Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File:                     6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier:          CGnodDeIxI/1oHBUwCTd7BCzSqoCmW/plJF1HHACN/c=
Subject key identifier:   E4:5E:0B:E7:8E:88:51:1D:0D:BF:3C:46:DB:87:0D:C2:68:6A:CF:0D
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer:       /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial:       019FA8D07ACABD6603CE0CBB8EAB2A875252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number:          08AA
Signing time:             Tue 28 Jul 2026 13:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:02 +0000
Files and hashes:         1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: ZDZ34T+HjGkxz3zzfxKjbXBw8WhG/cYFWvgihCIRk/w=)
                          2: Bo61RTRTOhfwB50Bqs5zl4FzjGE.asa (hash: fR/GqKb8wiw/0kJKnHBnbPsaaq7HXPxVfPXam3jXJ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:7a:ca:bd:66:03:ce:0c:bb:8e:ab:2a:87:52:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
        Validity
            Not Before: Jul 28 13:01:02 2026 GMT
            Not After : Jul 29 13:01:02 2026 GMT
        Subject: CN=e45e0be78e88511d0dbf3c46db870dc2686acf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:5f:74:45:d3:ce:6e:39:23:8a:69:e8:5e:
                    70:05:0a:bb:7e:1d:c4:1a:54:24:4f:1c:74:8a:ed:
                    9b:45:60:50:24:6e:d4:02:6b:bc:e2:45:5e:57:73:
                    28:e1:35:27:81:18:5c:2a:ec:0a:e1:8c:a9:86:6b:
                    84:fd:4d:1e:c1:01:8f:aa:ff:a6:c7:a1:95:ab:7a:
                    ca:37:f1:03:b6:9c:5d:d9:d1:db:fc:3b:14:bb:e5:
                    34:31:6d:2a:dd:db:c2:52:24:7a:30:34:0a:6f:ae:
                    67:7f:76:17:b1:6f:fb:75:da:26:4a:48:aa:bd:87:
                    c7:2c:b6:ca:a7:d9:30:a2:01:48:9e:dc:4d:72:64:
                    da:a8:f5:02:5a:6b:81:88:68:91:f7:6a:03:42:f0:
                    89:d9:60:c9:73:8b:bc:da:41:2b:7c:86:fe:df:52:
                    c5:eb:1f:e7:36:cc:04:26:b2:09:a5:40:57:62:34:
                    b3:3e:ee:e4:4c:c1:54:fc:13:f7:be:11:de:45:f2:
                    06:c6:0b:9a:93:ed:d3:63:f9:e6:46:e1:71:2e:0b:
                    e5:23:58:9a:31:d4:da:2e:85:1e:2c:3e:31:e4:86:
                    32:fc:4a:90:a7:53:b1:1a:80:06:65:0a:bd:5e:fe:
                    38:9f:28:bc:09:8f:e2:87:5c:69:84:45:30:ca:8c:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5E:0B:E7:8E:88:51:1D:0D:BF:3C:46:DB:87:0D:C2:68:6A:CF:0D
            X509v3 Authority Key Identifier:
                keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:77:1c:df:ca:7d:0f:65:3d:4b:68:4a:9b:fa:e0:d8:a2:
         f5:2d:af:91:fd:8f:64:2a:3d:de:db:40:93:ee:e3:1b:ee:bc:
         ed:cb:79:73:07:dc:f8:97:7d:24:cf:ca:a8:7c:b6:23:6a:22:
         1b:88:69:0f:9e:7b:84:4b:79:79:f9:c5:84:fa:e5:ef:a3:96:
         4b:1d:bf:8d:3c:92:fa:30:25:f9:f4:eb:01:24:15:82:b4:b3:
         e2:b5:f6:34:0f:69:ab:e9:a4:a0:40:a0:97:f0:23:87:7c:95:
         51:63:14:89:b7:b5:ea:11:98:3c:1f:71:ad:d2:12:59:24:5f:
         b9:12:d9:02:53:a1:45:4d:bd:db:fa:36:78:65:4b:b2:a4:e1:
         e7:bc:1e:35:9f:50:af:48:c0:05:fe:9f:1a:47:df:6e:50:36:
         96:3b:fa:23:20:f1:53:71:c9:62:0c:36:82:a2:d7:5b:3f:ba:
         b2:17:a2:ba:d1:ff:23:a4:7a:48:9c:18:c4:b5:ce:0d:b1:6a:
         74:53:ea:8f:6c:e4:f4:a4:11:38:3d:3a:7e:44:8a:73:b4:9c:
         ad:46:1e:8b:7b:b1:f3:f1:cc:4b:f5:72:6a:b3:97:7f:f1:3b:
         9e:8c:a2:8c:f7:15:09:2c:45:a2:7b:cc:1b:7d:f3:3c:ee:d3:
         f3:af:2b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0HrKvWYDzgy7jqsqh1JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTRmZjZhY2IxODBlNjA0OTczYTUyODdlZjBhOTJlNjZk
ZmNjZTkwHhcNMjYwNzI4MTMwMTAyWhcNMjYwNzI5MTMwMTAyWjAzMTEwLwYDVQQD
EyhlNDVlMGJlNzhlODg1MTFkMGRiZjNjNDZkYjg3MGRjMjY4NmFjZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVFfdEXTzm45I4pp6F5wBQq7fh3E
GlQkTxx0iu2bRWBQJG7UAmu84kVeV3Mo4TUngRhcKuwK4YyphmuE/U0ewQGPqv+m
x6GVq3rKN/EDtpxd2dHb/DsUu+U0MW0q3dvCUiR6MDQKb65nf3YXsW/7ddomSkiq
vYfHLLbKp9kwogFIntxNcmTaqPUCWmuBiGiR92oDQvCJ2WDJc4u82kErfIb+31LF
6x/nNswEJrIJpUBXYjSzPu7kTMFU/BP3vhHeRfIGxguak+3TY/nmRuFxLgvlI1ia
MdTaLoUeLD4x5IYy/EqQp1OxGoAGZQq9Xv44nyi8CY/ih1xphEUwyowp/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOReC+eOiFEdDb88RtuHDcJoas8NMB8GA1UdIwQY
MBaAFOpU/2rLGA5gSXOlKH7wqS5m38zpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMt
NDNjOGY4YjJjMzg0LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMtNDNjOGY4YjJjMzg0
LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1J3HN/K
fQ9lPUtoSpv64Nii9S2vkf2PZCo93ttAk+7jG+687ct5cwfc+Jd9JM/KqHy2I2oi
G4hpD557hEt5efnFhPrl76OWSx2/jTyS+jAl+fTrASQVgrSz4rX2NA9pq+mkoECg
l/Ajh3yVUWMUibe16hGYPB9xrdISWSRfuRLZAlOhRU292/o2eGVLsqTh57weNZ9Q
r0jABf6fGkffblA2ljv6IyDxU3HJYgw2gqLXWz+6sheiutH/I6R6SJwYxLXODbFq
dFPqj2zk9KQROD06fkSKc7ScrUYei3ux8/HMS/VyarOXf/E7noyijPcVCSxFonvM
G33zPO7T868rrg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:34 2026 by rpki-client