Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File:                     T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier:          JVMr93jdfgv+qFoB5xZpGM/3LhEPIBJSeDS8+TlrETE=
Subject key identifier:   85:CD:0E:24:08:4E:A7:AA:16:7A:16:62:25:D3:29:22:93:CF:FC:4C
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer:       /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial:       019FAD8867CAD296F09981E24B5651659018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number:          1186
Signing time:             Wed 29 Jul 2026 11:00:25 +0000
Manifest this update:     Wed 29 Jul 2026 11:00:25 +0000
Manifest next update:     Thu 30 Jul 2026 11:00:25 +0000
Files and hashes:         1: 1-fdA80vwB8QxT5lkCIFf5hjQbMA.asa (hash: 9ypUqa2zkZw726QAoxATVJLsvd8D7CC1vo66AOondLg=)
                          2: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: 19+VXQ/JVu3UA0NBMSoTq9SD8RDu5V3XLsMcxfQ4K4M=)
                          3: _Tm3qrECzPezIfgQFfA3nySl1es.roa (hash: rBkCC8V4vfJZ7RekKKwrg+MhibDVuZ/LjndlBlPdu+Q=)
                          4: _q-CP9vVp7ZOCkbVBtsfOnAJ9FA.roa (hash: XNxgADpEzkzVftJcT8a6amX7H8EAtDuMWz2MBkIT+/M=)
                          5: cjcrwUR9cOViEeTeD6CkQ1Oxg-8.roa (hash: baKzNTEyrVEeukgFUaF5YXuq3MR7DZq0UgoZTBymKqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:88:67:ca:d2:96:f0:99:81:e2:4b:56:51:65:90:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
        Validity
            Not Before: Jul 29 11:00:25 2026 GMT
            Not After : Jul 30 11:00:25 2026 GMT
        Subject: CN=85cd0e24084ea7aa167a166225d3292293cffc4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:d4:3d:9a:8b:19:18:cf:72:ed:fe:98:26:
                    69:ff:c5:ab:e9:e3:24:19:78:81:3a:5d:18:43:a5:
                    ec:49:99:51:0b:b9:28:03:43:87:82:ff:b4:8c:03:
                    a6:8e:34:a7:e0:29:ea:7b:57:f3:d8:6c:45:2a:cb:
                    f0:79:e6:05:ce:f5:0b:a2:d1:01:38:bb:2d:26:e3:
                    91:17:c2:6b:b3:e7:4f:b6:f6:4e:6a:f6:9a:1b:12:
                    9d:7d:ce:82:17:ee:90:b2:12:cf:26:80:9a:8a:5b:
                    9d:19:db:aa:0f:82:84:db:e3:b2:6d:85:ba:c5:a2:
                    e5:29:d1:cf:66:f7:a6:40:ef:78:d6:bc:8c:c9:7f:
                    1d:6f:96:23:b0:8c:35:91:c2:63:0a:79:5c:b8:16:
                    ce:01:c6:2f:04:e3:36:a1:50:ec:d1:0c:28:7e:ad:
                    0d:cc:56:2e:42:ec:22:aa:1b:5d:5c:31:9f:dd:db:
                    5b:92:54:8f:e7:9f:db:04:93:41:14:db:d3:33:49:
                    f4:8c:9b:b3:7f:63:fd:da:6a:5e:14:00:03:4f:72:
                    28:71:a8:fa:47:06:3e:7f:95:fc:78:3c:33:30:56:
                    30:52:1e:e9:e3:7a:8f:3b:ca:1b:3d:bb:99:c2:52:
                    23:79:e0:36:0e:f1:61:f8:f3:97:2e:96:44:4a:18:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CD:0E:24:08:4E:A7:AA:16:7A:16:62:25:D3:29:22:93:CF:FC:4C
            X509v3 Authority Key Identifier:
                keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4b:b5:88:2a:2a:9e:64:90:4d:df:cc:94:cb:2d:c1:ea:37:
         39:65:58:69:29:41:31:7b:7c:c9:72:e1:8b:71:5e:bb:a6:13:
         21:a8:ad:54:7f:4e:8c:f2:25:ab:9d:24:01:40:78:99:a7:ef:
         23:54:db:a9:f6:87:ff:52:29:3a:25:61:b2:93:4b:a9:19:2a:
         20:fb:b4:c2:b7:ca:50:62:30:c0:72:02:17:a3:06:78:ec:d7:
         f7:f5:c6:a4:89:0e:75:a4:22:ef:02:b2:b9:78:c2:06:d7:e4:
         de:56:12:27:33:dc:ae:8b:d9:95:71:02:44:80:d7:7e:57:19:
         06:8f:0c:58:7b:15:68:f6:79:b6:b7:22:81:ef:f1:30:da:f8:
         b1:41:b0:0d:df:9a:35:d4:8d:99:ec:58:e2:ae:1c:5e:cf:d1:
         d2:af:e8:f3:4b:81:e5:b6:bf:3c:62:87:72:01:88:7a:49:70:
         f6:1e:74:dd:eb:25:c0:6a:ad:fa:20:42:4d:f7:da:5b:85:ed:
         74:fe:40:77:fa:d4:8c:e8:d5:69:df:48:d5:fb:06:4d:9d:19:
         58:f0:60:a1:04:ab:a3:3e:09:88:fb:79:32:3e:c2:4a:48:f7:
         2b:35:3a:30:93:77:f1:a8:4a:8e:35:a6:5c:3c:d0:f6:3c:83:
         e1:d1:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:07 2026 by rpki-client