Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File:                     6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier:          pjiYHsRrK61UnuhrZX/edJRVQZpS3UB6Gx6GS/R/bTI=
Subject key identifier:   7C:2B:76:97:7E:31:5E:1C:70:37:4E:07:12:29:F2:2E:47:F5:0C:8C
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer:       /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial:       019FAB640710A53EB8AFF32C29C166C21A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number:          12D7
Signing time:             Wed 29 Jul 2026 01:01:27 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:27 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:27 +0000
Files and hashes:         1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: CXQn6Yx9DOC3I6pIbHcFKVDwArQAbuXOvTQHaeMXFr0=)
                          2: SEhILHygTvrckViFuTbzVqD8wFo.roa (hash: YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=)
                          3: mb-aWZ5_d3ag789UTUZQ7IaflbA.roa (hash: hsap3kqEKhxhExKW9nXN0i5BJCJKmqUW77rfHPyUXL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:64:07:10:a5:3e:b8:af:f3:2c:29:c1:66:c2:1a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
        Validity
            Not Before: Jul 29 01:01:27 2026 GMT
            Not After : Jul 30 01:01:27 2026 GMT
        Subject: CN=7c2b76977e315e1c70374e071229f22e47f50c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:e2:1e:77:a7:c2:d2:d9:a3:3e:28:e5:fc:
                    55:0e:a6:1b:e5:13:73:58:ac:45:d2:55:5b:4a:1e:
                    00:8b:29:a5:67:d7:a1:7a:5d:b6:68:4d:be:bc:36:
                    f0:91:c2:c8:28:55:3f:42:24:2b:42:0d:ff:6e:21:
                    d6:9a:df:7a:c0:84:6b:a8:a1:be:1e:3f:95:12:e7:
                    1c:f1:de:24:37:3c:8f:63:6e:32:aa:2f:49:ae:05:
                    07:da:1c:04:24:de:a4:22:52:2b:ae:49:89:3e:90:
                    15:44:dd:47:75:92:e1:f4:e7:c8:70:25:4e:96:2a:
                    f0:4d:35:6a:74:93:20:94:bf:25:d7:2d:c8:a3:c7:
                    94:a9:b1:48:87:0b:e4:08:29:b7:74:b6:1d:d5:a8:
                    f4:27:cb:15:7a:8d:6b:17:75:65:d3:05:32:cb:ca:
                    82:e5:a7:a9:8d:98:2d:2b:c0:1d:ee:85:08:b5:70:
                    1e:a8:5c:03:77:0d:80:1d:fa:b3:24:cf:9f:19:fd:
                    a0:c3:39:e2:7b:e4:39:c9:16:8b:c2:7e:d6:34:3b:
                    2c:26:74:01:59:96:29:ff:a6:ed:8e:09:d1:4a:96:
                    02:5e:7e:c8:a8:c9:4d:3d:e2:f4:23:ec:7f:37:b2:
                    32:d4:66:1f:a8:cd:bb:38:42:48:7c:97:bc:d3:07:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2B:76:97:7E:31:5E:1C:70:37:4E:07:12:29:F2:2E:47:F5:0C:8C
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:85:06:01:dc:67:50:d6:85:58:82:b4:8e:4e:6f:e2:fe:48:
         09:fd:c0:7b:6e:aa:e8:55:2b:f9:62:ef:24:09:3f:ad:35:a6:
         67:b8:79:7e:46:3b:d3:13:c8:b0:a2:04:09:05:d8:7c:40:ab:
         0e:eb:7e:12:80:62:ea:77:50:9c:5f:d7:8b:6a:ff:92:6f:2a:
         e1:33:5b:ea:de:87:76:e4:30:b5:f2:93:8e:25:1b:56:f6:19:
         d7:64:cb:3c:1f:fb:8e:33:9f:55:18:e2:58:e4:02:45:e5:38:
         59:f3:65:83:65:2e:c8:77:f4:4d:7f:05:2a:3d:0c:49:f8:ae:
         e1:1d:6d:1f:09:92:fe:6a:06:7a:b9:52:29:3b:6e:2a:44:b0:
         87:36:73:6b:93:6e:0d:34:e8:25:70:bb:be:75:de:fe:f8:b9:
         89:1b:c1:14:7b:ea:4c:b0:dd:ea:34:c5:d4:65:7c:f7:10:d7:
         26:3c:99:8b:b3:ca:92:1b:f9:0d:46:a6:fa:fc:5c:48:5f:61:
         81:44:0a:f4:7c:a6:c8:7d:00:23:06:ee:ae:c3:1b:fb:68:74:
         78:d5:54:18:f1:97:11:5f:73:25:01:db:ab:e5:dd:75:0e:01:
         55:c5:ed:fa:bc:17:89:73:5e:a7:9f:5b:d8:ef:d8:8e:88:e6:
         11:18:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:31:54 2026 by rpki-client