Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File:                     6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier:          yPijcNaGY6J59Gks8pL+NgnIZK7oUEMpQ+vn9nQILk0=
Subject key identifier:   84:02:FF:0E:C6:FF:97:00:BB:2B:9F:0F:86:08:DD:85:10:9A:F7:E2
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer:       /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial:       019FAB2C4A79015DB3CFE89E00D6D525FF39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number:          049F
Signing time:             Wed 29 Jul 2026 00:00:34 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:34 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:34 +0000
Files and hashes:         1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: LF8RVcBSFUriprANDF2WuTPeCwPVBE8RbHTy3jqYCvU=)
                          2: EPuA-rz2GCC_9oWJncgSaaD-Amw.roa (hash: 1zdJX0jOCZ5hbksB1gikYMcKYGrQ1RKUiTOb42T+2/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:4a:79:01:5d:b3:cf:e8:9e:00:d6:d5:25:ff:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
        Validity
            Not Before: Jul 29 00:00:34 2026 GMT
            Not After : Jul 30 00:00:34 2026 GMT
        Subject: CN=8402ff0ec6ff9700bb2b9f0f8608dd85109af7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:7a:5f:a3:1e:ee:58:50:93:1c:39:cd:9d:
                    e1:2c:5e:4c:c8:3b:32:66:aa:97:0a:7d:5a:54:5b:
                    20:e4:25:8c:8d:2e:5b:4a:9a:42:81:a7:81:af:ab:
                    e8:c8:b1:fc:32:ba:0f:1d:88:63:10:27:ef:20:9e:
                    5e:87:1b:23:29:61:86:b5:2a:e8:28:d3:5b:52:83:
                    21:88:20:f1:e8:78:8c:6c:d8:45:22:46:88:18:bf:
                    2c:11:64:ba:b1:90:c6:a4:23:a2:bd:e1:3a:a5:ff:
                    d2:40:9d:17:13:63:8e:27:a0:5f:b5:f2:98:ef:83:
                    5d:17:23:2b:55:a2:e9:0e:fa:49:fa:a7:e2:2f:55:
                    76:06:ea:37:75:9e:c0:db:8d:66:5a:ad:96:cd:5b:
                    e4:bf:32:d9:44:59:c6:d1:4e:cb:4d:b8:e6:f1:98:
                    e5:fe:24:11:1f:64:78:9e:38:79:ad:c0:ff:ba:8e:
                    0c:c8:ed:8c:2a:40:e2:55:de:a0:95:9c:b5:79:6b:
                    d5:da:9f:2d:30:f0:f3:54:4e:08:80:a3:c4:c9:f7:
                    30:18:3f:36:58:89:7b:ca:51:e5:0a:96:96:5a:70:
                    6e:71:fb:ab:4f:e8:d4:3d:6c:f7:b0:cc:9e:5d:bd:
                    4b:a2:cd:17:90:d6:89:55:be:5c:6b:c4:b5:5d:ff:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:02:FF:0E:C6:FF:97:00:BB:2B:9F:0F:86:08:DD:85:10:9A:F7:E2
            X509v3 Authority Key Identifier:
                keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:ef:18:32:cb:7c:07:02:5c:d0:01:33:b0:04:de:e2:d3:
         d3:d7:ec:c9:3a:11:3d:63:ef:c4:09:c8:2c:ad:ee:9b:04:ce:
         32:2d:a3:25:8f:fa:9c:3d:9a:79:6a:17:31:6a:33:37:b3:4a:
         9e:49:be:06:3d:6a:86:db:a9:56:3d:a8:0f:f8:6c:73:55:9a:
         2c:eb:83:6d:60:29:28:67:83:80:79:7b:e9:4a:46:2a:16:d4:
         b0:92:79:0a:98:87:79:11:cb:af:47:ec:48:ad:29:f4:6e:cf:
         1c:36:3e:46:23:f1:55:14:0b:98:e3:29:d4:4a:9c:f7:4b:f3:
         ef:93:34:94:a3:63:2f:6b:f3:57:f0:bc:ec:cb:7b:1f:76:be:
         09:8d:29:33:5b:9e:a5:a1:41:69:7e:41:cd:d4:9d:8e:5e:8b:
         bf:79:8d:8b:dd:ec:61:32:0e:e7:be:62:17:4f:ca:f4:06:69:
         f9:e0:7a:d8:c0:b9:87:a6:3b:80:71:13:59:c7:a1:56:d9:54:
         74:0d:bf:12:2f:d6:e3:6c:c7:73:0d:38:67:c0:08:7a:fa:93:
         10:fb:99:cc:57:e4:06:01:96:6b:d1:96:e1:6c:8f:7d:39:69:
         c8:a7:8a:5a:82:b6:48:81:a5:46:d7:d1:4a:52:bb:10:94:11:
         91:e0:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:56 2026 by rpki-client