Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
File:                     6Ey_buD7yr9563S8Ykjzls8K6uQ.mft (raw, json)
Hash identifier:          pH98kmjJOJjfmVYUEu/zK5nUfcxEtftx3FSe8NW08ug=
Subject key identifier:   18:F5:D1:B0:FF:E5:5C:A7:D3:CC:EE:3C:CC:AE:42:79:12:E8:B0:22
Authority key identifier: E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4
Certificate issuer:       /CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4
Certificate serial:       019FAABEF946EA0324E06B46EF400F84E198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
Manifest number:          0CE1
Signing time:             Tue 28 Jul 2026 22:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:09 +0000
Files and hashes:         1: 6Ey_buD7yr9563S8Ykjzls8K6uQ.crl (hash: DGIctATmYt4WL0nKbr1cdNPgWVDOnWWMZruzYrejLxc=)
                          2: f3D8udSu3dtjbrLKnmWOz8XvfiA.roa (hash: YroX+SuNccqs1wKABD1fzKE71I0H5UXZNMrp81qcCCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:f9:46:ea:03:24:e0:6b:46:ef:40:0f:84:e1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4
        Validity
            Not Before: Jul 28 22:01:09 2026 GMT
            Not After : Jul 29 22:01:09 2026 GMT
        Subject: CN=18f5d1b0ffe55ca7d3ccee3cccae427912e8b022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:8c:65:1e:83:60:5b:65:d9:5c:d0:75:1c:
                    63:7a:3c:16:37:c5:ff:fb:38:85:4b:0d:87:98:27:
                    ac:bf:f5:cd:ef:e7:90:bc:c5:41:e1:e1:fb:85:c8:
                    7e:bd:2f:9b:59:6e:d9:9b:c7:7e:d4:eb:78:f8:d7:
                    0b:17:91:0d:19:a0:7d:eb:9f:ed:ba:54:5f:0b:fb:
                    c2:01:96:bf:37:a2:71:6c:2b:be:48:24:f1:03:65:
                    74:bd:d0:a8:6e:07:8b:18:1c:5e:4f:11:55:43:4e:
                    d0:aa:53:43:ee:0c:80:22:32:56:80:19:39:78:1d:
                    2a:27:9c:e3:2c:cf:7f:17:6a:e3:64:1f:05:34:79:
                    6b:81:a6:ab:5d:92:45:f3:76:93:43:be:b4:23:5f:
                    45:14:06:d5:bc:f3:ef:1a:ce:3a:a7:0f:c1:e8:d5:
                    6c:da:71:2e:45:26:b0:c7:46:f3:df:fa:ff:9b:a8:
                    c3:a4:bd:1f:0a:e7:6f:0d:e2:79:ec:1a:be:5f:6f:
                    65:b5:e5:b2:9c:16:63:3e:bf:1c:a6:9c:6e:c9:7e:
                    cd:e4:6c:50:d4:e3:cb:2c:e1:66:7c:4d:b0:97:e5:
                    5c:ae:e8:67:26:20:c4:dd:8c:07:b8:d3:8d:be:1f:
                    d2:1e:52:e0:14:5d:41:51:59:b7:36:54:14:ea:5f:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:D1:B0:FF:E5:5C:A7:D3:CC:EE:3C:CC:AE:42:79:12:E8:B0:22
            X509v3 Authority Key Identifier:
                keyid:E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:34:c2:aa:58:0a:2a:53:da:55:7c:0b:12:e7:be:8f:ce:
         a0:3a:51:89:cf:62:80:f8:94:e3:90:f0:1f:15:be:f1:00:34:
         35:d2:86:d1:d5:1a:1b:67:95:1d:2e:16:ec:b2:87:bd:d6:8b:
         eb:8c:75:b6:04:3b:04:6c:bb:ac:08:45:f6:d9:71:11:45:cc:
         f2:c1:dc:7f:c4:94:f4:3c:38:43:31:99:3e:23:5f:bb:64:52:
         ff:25:64:42:5f:c1:30:0b:98:01:ff:16:f0:da:36:1f:aa:60:
         3e:af:d2:a2:4f:31:99:90:04:0f:b3:39:bd:fc:39:58:04:51:
         93:f8:3f:82:1d:bd:bc:90:78:47:1d:88:9f:14:f0:34:59:0e:
         ce:bd:0f:14:78:37:61:f4:e1:ad:a9:9c:38:7a:af:b3:af:1d:
         87:d3:1e:17:b4:6a:6f:08:7c:43:5a:d6:06:31:d7:f4:61:fa:
         51:a8:38:38:94:8e:9b:f3:a2:88:96:69:94:1d:40:cb:4d:f5:
         45:58:74:fa:c8:50:a3:b9:99:ff:f2:b8:6f:35:46:71:8a:3e:
         7c:8d:95:5b:48:03:62:9f:83:71:11:f3:25:ca:3e:5b:ec:fe:
         2d:92:0c:3f:25:a5:29:9c:ef:1b:d8:de:9c:1f:5b:33:4f:26:
         b7:0d:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:24:19 2026 by rpki-client