Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File:                     H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier:          /Ipq7TuXW1VhPiO3F+KxjcSg2JNSt7JrFfCGU7MZ2c8=
Subject key identifier:   9C:06:03:80:96:86:E2:A2:A7:21:1C:FA:CD:BD:90:86:42:1E:8E:92
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer:       /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial:       019F8644691967DE187D4137BC65D3312148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number:          0A19
Signing time:             Tue 21 Jul 2026 20:00:58 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:58 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:58 +0000
Files and hashes:         1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: TUFqeEzoeJtfgYRHx68tgCjo8MzoTUF8mMrAj0dBnXM=)
                          2: c4GD0N5ffflgM4WSJFRdKaORXEg.roa (hash: ANDRx+abOUWpKzoyrqtGua8LAFv82Wy6OwjQEBpNXbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:69:19:67:de:18:7d:41:37:bc:65:d3:31:21:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
        Validity
            Not Before: Jul 21 20:00:58 2026 GMT
            Not After : Jul 22 20:00:58 2026 GMT
        Subject: CN=9c0603809686e2a2a7211cfacdbd9086421e8e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:49:33:52:d6:98:61:bb:cd:7f:48:32:72:
                    73:aa:5f:8d:ba:5b:a8:4d:59:8c:20:0d:63:3f:36:
                    17:00:af:34:59:3f:3b:94:f6:56:eb:de:74:ec:38:
                    1b:9e:09:ce:01:dc:0c:5d:aa:6a:2e:1b:96:e4:2a:
                    12:3a:a1:4c:80:f4:21:90:c9:cb:61:3f:6d:f9:06:
                    cc:2f:41:59:9e:0d:c2:b5:e5:7e:33:50:0b:ef:6b:
                    89:79:0f:b7:f1:6e:16:83:6e:e6:0c:5a:d8:02:99:
                    85:a7:54:bd:4a:04:20:64:eb:08:0f:a2:db:35:10:
                    f3:e3:c9:59:03:32:2b:98:dc:96:b3:27:ad:81:7d:
                    c8:4b:0b:b8:00:6b:9a:72:c9:a8:98:60:0e:07:95:
                    b4:0f:5a:04:fd:1a:06:12:e4:14:9b:5e:40:7d:16:
                    d8:4f:2d:e8:63:8e:59:5f:b2:e9:32:74:ec:aa:fb:
                    e6:ea:2d:dd:98:b9:81:02:5c:c8:ee:67:6c:d3:8a:
                    37:9e:ae:64:1c:18:82:f1:60:37:40:bb:ea:88:9c:
                    e1:93:04:f1:9e:ff:d5:bb:dc:44:c2:03:62:20:de:
                    db:ab:b4:b9:cc:fe:42:07:a3:54:95:12:60:56:10:
                    6b:08:12:f4:1e:24:f8:82:43:59:b0:83:35:9c:42:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:06:03:80:96:86:E2:A2:A7:21:1C:FA:CD:BD:90:86:42:1E:8E:92
            X509v3 Authority Key Identifier:
                keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:12:45:fd:07:7c:93:e3:21:3c:28:35:92:1a:59:a9:81:ee:
         8d:cf:03:a0:34:2f:8d:d4:0a:aa:9e:c6:d5:51:50:67:51:c3:
         f2:05:2a:40:53:4b:0a:eb:5e:e6:93:fb:66:87:b7:49:0e:0a:
         6f:9c:3f:3b:90:af:28:92:fd:1f:7c:3b:20:88:f8:78:0b:3e:
         90:4a:34:9d:3c:8b:67:9f:96:4e:f5:aa:9c:9b:b1:64:3d:94:
         74:61:00:f9:0d:10:68:5b:b8:a7:58:35:0f:30:5d:db:a7:be:
         19:27:00:61:ec:10:d6:e9:4f:b5:b0:24:74:c1:ab:10:6d:f4:
         f4:af:d4:d1:e5:8c:ad:d7:b1:d3:62:11:57:2f:05:85:4b:78:
         3a:1b:21:3e:0d:52:4b:09:4e:09:dd:a2:bb:e9:14:61:e3:9e:
         88:eb:01:fd:c7:08:2b:24:f4:1f:35:1e:eb:77:2e:7e:13:d4:
         14:b7:60:46:ad:1e:09:79:22:95:26:6c:55:1a:be:98:0a:5e:
         b3:9c:55:ba:57:28:5a:7e:e1:d9:4b:2b:9a:dd:f5:3a:a5:aa:
         9e:08:00:29:17:ad:4f:a6:30:c3:84:2c:26:fa:c2:af:8f:75:
         5c:a9:51:17:2c:67:d0:a2:04:c7:e4:71:8b:2c:da:88:6a:8c:
         27:cf:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:19:47 2026 by rpki-client