Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          vGY8NP4eRnsJdCUsDQhLamK7vZ5Y5KBfAZTaDy5eE2w=
Subject key identifier:   7F:A0:E7:D2:FE:77:62:CB:49:55:96:02:81:C5:EA:19:39:DD:F1:A5
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       019FA9E27D49C499001D4F2D711C65CE5F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          1965
Signing time:             Tue 28 Jul 2026 18:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:20 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: FFxquuNKUKwnxVJu1Yv+tDDyFT1fJajbo/9zgDDFvEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:7d:49:c4:99:00:1d:4f:2d:71:1c:65:ce:5f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Jul 28 18:00:20 2026 GMT
            Not After : Jul 29 18:00:20 2026 GMT
        Subject: CN=7fa0e7d2fe7762cb4955960281c5ea1939ddf1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:9f:21:c4:8e:25:d0:02:12:d4:27:2a:fe:
                    b3:a9:e4:7d:41:ab:97:d9:f4:d3:76:a3:bc:cc:d1:
                    88:48:36:5a:27:cf:8f:0b:d5:8f:ef:8c:b6:55:f9:
                    05:64:89:24:e5:8f:13:e9:33:e1:12:12:ce:d0:82:
                    c4:4d:5e:8d:fd:3b:5a:ab:cc:7a:b4:aa:3c:1e:a9:
                    af:8f:60:49:8e:55:6b:60:c0:f3:81:aa:2c:23:ec:
                    41:5f:2c:d9:97:dc:9b:92:b7:f0:38:49:ae:b7:11:
                    01:e0:a3:11:0e:87:f0:91:1e:13:c9:8e:99:1f:f6:
                    12:f5:43:ef:da:81:12:2f:6c:34:62:28:89:3a:e2:
                    bd:09:23:ea:66:7f:b6:70:36:45:08:58:02:0d:45:
                    f3:46:23:e9:87:05:b4:0e:1e:f0:3e:26:23:91:d4:
                    53:d0:48:31:70:03:41:57:c5:c5:b6:49:bd:fc:d6:
                    04:53:dd:0c:4e:e6:18:de:62:07:05:8d:d5:8c:ed:
                    1a:e6:50:ef:8c:5a:ad:6a:09:9a:05:61:45:e9:9d:
                    58:c7:a5:26:49:e9:27:08:8d:f5:64:34:56:ea:48:
                    ec:86:5f:a2:0f:ba:30:8a:0d:45:5d:e2:a8:ec:03:
                    41:15:8f:49:61:a9:9e:43:9d:fd:38:84:d0:a2:fa:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A0:E7:D2:FE:77:62:CB:49:55:96:02:81:C5:EA:19:39:DD:F1:A5
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:b7:8f:21:6c:0d:57:f1:76:fe:fb:ee:1d:dc:16:5a:29:
         56:1f:97:9b:5d:97:cb:2d:53:f6:b0:ec:49:bd:19:7b:71:46:
         bc:9e:7d:34:a8:0d:a2:8f:9a:46:49:ae:64:6d:24:a5:6f:86:
         33:fc:cc:eb:c6:4b:cd:a6:a4:fd:5a:40:ea:62:e8:37:39:b5:
         a5:c6:55:17:60:1c:e4:6a:e9:43:93:42:95:8a:e7:e2:64:08:
         51:41:d9:44:aa:ee:be:4f:11:18:09:0e:42:07:26:40:1a:aa:
         e0:ba:7f:5b:e1:1d:cf:e2:82:d1:5d:54:2d:bb:a9:7c:ac:06:
         65:14:6d:df:ea:43:09:cb:ed:d0:45:74:e5:57:60:bc:69:81:
         41:c6:6f:03:99:bd:d1:05:5e:01:31:8e:b2:cd:48:e0:3e:06:
         3e:bf:aa:c5:ad:97:88:f3:c2:bf:32:cf:c2:e4:f7:56:7d:ad:
         8f:21:1f:ed:6c:a9:1e:e5:b0:b3:f2:6c:10:16:8f:33:ef:d4:
         44:2f:17:4f:be:a7:f6:6a:24:f4:b0:1e:fe:65:b3:06:de:66:
         c3:99:75:26:7f:2b:98:94:20:48:24:3b:06:8f:98:a0:b6:7a:
         de:c2:8b:c0:3b:c4:83:df:18:a5:37:e8:da:7c:c1:92:2b:ec:
         b6:5d:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:26 2026 by rpki-client