Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
File:                     I6iatTI5OGO8sTkWPc9BWKV_G68.mft (raw, json)
Hash identifier:          dX8RUd0tEDDB+68k6HviMt81y+giVWkBCcWug+HWwS4=
Subject key identifier:   76:DE:28:99:51:4B:3D:3B:16:2E:CC:38:5B:9C:C7:FE:EC:41:87:3E
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Certificate issuer:       /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial:       019FAA195C78DDF46988344D4F7DF389AFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
Manifest number:          014E
Signing time:             Tue 28 Jul 2026 19:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:16 +0000
Files and hashes:         1: I6iatTI5OGO8sTkWPc9BWKV_G68.crl (hash: Own3sNraBAvec8O8nqXVq0tQBH/ays/QSJFOE+sVKvg=)
                          2: _I5a0P8T4VJzebOuAIGr0Xf9lEc.asa (hash: 4TGEq37+do+qienVBiWKqzcP2qwax/q6NuHIkhYbhW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:5c:78:dd:f4:69:88:34:4d:4f:7d:f3:89:af:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
        Validity
            Not Before: Jul 28 19:00:16 2026 GMT
            Not After : Jul 29 19:00:16 2026 GMT
        Subject: CN=76de2899514b3d3b162ecc385b9cc7feec41873e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:cd:ef:e0:c9:2b:cd:56:8f:3b:67:b1:27:
                    10:a0:3a:b7:06:96:8c:41:b6:0a:6c:3f:f9:a9:3d:
                    d1:2f:31:46:5d:73:76:c0:35:07:8f:22:4d:50:04:
                    07:bd:8f:d5:94:d5:1d:97:93:70:ec:c3:8f:43:36:
                    41:5c:95:1d:13:d8:9b:ef:42:2c:1e:a8:bd:cb:38:
                    55:a2:2e:a0:a5:6a:a8:0f:53:af:1c:31:da:78:35:
                    f7:2d:1d:c9:9b:bd:e9:66:38:14:72:5d:d4:17:8f:
                    10:ea:7f:10:0c:26:83:3e:7f:b5:b2:4a:b2:c7:a4:
                    ac:cf:71:41:ad:2d:bd:9a:30:3c:b3:5e:4d:12:64:
                    1d:d8:ab:58:04:e8:ca:9b:44:4c:c3:a6:b3:59:aa:
                    83:e8:00:0b:8e:c7:14:2a:fb:c3:60:4f:35:aa:88:
                    fb:a9:9c:72:8a:46:c2:ee:ed:38:56:e1:95:9e:13:
                    0c:62:d7:c7:7a:ef:74:53:d4:d8:e6:0e:66:1e:0f:
                    bb:8b:56:78:6f:77:3e:04:6a:5d:2e:e8:cd:77:fe:
                    7c:18:ff:0e:d5:07:00:75:3a:5f:44:14:7f:90:7d:
                    8e:b7:05:79:7c:7d:62:ce:f4:52:af:82:92:b1:f9:
                    0b:1a:47:8e:67:c8:bc:5f:91:4d:3a:76:14:32:16:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DE:28:99:51:4B:3D:3B:16:2E:CC:38:5B:9C:C7:FE:EC:41:87:3E
            X509v3 Authority Key Identifier:
                keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:37:9a:21:41:dd:27:00:08:5a:6b:1d:18:3d:0f:62:cf:37:
         52:c0:e5:fb:bb:ca:61:b7:f2:a5:68:a9:2e:0f:7c:f8:5d:9d:
         d3:ce:db:ab:d6:fa:e2:3d:70:bc:89:b7:f0:88:00:23:5f:c2:
         b5:1c:d4:d6:65:13:ca:02:54:06:4f:93:83:2c:cc:13:e2:14:
         f5:46:e6:55:d1:d5:f5:c4:8d:6e:94:72:56:77:f5:af:89:ee:
         09:19:7a:60:d1:22:49:f8:a3:71:67:9f:8a:70:52:a6:d5:f1:
         11:62:43:09:85:eb:51:6c:3a:4d:39:64:3c:36:10:3f:0e:f7:
         aa:c4:92:06:19:bf:72:ec:30:80:75:c1:01:24:7e:00:d4:96:
         c2:3d:d5:ad:94:3b:7e:a0:4d:6f:9a:98:09:34:0f:36:ed:fc:
         2c:bd:62:b8:f4:a8:17:2b:bc:61:34:2a:4a:14:01:3b:93:6c:
         11:06:60:56:11:2b:3b:3b:a5:36:67:d4:54:47:94:df:e3:e7:
         ee:c0:7b:92:29:36:7a:66:68:6d:d5:7b:15:ae:ad:0f:42:b1:
         b5:22:23:5a:cd:80:e0:ed:39:2d:d3:40:56:9c:f5:7e:86:2a:
         fa:f6:ad:7d:45:95:43:02:5b:a9:57:05:54:d0:19:3b:0c:04:
         98:94:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:01 2026 by rpki-client