Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          3CYGj+aA7azS88KqoCPpf3wcyX6TN6HGmTmW/YuhGkk=
Subject key identifier:   CA:84:4B:05:FE:11:AE:CB:D9:56:6A:B2:D4:C2:91:0C:3C:0E:18:4F
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       019FA93DDD79ADBAEFA9546F65C42A57AE57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          19F9
Signing time:             Tue 28 Jul 2026 15:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:31 +0000
Files and hashes:         1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=)
                          2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=)
                          3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: yryRTo9vDRRRzCYNaivw8RSpFR1HbVsSoG2yiiebwvQ=)
                          4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=)
                          5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=)
                          6: AUmE2YbKzYGKohczr4jMETToilY.roa (hash: HU9CxUgtmqm30Tk4KPw7deDUwU0eCp+soz3LnSEevJY=)
                          7: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=)
                          8: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=)
                          9: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=)
                          10: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=)
                          11: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=)
                          12: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=)
                          13: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=)
                          14: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=)
                          15: SvEm-yXVhiOKZ90phjAW_AA8ALc.roa (hash: 7Oq7qPwBODUfGC8UgiLRJC3+bMOGG/2kfdhFT0x3Ngw=)
                          16: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=)
                          17: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=)
                          18: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=)
                          19: dNvl41gDXbZfsDZ9RFpBvP6cYow.roa (hash: NaucFK+oQglGEexzweska9RmpWnDV2Wpe/l4R51xpK0=)
                          20: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=)
                          21: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=)
                          22: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=)
                          23: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=)
                          24: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=)
                          25: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=)
                          26: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=)
                          27: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:dd:79:ad:ba:ef:a9:54:6f:65:c4:2a:57:ae:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jul 28 15:00:31 2026 GMT
            Not After : Jul 29 15:00:31 2026 GMT
        Subject: CN=ca844b05fe11aecbd9566ab2d4c2910c3c0e184f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:b3:8d:69:1d:4b:83:06:70:7a:5e:86:18:
                    81:f1:9d:72:f6:56:4e:9b:6b:36:f0:f2:9d:6d:a6:
                    e8:a3:1f:2b:92:55:b3:43:3a:b6:4b:23:19:35:0f:
                    01:f6:27:3c:62:31:76:75:54:87:f1:e3:9a:2e:ae:
                    d8:f3:9a:5e:c7:f3:aa:dd:05:14:6b:02:56:c3:7a:
                    8a:b1:ce:49:9f:4a:e7:2d:af:40:02:c4:f7:5e:5e:
                    5a:50:f6:7b:0e:c5:eb:bc:27:0d:c0:93:9e:c4:e8:
                    93:49:3e:46:14:66:06:c1:9f:b6:32:7e:7a:d5:f9:
                    00:6f:f7:9a:4e:d1:86:9c:58:7c:b2:3f:0d:ea:f4:
                    37:c4:aa:ac:fb:83:bc:46:0a:29:f3:ef:34:85:0f:
                    d3:3e:c6:d1:9f:58:fa:aa:42:43:75:6d:6c:17:17:
                    6f:03:9d:31:e3:ca:4c:8a:d6:89:2b:c5:55:b9:21:
                    45:69:37:c5:b8:f4:69:1c:13:7a:a2:dd:45:15:f2:
                    0b:77:07:b4:e5:88:34:4e:a4:69:e9:05:bf:57:51:
                    f6:7f:b5:e2:31:b1:a0:1a:b9:d2:0b:47:af:5b:d1:
                    4d:f2:13:e4:cd:46:91:3e:4d:fb:d7:14:61:38:7f:
                    0e:6c:78:2c:c1:04:ba:7e:06:70:52:0d:17:5f:8f:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:4B:05:FE:11:AE:CB:D9:56:6A:B2:D4:C2:91:0C:3C:0E:18:4F
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:54:3d:12:f0:8c:de:c6:95:d0:4a:aa:0b:25:84:7a:8c:
         94:2f:79:4e:a0:aa:cb:c8:e4:90:67:f1:be:ac:50:8b:e5:69:
         f0:af:82:2c:a8:1d:52:3e:f7:82:9a:d2:c7:74:4c:76:9d:22:
         e3:ad:42:f4:3c:a3:fd:c0:44:6b:29:32:2e:8e:05:8c:e8:e2:
         db:e4:1d:1e:4a:6e:7e:57:8a:31:5b:19:87:a7:8b:ed:62:87:
         ed:0c:75:d6:82:25:47:ab:bf:37:07:60:12:16:02:77:f0:11:
         f5:4e:55:c3:17:53:9b:4f:42:b7:00:f9:80:5c:23:5e:89:c9:
         77:0a:ce:48:3a:c6:03:0d:d7:85:43:88:20:1f:92:76:65:f1:
         7a:62:76:49:50:59:89:fc:79:17:77:ab:4e:9e:6c:09:e3:56:
         99:e6:b6:23:05:6b:df:ea:22:14:52:72:e4:97:d8:04:38:c6:
         43:2b:37:4e:5a:36:10:a4:2a:00:22:1b:95:ae:c8:78:4d:e4:
         4b:97:19:f0:ba:8c:95:2d:48:32:f7:34:dc:c6:ba:b8:55:11:
         08:f4:19:15:2c:02:92:4b:18:ff:da:db:09:09:f9:58:b5:72:
         b0:93:1d:45:4c:20:3f:b9:2e:69:d4:1e:5a:b5:39:70:d3:7b:
         bd:f6:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:34 2026 by rpki-client