Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
File:                     6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft (raw, json)
Hash identifier:          40Ime4HfNUhx7JBRKfvFCGO2ffFnI/gtDwTDR/smURM=
Subject key identifier:   18:B7:91:B3:E9:7F:4E:EE:B3:38:7C:51:CF:F0:13:18:4A:92:C6:BE
Authority key identifier: EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4
Certificate issuer:       /CN=ebf371e509735990943b73a85e470f3ea0a41db4
Certificate serial:       019FF9B65C8C2DEF6BC319A76B81EFC83B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
Manifest number:          76
Signing time:             Thu 13 Aug 2026 06:01:45 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:45 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:45 +0000
Files and hashes:         1: 6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl (hash: kLmKvfKW9gSYEfwo53/C8aR1vo+/DhPBuG7UWYVra8M=)
                          2: ZLkUyts_ik035FHPNwJmjLRIrPI.asa (hash: SPbBsWohroURBEl28DxtmNiba7IFZbUfgRRzWaEzxEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:5c:8c:2d:ef:6b:c3:19:a7:6b:81:ef:c8:3b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf371e509735990943b73a85e470f3ea0a41db4
        Validity
            Not Before: Aug 13 06:01:45 2026 GMT
            Not After : Aug 14 06:01:45 2026 GMT
        Subject: CN=18b791b3e97f4eeeb3387c51cff013184a92c6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:6d:12:33:8b:01:a5:a5:0e:a3:9b:b5:8a:
                    dc:0b:96:36:95:76:cc:e4:f5:c7:0c:10:83:fc:bd:
                    62:a2:87:e1:b6:6a:72:d1:62:ba:9b:e9:fc:f6:d7:
                    4b:4d:30:79:ad:61:83:94:a9:1b:51:a6:50:65:22:
                    c1:a8:ef:b2:2c:e6:f5:f6:03:bb:0a:e5:39:57:a3:
                    62:f3:e9:7c:f4:9e:65:ea:12:e2:90:72:f9:51:51:
                    68:ff:cf:11:39:dc:62:4e:4b:dc:0e:de:f2:63:9a:
                    15:b3:8e:28:90:a9:27:8c:bb:9d:6f:db:21:30:5e:
                    b2:4f:cd:d0:f6:97:1e:cf:2d:91:f5:91:0f:ce:15:
                    23:27:ff:85:e7:89:cd:06:10:d1:0c:8e:85:cb:52:
                    53:92:db:2f:32:87:03:8f:4f:89:91:c6:95:c2:07:
                    26:43:3e:96:15:fe:34:0f:19:8a:5b:ac:45:84:55:
                    b3:e8:22:18:5b:e9:76:ec:f9:72:01:6b:64:c4:18:
                    1c:06:4f:cd:09:4e:90:ec:00:5f:99:d1:d4:41:75:
                    ee:a7:3d:f5:5f:67:93:68:3c:a7:c7:60:56:1f:7c:
                    f3:32:c6:64:ab:15:98:fb:a0:de:5a:5a:ac:fc:80:
                    bf:13:49:f6:a3:f5:da:6d:92:9d:a7:d8:65:4c:f5:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B7:91:B3:E9:7F:4E:EE:B3:38:7C:51:CF:F0:13:18:4A:92:C6:BE
            X509v3 Authority Key Identifier:
                keyid:EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:73:8d:67:f6:e6:02:bf:0a:43:37:34:78:95:63:ab:54:52:
         88:76:f7:ac:67:88:7e:af:07:be:e2:85:f6:ca:0f:e5:6c:2a:
         f7:94:17:92:ff:a2:cd:87:ef:1d:f3:98:72:ef:64:80:1a:68:
         7b:6c:b5:75:a0:96:f6:0d:a6:19:99:0b:2d:0b:30:7b:3a:72:
         bc:14:8a:e3:be:af:29:ef:c9:5d:2f:fc:bc:49:a1:d5:be:e0:
         41:8b:04:7a:52:b4:24:d1:50:35:bd:2a:7a:2c:0d:55:96:7f:
         fb:2e:52:0e:80:8d:70:90:fe:71:08:21:2c:f9:e8:4a:5c:e9:
         ab:9c:6b:b2:be:8e:88:b4:d0:86:6d:36:bf:90:97:cc:1b:bc:
         1f:28:80:c5:66:dc:18:19:4d:0c:ae:31:af:ee:6b:80:3d:78:
         c0:9b:b2:94:06:37:c5:67:2c:47:4c:5e:9a:08:6f:7b:ab:e7:
         2d:4c:13:30:31:bb:57:0a:98:c6:1f:f7:0e:9f:dc:31:a8:67:
         5c:0b:d7:73:e5:41:86:46:80:b2:17:53:9b:a6:25:dc:25:b2:
         12:21:65:4c:f0:03:a3:fa:d2:20:d9:d0:a0:9d:4b:e1:b5:34:
         75:cf:8d:bd:81:28:58:9d:db:c4:ea:1f:03:1e:2d:f2:44:22:
         01:0d:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:07 2026 by rpki-client