Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File:                     0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier:          5VB96IXqk4dKM5Ne+xUm9YFdfKawK3aewY+ArZqLYH8=
Subject key identifier:   20:0D:06:F2:74:CF:5B:15:A2:86:E8:54:66:2E:92:58:10:D9:9B:66
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       019EB68E73BA47094452D5AA296592830D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number:          01CF
Signing time:             Thu 11 Jun 2026 12:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 12:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 12:00:49 +0000
Files and hashes:         1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: PZjSZOCTk6AuRM3ZEui0EocSnGyp3Dlpy2U0S29iTQw=)
                          2: bgZjNfUqNJfLvDrne-80-oa0Dks.asa (hash: g6WLsZcTMEtXYSR6H+1/qEfCY4HUdqDQOTaDq26hUxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:8e:73:ba:47:09:44:52:d5:aa:29:65:92:83:0d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Jun 11 12:00:49 2026 GMT
            Not After : Jun 12 12:00:49 2026 GMT
        Subject: CN=200d06f274cf5b15a286e854662e925810d99b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:7d:4c:a0:8b:2a:cc:2f:81:b2:d1:d3:f3:
                    24:34:a6:bd:8e:73:86:2b:1d:d7:3f:db:93:cd:03:
                    62:d1:d2:55:7d:b7:db:78:3f:61:ce:ba:b4:d8:b3:
                    db:5b:f8:f7:c9:4b:7c:6b:e9:c8:17:d3:35:0d:f5:
                    35:ef:99:b5:b5:c6:03:79:77:84:ce:9a:b4:6a:c5:
                    ba:1a:91:86:05:e0:a5:92:a5:2b:fb:01:1d:d8:cb:
                    c9:e4:50:bf:aa:98:01:81:f8:75:6a:e7:13:94:fb:
                    5f:fb:b3:88:2b:a9:68:5e:24:8c:ed:92:89:17:cf:
                    db:4a:c0:f0:e0:70:64:4a:80:b7:94:b8:e4:44:c6:
                    f5:1f:b4:c9:92:9e:e0:17:0c:c4:af:de:8c:be:82:
                    35:3f:93:f6:7c:a4:30:e9:98:a6:67:d1:8c:2a:82:
                    9a:71:0a:5b:77:0c:6c:bd:8f:f1:ba:15:51:aa:ec:
                    bd:27:94:37:d3:c8:47:7d:f4:6b:0c:51:bf:23:e8:
                    9f:91:e8:c2:6f:77:b8:d4:cf:2f:1e:d2:a6:9d:8c:
                    01:6d:f0:b4:f0:ac:2f:6b:46:a9:f8:83:b8:d0:c5:
                    92:d4:0b:c6:ed:a0:fd:ae:c3:91:0e:5f:04:fe:1e:
                    d6:72:eb:3d:57:95:78:f7:ef:17:f2:7a:63:97:f9:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:06:F2:74:CF:5B:15:A2:86:E8:54:66:2E:92:58:10:D9:9B:66
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:4a:3d:a3:ee:ad:88:0b:c4:6a:2b:dd:87:c2:8d:10:b8:4a:
         1d:a7:c5:f5:61:ba:36:7a:4a:7c:e3:8f:93:8d:b6:08:aa:b3:
         05:e1:dc:20:9b:56:49:2f:db:51:67:7a:72:0a:d2:29:26:f0:
         21:b6:23:f0:2b:62:30:7c:89:14:98:39:ad:4e:28:1d:b5:4f:
         62:34:17:32:99:2a:b6:2d:d9:66:36:75:8a:cc:70:97:ea:0b:
         95:87:b4:46:63:18:7e:a5:ca:c4:68:d0:4e:26:93:57:3a:16:
         f3:8b:7a:ed:dd:c5:f5:c6:79:bc:f8:12:d0:e7:ba:09:84:c5:
         aa:da:8f:d7:16:47:e3:a0:82:e2:17:eb:67:0e:81:a9:5d:8c:
         5c:aa:69:91:ee:4a:cf:96:be:d7:f8:21:eb:bc:54:0d:ca:e1:
         75:48:3d:de:8a:29:15:34:35:1f:df:26:86:62:06:d6:cf:f2:
         07:b4:02:0d:ff:7a:23:39:1a:28:86:28:b6:7b:5a:c9:01:30:
         eb:f0:c7:3f:25:04:b8:d0:cc:bb:cb:75:3b:2f:ed:ad:c3:f6:
         61:94:03:ce:66:97:31:bc:f6:9c:f4:24:8c:7f:5a:27:37:0d:
         41:8a:e7:56:e7:ab:15:eb:6f:89:a1:24:f1:b2:e7:d3:31:d0:
         8c:6a:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:46:11 2026 by rpki-client