Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File:                     6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier:          fXp1XuI1d/RVKsF3lfsa485s+M+nrkzIlwr8821wCRo=
Subject key identifier:   DD:A2:CB:37:CF:80:04:7B:12:5F:75:62:03:1A:10:F5:96:C9:12:BB
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer:       /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial:       019F86B272042F0F9C7F3E48E8833AB17CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number:          18C7
Signing time:             Tue 21 Jul 2026 22:01:09 +0000
Manifest this update:     Tue 21 Jul 2026 22:01:09 +0000
Manifest next update:     Wed 22 Jul 2026 22:01:09 +0000
Files and hashes:         1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: UaskYYPBxX1nBbucBK1QyJWKBbf62yTu09LBeJl7UOY=)
                          2: 6tKCB_wkIxXU6hzE6_HbzbLSnRk.roa (hash: qGVajF5H+47Haw7fSlS2S4yS6iBrCwjpFhlgTElC1Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b2:72:04:2f:0f:9c:7f:3e:48:e8:83:3a:b1:7c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
        Validity
            Not Before: Jul 21 22:01:09 2026 GMT
            Not After : Jul 22 22:01:09 2026 GMT
        Subject: CN=dda2cb37cf80047b125f7562031a10f596c912bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:b8:6b:95:3c:f0:da:6e:81:2a:32:05:27:
                    75:b2:df:09:ea:39:cf:1b:76:0b:6a:a2:d8:4f:71:
                    23:9a:33:4e:35:86:01:01:6c:23:ff:73:02:64:c2:
                    a3:95:54:2a:38:3e:8c:02:43:41:53:5c:6e:35:ff:
                    a7:47:c1:2f:ca:d9:d2:7b:9f:d9:da:72:c3:d3:5f:
                    3c:93:f5:11:85:b1:a4:4c:90:3b:8c:ad:1f:07:76:
                    5c:ac:02:44:0e:41:1d:fd:3a:cb:79:dd:a1:48:27:
                    b7:82:e4:e0:e1:a1:44:9c:f0:4e:a9:69:09:eb:99:
                    07:c1:35:9c:b9:84:41:96:f9:0b:01:32:5c:b9:03:
                    2f:63:44:ee:73:cc:53:94:d1:ac:68:e3:93:58:a5:
                    b7:18:d2:2f:0c:24:10:6e:90:57:23:d2:e0:3c:84:
                    ae:ab:a2:d6:6f:b7:2e:c9:6b:8c:cf:dd:cd:d0:6b:
                    1e:0e:e7:d5:78:26:fd:31:d1:44:96:13:81:f9:16:
                    1e:0c:93:4d:53:cc:36:ca:d8:2e:3f:21:d9:95:e2:
                    2a:f6:d3:b7:19:0e:60:3e:3c:94:92:dd:12:da:8e:
                    cf:18:e9:0b:6d:61:5d:9f:3a:3b:83:c9:d7:76:1b:
                    b0:fc:2a:7d:b4:36:eb:aa:d0:2e:8e:ef:2a:87:3e:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:CB:37:CF:80:04:7B:12:5F:75:62:03:1A:10:F5:96:C9:12:BB
            X509v3 Authority Key Identifier:
                keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:74:80:76:df:51:db:03:67:7c:b0:92:52:a8:57:84:01:3c:
         3a:e8:2d:5b:39:28:ca:ff:93:67:07:03:5f:54:e6:84:ed:14:
         55:67:6e:63:e3:b5:34:31:e0:74:c3:84:b8:5a:bf:f0:fb:2f:
         cd:fd:13:25:ac:54:54:85:3f:6d:ed:c2:52:2c:b3:21:ee:0f:
         57:58:c1:7e:f4:3f:56:fa:3a:09:c3:24:5d:00:65:b4:70:3d:
         6a:09:a9:07:54:45:e5:f1:9c:f4:65:27:ff:2b:09:b8:b9:ce:
         b1:76:71:7f:df:55:76:a9:84:8c:92:19:06:de:68:ec:e8:b8:
         64:82:e9:10:e7:19:e4:b2:79:31:93:53:36:e1:8d:dd:bc:cd:
         c1:f8:68:4a:72:7b:a6:8f:0e:c3:c4:6c:d0:4c:e3:ea:88:0f:
         f7:83:02:ec:58:72:24:be:90:06:ca:c7:bc:af:6f:69:c6:96:
         dc:87:25:98:23:aa:b8:25:65:d7:d0:fd:0a:5e:6d:db:e2:fe:
         c0:b1:69:2b:5c:5e:f6:e6:3e:ab:a4:3a:1c:83:f7:a7:60:fe:
         ba:d0:75:b6:38:0d:b3:ad:10:70:00:1c:a2:c6:a0:ff:2f:26:
         12:a0:73:80:12:c7:99:2c:ef:22:5e:ab:b9:79:f6:03:ee:92:
         5c:94:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:04:50 2026 by rpki-client