Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File:                     3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier:          x1Kd641MY4a59Skv8RH5rdiV8nre2Jv/2VQ9r2tVjdc=
Subject key identifier:   70:82:2C:B6:A3:72:B9:36:61:C0:BD:69:AD:FF:85:6A:16:C3:93:CC
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer:       /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial:       019FA9756CA1C849DC2B44EEAD7D0A9562F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number:          19E6
Signing time:             Tue 28 Jul 2026 16:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:12 +0000
Files and hashes:         1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: 2+rwon+kro2RnGbwDWICdo7I7WXpai/iuu4j7FpJF9Q=)
                          2: 7vheWt636zaXPWY7-s5DyNEvcCk.roa (hash: yHddO5nWyrrRYQwmZYLYDVw2iZ9LZ47A/NrBl7ewM1Q=)
                          3: GtwmzzfSMyQuHA5xN2h8yl_66bg.roa (hash: b0cWR0WKtHBGdUpy+EpGKcmMMtl7w7UTXQhFBWlOy0A=)
                          4: syWk75JGny34Q7aH7yGz8UWltwM.roa (hash: lGizpp26YDLi0eoTG2nJ/NGlhRSSauEEXdm5wIZ3bqo=)
                          5: yowCytNDfEjr6iMV6-jVqrYVTnY.roa (hash: Qecp8oYwO0klWaPBXtOGO2cs0a85Z+pJ/Flg2E7BAJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:6c:a1:c8:49:dc:2b:44:ee:ad:7d:0a:95:62:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
        Validity
            Not Before: Jul 28 16:01:12 2026 GMT
            Not After : Jul 29 16:01:12 2026 GMT
        Subject: CN=70822cb6a372b93661c0bd69adff856a16c393cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:96:d5:4d:cc:48:44:ff:48:1d:85:25:c6:
                    b0:42:f6:bb:23:da:9c:78:53:2d:b2:da:04:ec:07:
                    6c:d7:43:64:a4:0b:d8:20:1d:ac:e4:bd:f3:62:a3:
                    f7:66:ca:99:7e:88:e2:98:06:a6:cd:c8:a3:32:25:
                    51:31:41:c7:e1:6d:44:4d:df:f6:02:6d:be:60:c5:
                    bb:45:f3:ea:22:1a:b8:c4:a6:c7:6e:c5:5a:24:47:
                    18:fe:42:d4:40:e9:43:fc:fa:d6:51:3b:03:8a:17:
                    07:a4:9e:b7:29:95:d3:0c:49:e1:d7:d3:60:f8:b5:
                    84:1f:95:cc:ad:42:13:43:31:c6:92:55:6b:5f:f2:
                    84:c6:34:33:08:ae:2e:51:c4:b2:13:ba:5a:9a:30:
                    05:51:76:4a:de:f0:95:e0:82:85:12:bd:64:7c:e8:
                    7a:77:19:cb:a1:6c:25:3c:02:ef:63:19:98:5c:6c:
                    b6:e3:39:57:a9:76:71:df:94:20:ef:dc:2e:c3:fa:
                    74:15:ab:5b:f5:8d:4f:e0:e3:0b:b9:87:e2:2c:bc:
                    65:81:1e:ab:1e:6f:a7:42:8e:3e:f5:17:3f:cb:a4:
                    d4:a0:7d:b6:49:3f:52:86:05:e6:84:95:77:f9:c4:
                    f5:a0:2b:6d:1e:1e:50:16:fe:72:44:c6:8f:8b:15:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:2C:B6:A3:72:B9:36:61:C0:BD:69:AD:FF:85:6A:16:C3:93:CC
            X509v3 Authority Key Identifier:
                keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:96:84:e5:59:0f:00:f6:48:1c:d0:26:a8:0a:92:af:4b:1b:
         b8:84:39:8c:eb:73:b0:4a:83:54:fe:f6:ed:a1:4a:37:71:f4:
         56:b4:b1:74:30:54:09:8a:36:07:a4:11:96:a8:3d:32:f4:b8:
         d2:23:82:8b:d1:ee:dc:73:6c:40:8c:82:c4:0d:8b:c3:12:37:
         c8:55:6e:94:d0:52:46:cd:ba:cb:95:09:aa:f0:dc:4c:b7:66:
         aa:54:ca:80:1b:cd:c9:3c:ed:9e:39:32:f4:86:91:e2:61:4b:
         67:02:f3:0a:3f:9a:3f:e9:61:dd:f1:6a:8e:aa:80:f8:71:07:
         fe:f3:df:e7:53:82:29:81:94:ac:03:eb:f7:d1:54:19:1c:21:
         20:ba:16:30:77:f6:36:64:11:25:82:ce:6c:07:9a:33:96:b1:
         1a:ca:c7:fb:d0:39:e9:b6:81:f1:d9:12:ea:d9:96:af:00:82:
         2b:4f:02:7f:19:40:f3:0f:16:bb:5b:ed:d6:79:da:95:24:a6:
         52:e6:5b:ea:c6:da:ee:ee:9b:d1:87:b4:15:9e:f1:60:90:a7:
         d0:86:4c:e7:77:da:06:a9:e2:c0:e1:0e:bc:9a:4a:c8:8f:af:
         c1:b0:aa:99:46:19:f6:b0:77:4d:35:6b:79:3f:77:04:b4:57:
         b1:c2:c9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:55:32 2026 by rpki-client