Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          8KMi5Q5964U8G75H8sRrj0Mt9EAH7Gn/6RwOZ8huKfU=
Subject key identifier:   38:FA:77:26:D8:88:5F:C1:CD:E3:BB:54:15:62:47:87:56:BF:8D:45
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       019FA8D0884FD498E06231E2F5DAA81E7410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 13:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:06 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: qHvLqwfsM/BWpoT3QKhp+CB6BOV6UAv9qlfuBD0BAS0=)
                          2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:88:4f:d4:98:e0:62:31:e2:f5:da:a8:1e:74:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: Jul 28 13:01:06 2026 GMT
            Not After : Jul 29 13:01:06 2026 GMT
        Subject: CN=38fa7726d8885fc1cde3bb541562478756bf8d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:dc:cc:e8:20:07:93:20:bd:16:86:17:51:
                    93:af:2e:1d:9c:f8:97:7a:47:3c:0b:dc:7a:13:cf:
                    f9:0d:66:a2:b7:49:c5:68:83:6a:c9:74:e3:ec:ae:
                    84:0e:88:a8:bd:a1:b2:9b:ac:bb:a7:7c:b8:ca:5f:
                    e3:f3:f1:4e:2a:42:9e:01:7e:81:08:c3:fa:66:7c:
                    07:e8:54:b4:6e:a6:c1:8e:fb:95:17:55:ed:f1:26:
                    f9:c5:54:be:8c:3d:62:7f:fd:88:6f:cb:dc:9d:74:
                    4f:45:0f:f3:7c:5e:20:3a:b2:5e:02:ae:e3:a6:fc:
                    02:e9:66:5c:a4:9f:34:2f:35:04:2a:71:48:0f:f7:
                    0d:7f:eb:e2:b2:11:30:11:a2:f3:69:1b:6d:1f:ab:
                    2f:e8:51:71:a4:6a:09:46:bb:6c:06:46:f1:cf:ca:
                    d5:b1:71:31:47:77:71:16:f5:52:59:0b:61:01:03:
                    88:2b:bb:10:06:18:51:0c:f8:c8:1b:21:ba:ab:59:
                    da:67:90:8a:58:e0:ad:9d:78:18:af:06:f8:c5:b1:
                    0a:ba:b5:34:b2:b0:d7:51:9d:72:6a:02:33:1f:fc:
                    f5:d5:62:85:71:37:77:02:c7:cf:93:86:0c:21:96:
                    21:fc:b1:4b:45:cf:f3:34:c2:cd:69:23:8a:3f:97:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FA:77:26:D8:88:5F:C1:CD:E3:BB:54:15:62:47:87:56:BF:8D:45
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:79:f5:4f:83:13:b4:c9:92:be:51:6e:34:09:46:3d:87:
         0b:99:d6:0b:90:7e:1d:ce:56:fc:6c:b4:96:74:78:7a:39:41:
         c5:f4:fc:78:1d:11:08:4f:39:4e:67:79:5e:2c:7d:0f:9f:02:
         cb:e1:b0:66:1a:8d:c6:3b:f3:c0:3d:cd:84:6c:27:c8:e5:d6:
         e9:53:6e:c6:2d:17:52:c9:54:74:93:4f:8f:ce:e0:d8:42:b0:
         a5:a0:0f:6e:a6:a1:c3:e8:cf:6a:c8:89:c0:b8:d4:7b:2a:3c:
         eb:e7:c9:16:83:8d:ba:18:d5:17:00:77:57:b1:16:8a:6b:83:
         f2:10:44:98:fa:e8:c5:f0:a6:81:2a:f4:c7:8a:64:7b:ed:0e:
         76:d3:76:13:1f:9a:50:bf:2d:c3:83:d1:a2:2d:c7:1e:d7:41:
         a1:7a:95:58:61:37:b6:e2:72:8b:9d:94:c7:41:dc:03:25:33:
         b3:c6:03:cb:78:7c:d0:a1:cb:c9:3e:e1:32:66:ff:88:7e:f9:
         b3:82:2c:5d:48:c0:6d:b8:0b:4a:3f:74:5c:9e:b5:b0:2a:81:
         47:47:51:13:fb:5f:42:30:32:fa:cb:a7:3a:58:4c:66:e4:68:
         64:d1:6a:60:33:af:96:9f:08:b2:10:a0:2a:b4:f8:1a:d1:c7:
         d4:14:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:23 2026 by rpki-client