4:20:ed:12:f9:a1:23:2b:
                    43:14:e6:d9:8e:a9:3b:a5:3b:fc:e1:12:f2:76:96:
                    06:e4:e8:54:ae:9e:e2:73:8e:e5:46:42:da:c7:7e:
                    10:c5:2d:fa:a6:35:22:1c:72:72:db:55:d7:92:f5:
                    f9:76:3a:ab:f7:58:f9:9d:fe:86:fd:08:2b:16:c6:
                    bd:a0:ef:e4:39:78:0b:c2:12:f4:47:77:08:22:1f:
                    7e:10:77:5e:bd:98:83:8e:ea:68:66:40:32:9d:19:
                    04:fc:66:69:b7:fd:a8:d2:ca:ab:e2:b7:88:22:55:
                    3c:dd:2b:ef:81:cd:e1:33:90:f9:b3:3c:49:58:53:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BD:87:F1:1E:63:56:BD:54:AB:69:11:7F:B1:FF:6C:93:19:9D:DE
            X509v3 Authority Key Identifier:
                keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:47:14:92:5c:5d:5a:fa:53:fa:f4:b5:1e:a7:de:4d:6c:
         1d:16:c9:2b:49:8c:de:ce:1c:c1:b7:73:a7:e3:32:40:8d:73:
         e9:82:c9:9f:ef:17:06:70:99:ee:ab:64:4a:ba:59:65:7c:8b:
         f5:9a:34:1b:7b:9a:2c:ba:0f:64:7d:12:67:21:27:cb:e4:15:
         9d:c2:e9:2f:3e:d3:31:d2:01:1d:96:7f:41:0c:b7:41:6f:47:
         00:81:45:4e:5c:eb:59:fd:36:5f:bb:e3:95:2e:64:97:c0:e8:
         07:17:55:ce:29:89:68:92:15:b2:7c:bd:84:86:c5:95:94:ad:
         17:88:0b:50:78:bc:c8:e6:3a:1b:68:bc:75:2e:51:c6:93:2c:
         ed:de:3a:d7:54:a5:76:e1:da:0c:31:3e:30:10:62:5c:35:4a:
         13:aa:7a:c6:66:29:af:d6:41:1b:e3:0d:da:b6:76:3d:29:6a:
         b8:47:8d:97:cd:99:29:75:ce:70:9f:7e:4d:a2:ae:cb:85:52:
         df:0b:79:3b:b7:f5:35:7c:08:bd:af:ea:85:ec:62:69:3e:bb:
         39:e2:39:d4:10:c3:c8:b3:a3:64:d4:a8:d2:7c:ac:2d:47:51:
         36:f4:d3:fe:21:75:02:7a:0b:04:ee:ea:0d:30:82:9d:4a:d4:
         40:b9:c5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:47:24 2026 by rpki-client