Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
File:                     mT6BRnbzLyZHccetdnpN-H08Y-I.mft (raw, json)
Hash identifier:          cFxpYZ+DXoT5DxM1+CYgJUgj8HIt4YQkeHc3SbAA6hQ=
Subject key identifier:   BA:7C:EF:06:05:0E:7E:D4:8A:07:94:FD:67:A5:7A:57:64:D5:6C:E2
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Certificate issuer:       /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial:       019FAA88011892B5F77BB302BAA28462B633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
Manifest number:          0266
Signing time:             Tue 28 Jul 2026 21:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:07 +0000
Files and hashes:         1: O9rqaflBtIrZMFU4yx_kg_9xPyU.roa (hash: 5bvfMOGO3bzYhXnBDQ9LEiKMN4Sn1bfX7T0pXHZoGE8=)
                          2: QigmVL9RdKBrOmb9TPbEmGlKGvI.roa (hash: aKzMVPifV/PQNyojx6n88SRwR1h+51YRrN3o4ao5DFk=)
                          3: mT6BRnbzLyZHccetdnpN-H08Y-I.crl (hash: 68v7ypYmandw4WUUP7IWw+pbpvKFVAeZz2tCOY1Lq2c=)
                          4: nSTE3QopaGrpLJrHMCi5I8bZ5bw.roa (hash: baxR5slRLxHVOmtRsQKscXZczn9OJHENPHGtMrxxtQk=)
                          5: wzhvVBisYwpfDxdiNkmYJjywz5I.roa (hash: vkonNhWWhUvXolDJXrRgZMBJWgHtThs0/Uh8jZJo5Qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:01:18:92:b5:f7:7b:b3:02:ba:a2:84:62:b6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
        Validity
            Not Before: Jul 28 21:01:07 2026 GMT
            Not After : Jul 29 21:01:07 2026 GMT
        Subject: CN=ba7cef06050e7ed48a0794fd67a57a5764d56ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:2a:d3:c1:83:c6:e9:a1:55:3b:68:86:65:
                    21:67:ef:d9:82:27:97:6e:10:a8:d0:00:03:4f:c1:
                    75:52:47:c7:78:0a:e7:ae:a5:2c:55:69:68:d1:79:
                    1b:33:8b:b6:0b:55:b7:dd:c5:43:7e:b7:e4:c3:10:
                    d0:b9:71:c0:d6:aa:18:09:9b:60:e9:79:ab:bc:2f:
                    f5:e3:b7:5c:bf:e5:20:cf:61:ae:f7:6e:12:87:73:
                    3f:65:36:8b:ee:9d:01:54:cd:e3:35:4c:f7:1c:1a:
                    7c:cc:2b:23:5c:c3:b1:e5:8e:98:12:10:b8:02:dd:
                    4f:3a:1f:79:d4:bd:a4:09:b4:af:9f:9c:a3:17:20:
                    4b:e1:6c:f8:5f:2d:76:15:52:ea:2b:de:f5:97:f4:
                    10:38:c9:b5:f9:1d:82:e7:88:66:10:76:5d:e8:ab:
                    4e:3c:72:af:21:d2:e9:5f:97:41:2d:10:f5:df:88:
                    81:a3:d8:46:64:b8:ae:84:17:4b:c9:ef:da:8f:d9:
                    4f:00:a7:f8:34:5c:b0:34:73:c5:96:57:2f:93:d2:
                    03:bd:9b:a1:38:b4:ea:11:19:53:52:0d:8a:5f:0e:
                    61:1c:6b:25:ca:b7:76:2d:31:2b:d1:f6:9c:74:57:
                    4d:0d:de:c1:b9:6a:c4:3d:e7:53:86:a9:49:84:51:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:EF:06:05:0E:7E:D4:8A:07:94:FD:67:A5:7A:57:64:D5:6C:E2
            X509v3 Authority Key Identifier:
                keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:04:ee:ef:fc:67:b0:a1:35:84:79:19:cf:2c:67:23:5c:
         91:8e:45:d2:c3:80:a6:97:a2:08:c8:93:c6:21:d7:31:3e:09:
         ed:5a:c4:8c:a3:0b:95:9b:89:ee:09:be:2b:a7:b0:6c:71:2d:
         42:14:0c:27:2f:70:0a:d7:4b:23:5a:dd:b1:45:7a:e0:b0:dc:
         a5:97:53:22:50:3d:a6:28:81:7a:9b:c0:e6:dd:87:3e:11:d3:
         49:ec:91:ad:7f:63:72:4e:91:bd:92:fc:bf:b2:43:94:31:7c:
         a1:62:91:91:ac:30:c6:b2:44:c7:bc:73:8d:bf:21:b1:ae:f3:
         65:6a:41:d1:cb:30:37:1a:34:84:04:b2:8c:d1:21:52:a6:e6:
         70:c1:88:9f:97:3d:a7:33:65:40:34:11:dd:44:cb:1f:bc:37:
         a4:6a:9a:e6:01:d3:69:1d:2d:2b:52:e7:6a:bd:06:f6:a5:3f:
         8d:3f:69:9d:d2:6c:64:ad:f9:53:be:7c:2d:0b:57:55:9d:1d:
         12:a0:81:68:4a:b7:a7:a7:1f:14:81:f4:26:a5:ad:9c:3e:b1:
         62:b6:85:4c:6f:f1:73:c7:38:b2:57:6c:b4:48:d4:25:c0:1e:
         53:b8:1f:8a:6c:36:6e:f5:ac:f3:23:ec:16:a1:aa:5a:b5:0b:
         b8:f2:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:21 2026 by rpki-client