Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File:                     0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier:          TCuuSzWAcZVVtJ0Eod9mbmwtA+jS0tS1OaKoFZvXcb0=
Subject key identifier:   AB:6E:EC:18:4E:F5:8A:8D:98:5A:91:B2:8A:08:2E:65:2C:15:7B:CC
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       019FA9750D26CD71A4A5EECF0700B38C99DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number:          024E
Signing time:             Tue 28 Jul 2026 16:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:48 +0000
Files and hashes:         1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: 8kUJF/9NB5q9m259fXBnN1rdvxemObN3NhwuGgWy0VY=)
                          2: s1Jjt-tBcyKiknkMR9c7tqEPn8Q.asa (hash: /XbNiEDTN73gQoBflBgmdW5BP0chC8iUmBm5htzhbzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:0d:26:cd:71:a4:a5:ee:cf:07:00:b3:8c:99:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Jul 28 16:00:48 2026 GMT
            Not After : Jul 29 16:00:48 2026 GMT
        Subject: CN=ab6eec184ef58a8d985a91b28a082e652c157bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:f2:63:41:f0:c3:64:0a:43:62:51:20:ea:
                    d5:e2:e6:e2:19:fc:e6:95:ff:4a:ae:ba:82:bc:be:
                    09:72:c4:9e:f3:26:41:01:ea:3b:15:a4:96:26:37:
                    20:0f:ce:3b:0a:58:d0:06:4f:e3:1f:99:11:90:cc:
                    59:fe:57:36:25:b9:24:6d:55:2e:2d:fe:85:f4:a4:
                    6a:a4:09:c6:52:cc:92:d4:08:dd:c4:5c:92:bd:19:
                    b2:ca:12:24:09:d6:2a:c0:93:7e:fc:7d:3e:49:8e:
                    d6:5b:d3:c4:e4:40:89:57:0c:de:86:3b:d2:d3:5e:
                    c3:e5:e0:0a:e6:cb:dd:4d:d1:fe:4d:01:ca:f7:f7:
                    c9:59:05:8a:f9:f7:54:9a:cd:a9:38:c1:d8:7a:71:
                    80:a5:4f:cf:a8:20:d1:5a:91:02:37:77:0c:14:97:
                    06:9b:87:f2:60:3d:ac:4a:6e:a2:c6:91:a5:3d:4c:
                    0c:d2:67:44:4d:72:38:67:57:b0:63:2c:7d:ba:41:
                    98:95:1f:e8:7c:a2:58:75:14:db:a6:5c:f7:4a:59:
                    d4:41:25:0b:08:67:f8:c6:5d:58:08:1b:06:b6:e3:
                    bc:c3:8c:c2:a4:f6:a0:eb:8a:40:c3:b1:de:59:a6:
                    d2:ca:de:73:04:2a:30:9d:24:38:03:da:e7:a0:70:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:EC:18:4E:F5:8A:8D:98:5A:91:B2:8A:08:2E:65:2C:15:7B:CC
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:0f:5a:b2:af:84:43:ef:b2:f8:d9:d6:25:18:3a:c0:ff:
         27:77:8b:21:1f:aa:db:69:f4:6d:12:b5:73:05:12:06:b9:aa:
         6b:62:d5:ef:d9:5e:56:81:71:c4:1a:0b:64:59:26:72:ad:fa:
         04:2e:d7:75:93:25:bf:c7:c9:82:47:aa:a9:20:79:7c:15:06:
         e8:ce:21:5b:f8:f9:d0:c5:5a:ef:d6:e0:41:1b:31:d0:46:1e:
         4b:d5:0e:90:a3:78:03:53:1a:fe:3f:49:4d:d5:d8:50:55:b3:
         5e:a5:ac:f3:02:c8:04:3e:64:81:83:12:4e:15:dd:db:c0:6b:
         33:a0:36:97:65:3a:87:d4:f9:a7:1a:23:e4:c8:7c:a3:71:93:
         9b:85:51:0f:96:bf:0a:aa:56:51:f7:1a:82:e9:83:7b:73:fa:
         0d:91:c3:3e:ab:f9:73:7f:d4:bf:69:4a:53:ac:1f:5a:9d:d6:
         e5:ad:9f:16:8c:ad:bf:32:66:bb:45:6d:be:cb:83:d0:48:96:
         da:fe:07:a6:02:8f:87:42:c7:97:fc:7a:fd:d6:c1:9e:08:62:
         db:c3:b3:2a:10:25:aa:63:1c:7a:79:2f:88:93:9f:64:96:2e:
         06:60:14:90:c3:f3:14:68:b3:5b:11:9b:b7:79:b0:33:b2:34:
         5f:09:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:54 2026 by rpki-client