Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
File:                     j6VObsfsEXOqJ66PZpoFuPEgti8.mft (raw, json)
Hash identifier:          oI9/vMa3WSvIjWoYwlYEuFzySlzEUScneEhC5De1bcM=
Subject key identifier:   62:32:BF:A7:BE:32:8E:89:29:BC:1A:25:1A:FA:E9:55:01:4C:5A:99
Authority key identifier: 8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F
Certificate issuer:       /CN=8fa54e6ec7ec1173aa27ae8f669a05b8f120b62f
Certificate serial:       019FA0E0765F92B7731BFF6D212B39071DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:32 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:32 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:32 +0000
Files and hashes:         1: HpSNuerWy6MFY6ulRBojWGdkNVY.roa (hash: PEL0oIsbOyso4/AT0pd3UuuxgjMRhI8GJOSmJ1Ns31Y=)
                          2: j6VObsfsEXOqJ66PZpoFuPEgti8.crl (hash: w43iXbBXdTO8/alfAGGtdlBv5YaE46ZYWxa+Sx9/NnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:76:5f:92:b7:73:1b:ff:6d:21:2b:39:07:1d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa54e6ec7ec1173aa27ae8f669a05b8f120b62f
        Validity
            Not Before: Jul 27 00:01:32 2026 GMT
            Not After : Jul 28 00:01:32 2026 GMT
        Subject: CN=6232bfa7be328e8929bc1a251afae955014c5a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:14:3c:6e:bd:28:bf:37:1d:e8:82:16:9c:
                    5b:35:37:90:ac:a6:96:51:9a:ca:02:cd:c9:55:ce:
                    e0:30:ed:10:a9:00:18:2b:78:fb:50:36:10:57:fc:
                    e0:21:2f:0a:97:74:1f:3a:27:26:b4:c8:65:43:c5:
                    80:dc:2a:63:88:e0:f4:2d:26:b4:7b:2c:bd:89:90:
                    01:ee:3a:e5:ba:8a:0e:6c:c1:fd:ad:a6:da:0d:da:
                    d8:4c:e0:29:ed:b4:d5:79:28:dc:b9:1c:d5:e1:70:
                    f7:3e:48:e2:29:55:e8:e7:99:22:bb:6b:5e:65:0e:
                    87:de:9c:46:f7:a9:d5:2a:64:34:7f:1f:ec:17:77:
                    b0:8c:6f:05:a8:65:ba:32:04:e8:cf:bf:e4:5c:b4:
                    17:31:fc:4c:17:bc:6c:7e:09:1f:d2:1d:0d:90:04:
                    80:6a:63:e0:be:11:1d:87:10:20:9f:b2:b9:f6:ce:
                    53:38:47:37:7f:43:0f:3a:9c:8c:29:95:bb:db:85:
                    95:95:15:b2:a3:c1:29:7e:d6:c0:0e:d4:3f:11:90:
                    72:6b:9f:d5:dc:9e:c8:68:c6:1f:a4:74:78:8c:2e:
                    95:6f:bb:71:d7:2b:bf:a8:ad:79:53:91:42:0a:17:
                    a6:8e:5e:f2:47:fb:b9:56:d9:63:65:19:65:2b:eb:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:BF:A7:BE:32:8E:89:29:BC:1A:25:1A:FA:E9:55:01:4C:5A:99
            X509v3 Authority Key Identifier:
                keyid:8F:A5:4E:6E:C7:EC:11:73:AA:27:AE:8F:66:9A:05:B8:F1:20:B6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6VObsfsEXOqJ66PZpoFuPEgti8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/j6VObsfsEXOqJ66PZpoFuPEgti8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:30:08:86:36:b3:ce:3e:9a:36:d8:d4:df:0a:16:b1:fe:
         21:02:b6:4a:32:3f:ec:d3:41:96:52:f5:19:6e:bc:df:f5:da:
         06:ea:ad:a5:c2:88:70:e6:d3:3e:73:26:43:a1:71:bc:f6:02:
         82:9d:d9:43:44:32:2c:0f:26:5a:70:05:8e:17:b5:a4:7e:f1:
         13:d5:72:37:24:c2:d4:65:32:99:69:e5:4e:e1:d4:60:ee:d3:
         74:3d:c3:0f:e2:91:b3:77:bb:d2:42:24:a5:2c:82:50:1f:52:
         48:7f:a5:ae:b0:81:df:16:b7:4b:db:bf:a6:e0:8a:46:b7:f5:
         61:b2:1e:b5:4a:48:fb:2d:d2:fa:8d:91:f2:34:72:a3:08:6c:
         2c:09:14:14:09:b6:48:53:4c:54:90:4b:0b:2b:e4:3d:29:1c:
         f4:3b:f2:1b:b6:ed:3c:a6:6e:7e:e0:e7:a2:df:d6:7f:56:50:
         f1:42:13:27:d8:23:d4:b3:66:fa:8e:68:fc:d5:6b:8a:1c:33:
         d3:9e:f2:4f:6b:4d:0c:66:ee:f5:7c:65:6c:68:13:6f:0d:e2:
         ed:31:02:11:d1:ce:1d:c4:87:2c:6e:aa:75:5a:5a:6c:21:e4:
         d6:e7:9a:3f:d4:e5:54:e0:49:71:99:19:f1:1d:83:3c:18:4d:
         0c:10:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:57:04 2026 by rpki-client