Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
File:                     6YMf0OexWxfgoKfcz8q7Bj18R8o.mft (raw, json)
Hash identifier:          g77XcFd7Bj20A7L7UkmGbjfyF3F5y4MoNvsIBOPBbuI=
Subject key identifier:   80:4F:2A:5C:5D:C8:24:B6:67:75:FF:E3:C9:57:5D:B4:75:29:91:2E
Authority key identifier: E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA
Certificate issuer:       /CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
Certificate serial:       019FAA1A53ED76F4044450FB74AB4C0950B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
Manifest number:          07B4
Signing time:             Tue 28 Jul 2026 19:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:19 +0000
Files and hashes:         1: 6YMf0OexWxfgoKfcz8q7Bj18R8o.crl (hash: h/eFHmVH0026Ag51GuGbiBHy4dW+52SWKCM7GfjE4SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:53:ed:76:f4:04:44:50:fb:74:ab:4c:09:50:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9831fd0e7b15b17e0a0a7dccfcabb063d7c47ca
        Validity
            Not Before: Jul 28 19:01:19 2026 GMT
            Not After : Jul 29 19:01:19 2026 GMT
        Subject: CN=804f2a5c5dc824b66775ffe3c9575db47529912e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:79:e2:1e:95:7c:b8:1b:49:5c:5e:a2:59:
                    8d:75:d6:a9:ec:9d:83:ac:a8:bd:47:11:02:f1:63:
                    21:9f:4f:ec:f4:50:d8:16:d0:c7:dc:25:12:b8:17:
                    99:5b:86:8b:f6:6a:ce:ed:47:07:71:af:13:50:d9:
                    0c:ce:7c:5c:de:72:59:d3:3c:48:4a:9f:1d:99:9b:
                    72:f9:8c:2d:0d:30:e8:5e:bd:6b:22:39:ea:4e:c2:
                    e2:29:e2:85:d9:07:7f:f9:c4:42:10:f0:3a:3d:62:
                    0d:9b:86:d0:51:ab:15:05:c9:37:f2:25:66:43:bf:
                    d3:7c:62:eb:8e:6e:dd:79:a4:2f:48:43:1f:35:3a:
                    0d:f9:18:84:bf:72:7d:cf:14:af:25:cf:a3:51:e2:
                    81:56:1e:bf:25:f5:c0:5c:a1:4b:0f:b3:f9:80:30:
                    4a:cd:28:9f:0b:b4:8c:c4:ae:9d:3d:01:21:69:18:
                    e9:12:47:be:91:81:20:9c:a7:35:5d:96:a5:33:39:
                    b2:2a:fa:2b:17:b9:36:b3:35:7f:31:d2:6b:9e:11:
                    ac:52:9a:37:bb:0b:02:b5:0c:e1:be:b3:8e:78:0c:
                    eb:a9:c5:fa:c3:11:b4:28:d7:30:ec:68:01:d1:c0:
                    8e:1c:66:13:42:35:0a:87:5b:ae:1e:55:0a:01:5b:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4F:2A:5C:5D:C8:24:B6:67:75:FF:E3:C9:57:5D:B4:75:29:91:2E
            X509v3 Authority Key Identifier:
                keyid:E9:83:1F:D0:E7:B1:5B:17:E0:A0:A7:DC:CF:CA:BB:06:3D:7C:47:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YMf0OexWxfgoKfcz8q7Bj18R8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/94fd8a-3b65-4af7-885d-0147e13a993e/1/6YMf0OexWxfgoKfcz8q7Bj18R8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:af:28:53:1f:b0:24:24:0a:71:46:c6:44:71:b6:af:d4:79:
         37:bb:0e:f8:00:76:de:cc:8d:a5:23:b2:29:db:b4:d0:9a:c2:
         10:ea:3f:4f:11:a1:bd:8d:32:5b:4a:42:03:f0:46:51:29:80:
         31:7b:61:f5:45:53:0e:49:99:62:4e:d9:18:23:7a:d9:8f:5b:
         7c:89:1a:71:ca:83:28:bf:46:b1:20:b8:5b:5d:b0:15:e0:2a:
         a0:4a:73:95:80:22:a2:20:f6:5a:ce:5b:58:8e:56:8c:d3:64:
         a5:4e:92:fc:e1:a2:2d:44:22:9f:7f:d2:9e:87:8a:00:81:1a:
         f5:09:a9:97:44:6a:5b:02:c6:05:67:a4:0f:0b:3c:e8:74:e6:
         29:7e:d5:7a:d0:16:13:dd:7e:99:6e:84:85:60:90:e6:4f:f3:
         79:16:ef:59:d4:dc:10:c0:51:3d:7a:01:46:cc:8d:4b:c8:27:
         56:43:5e:5b:fa:33:49:35:96:5d:79:b7:96:72:66:04:8f:87:
         a0:61:81:e3:92:f7:13:80:7b:b0:cd:c4:53:2e:b4:75:53:12:
         d1:bd:5f:6f:c3:00:a4:8d:31:3c:1e:9e:4d:1a:51:69:6c:28:
         ac:82:a1:19:32:03:88:78:4a:b2:4e:5b:11:c1:2a:c1:c4:43:
         8c:83:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:10 2026 by rpki-client