Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File:                     e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier:          +aEElhLwgqCKYLll+JReL5GTBiQoLphOogtniDORyM4=
Subject key identifier:   87:D6:E9:A9:24:85:FB:3B:EA:3C:F0:8A:7C:81:3F:E5:C3:5B:61:7E
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer:       /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial:       019F9F5F7E3622D9CCC207B783E68F38DBBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number:          19D2
Signing time:             Sun 26 Jul 2026 17:01:03 +0000
Manifest this update:     Sun 26 Jul 2026 17:01:03 +0000
Manifest next update:     Mon 27 Jul 2026 17:01:03 +0000
Files and hashes:         1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
                          2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: 6fnQxdHUlEdNSDP6skGdrcm0q++lrEShqf846/Q3BpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5f:7e:36:22:d9:cc:c2:07:b7:83:e6:8f:38:db:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
        Validity
            Not Before: Jul 26 17:01:03 2026 GMT
            Not After : Jul 27 17:01:03 2026 GMT
        Subject: CN=87d6e9a92485fb3bea3cf08a7c813fe5c35b617e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:80:5e:a9:17:42:dc:2b:ab:50:5e:10:d2:
                    19:e0:4f:33:2e:d0:1a:db:fc:2e:02:d5:e6:dc:af:
                    6b:6c:a3:5f:b1:c9:90:f4:b2:59:14:fe:5a:70:b1:
                    39:79:89:f0:38:81:2b:51:29:7d:76:dc:dd:e5:68:
                    ef:3e:96:0f:88:13:88:0e:fb:a1:a3:54:96:71:f5:
                    78:49:f8:ab:e6:85:73:ef:f6:1d:58:43:35:46:88:
                    b2:69:88:b7:6e:93:d1:3e:de:a7:19:fd:36:43:65:
                    ce:71:52:19:44:ac:e3:c4:8b:17:ff:9a:5f:b0:bb:
                    57:b7:f0:c1:bc:a5:d9:8b:a1:d2:51:6c:4e:6c:82:
                    98:8c:48:c9:f1:e7:2c:f6:95:a6:61:c6:fa:cc:0e:
                    f3:30:2f:87:5f:a1:e2:5c:15:03:0b:cf:5c:6c:7b:
                    1e:4a:ba:98:51:68:9d:a5:fd:59:8b:15:e6:c2:d7:
                    ee:ba:00:87:f0:6a:45:0d:3d:26:68:a4:e9:7b:51:
                    4b:22:68:a5:fb:6e:0b:a1:59:14:0d:31:cf:4e:3b:
                    f9:78:07:5d:51:b3:f0:90:33:f9:f9:29:39:06:5a:
                    74:b8:36:0f:a8:9b:ae:0f:ed:98:22:a0:bc:70:0f:
                    a6:1e:92:d3:9f:8d:45:91:ba:c9:77:b2:12:2e:b6:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D6:E9:A9:24:85:FB:3B:EA:3C:F0:8A:7C:81:3F:E5:C3:5B:61:7E
            X509v3 Authority Key Identifier:
                keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1b:3d:e5:75:99:db:46:20:e3:41:17:d2:f1:7a:ea:63:34:
         39:6a:c8:ed:68:c3:6e:62:55:ad:51:6b:90:ac:03:9d:cf:63:
         31:11:3b:0d:c2:cf:0b:fe:78:bd:66:1e:29:81:b6:41:89:4c:
         86:45:26:14:4b:32:15:62:b9:0c:f4:cf:85:a7:c8:d5:7a:35:
         99:b0:12:9b:83:af:c8:6d:1b:0f:50:85:0e:45:1c:2a:48:a6:
         1c:53:ae:b9:03:6a:7f:48:e1:ff:e0:8c:0d:7e:05:bc:43:a8:
         78:61:4c:e2:3b:c7:aa:c0:33:9d:0d:d9:7f:df:9c:10:b9:b9:
         2d:80:dd:0b:31:f0:5e:ff:9d:c0:03:e3:17:44:d1:e7:20:48:
         b1:a5:1c:31:c8:55:23:cb:aa:bb:1e:37:f8:71:df:bc:7e:67:
         fb:dc:e3:ef:43:02:c7:0f:26:91:0b:bb:63:4b:a3:a1:87:09:
         8f:92:f7:58:fa:bb:08:da:08:3c:a9:ed:ae:b4:0a:66:f8:f1:
         3e:3e:4e:48:c3:57:7e:b5:ef:53:6e:ec:a8:d8:f4:30:ab:e4:
         95:d0:c3:6c:5e:b8:44:8c:b9:65:98:e0:64:3d:e9:05:d6:0f:
         50:8a:18:7a:2f:5b:c4:b6:b1:a1:e5:1f:8e:00:b8:b8:fc:b9:
         ff:2e:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:16 2026 by rpki-client