Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
File:                     6e5l7GbZD_j_-NFwcyBXdALoXMc.mft (raw, json)
Hash identifier:          5eGXAY74MPm8QkSjUmWHQTcsOFzK/ArtClRdknZkBeg=
Subject key identifier:   8D:2F:2D:C9:22:06:7D:99:7A:57:EB:D8:DB:EA:C1:23:26:DB:34:90
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Certificate issuer:       /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial:       019FA906BF501ECF921A4E574DEC53DABBED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
Manifest number:          13CD
Signing time:             Tue 28 Jul 2026 14:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:19 +0000
Files and hashes:         1: 6e5l7GbZD_j_-NFwcyBXdALoXMc.crl (hash: tKRlocvU9+GfaqoBFxUzQNEaarkOggHrEfeeFE3ivEA=)
                          2: SjzLfenUX4kznR2y8ruZeOnFvmw.roa (hash: vzCbx03F8+rxM1liQuyxsAk6fpt98wQC2kvOe4mhFm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:bf:50:1e:cf:92:1a:4e:57:4d:ec:53:da:bb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
        Validity
            Not Before: Jul 28 14:00:19 2026 GMT
            Not After : Jul 29 14:00:19 2026 GMT
        Subject: CN=8d2f2dc922067d997a57ebd8dbeac12326db3490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:5d:6c:fb:66:5b:37:30:73:19:6f:91:b6:
                    c0:8f:46:1a:03:c8:01:bc:69:5c:7c:e3:26:9c:04:
                    7b:4c:3a:40:74:64:bb:6d:f1:6c:a0:4a:fa:8b:29:
                    d4:2f:2b:e8:9f:84:3f:6b:87:48:b5:c2:fe:d5:c2:
                    c1:96:f1:04:94:c2:75:e1:dd:bc:81:8d:47:5c:2d:
                    7d:90:54:e6:c2:0e:5a:60:40:02:bd:b0:f5:36:8c:
                    8c:9f:e3:3b:c1:cc:6a:56:76:d3:43:6a:72:03:c0:
                    68:75:25:b6:2a:d0:18:a4:c8:3a:15:38:5c:a9:53:
                    02:13:1a:b4:d1:f1:9a:ec:c0:c5:fe:d5:61:ba:bc:
                    1c:62:f0:c0:be:bf:3f:7c:f0:be:ea:81:9c:ab:de:
                    3f:c4:d2:cc:d2:47:5d:2a:c7:65:11:8b:e6:ee:35:
                    4c:82:cd:30:6a:dc:a2:c1:66:b6:ba:1a:12:36:21:
                    7d:71:91:67:2e:9f:a2:45:dc:b6:09:a7:1e:3d:43:
                    8e:b5:42:0b:11:1a:dd:63:93:05:fc:2c:93:75:ee:
                    d6:3c:23:fd:a6:7a:79:25:a1:d2:d0:5d:7d:46:af:
                    1d:60:91:50:41:a3:0d:1e:ed:83:77:89:f4:df:41:
                    00:16:39:54:52:fe:54:31:ca:56:0f:aa:08:75:08:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2F:2D:C9:22:06:7D:99:7A:57:EB:D8:DB:EA:C1:23:26:DB:34:90
            X509v3 Authority Key Identifier:
                keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:56:3b:61:d1:5d:a5:66:ff:b4:53:14:b5:7a:ab:53:46:41:
         18:3a:c3:12:70:ab:8b:d1:13:11:96:f2:b1:37:c4:2a:41:86:
         8f:26:f1:9e:7d:c6:f6:6c:b1:bc:5b:2a:9f:81:5f:98:c4:24:
         b4:2f:0c:a3:ea:b0:8e:83:69:17:ff:0d:d0:a4:52:c8:ec:f9:
         91:94:b8:ae:2c:39:1c:c9:93:93:a3:fb:07:c7:ca:14:61:e0:
         13:76:11:a5:53:67:ad:db:25:49:6e:f4:86:d9:5f:d3:44:89:
         41:b3:7e:d2:7f:11:e5:23:01:54:cf:dc:60:e9:14:21:86:68:
         07:02:35:a8:c0:4e:fd:1a:aa:f0:2a:d5:ec:fc:b8:e6:2f:a2:
         7c:8a:3f:ee:1d:8d:08:04:ee:96:12:00:b8:73:20:21:bb:b4:
         3c:5b:2f:20:44:7d:45:42:02:14:1e:9d:3a:bf:64:1c:91:85:
         51:f3:e4:e5:b2:fa:f3:13:a5:76:25:10:df:71:58:ac:83:08:
         d2:bf:a4:30:ca:74:4a:56:0c:01:68:de:c8:33:cf:b8:bd:c8:
         de:a1:a0:8e:e4:47:ed:d1:0b:94:b0:8c:95:63:f4:c8:4b:19:
         53:bc:f1:57:8b:67:91:5b:c6:57:21:e1:4c:4b:73:b5:22:e6:
         05:04:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:14 2026 by rpki-client