Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File:                     XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier:          6SsLodndgroFWTmQYyW0SJnoLrL9AYWb6/fxNCU+6UI=
Subject key identifier:   0C:C4:6C:B3:36:4F:09:A7:1B:86:DD:B6:67:52:8E:B2:98:CD:20:AD
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer:       /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial:       019FA0722EA340B16D86AC74C5F93BA9D0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number:          0C5C
Signing time:             Sun 26 Jul 2026 22:01:05 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:05 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:05 +0000
Files and hashes:         1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: DUPec4QRuuY8N7+MX/BKw9GeIYRzi8zPgFjL+D3IvUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:2e:a3:40:b1:6d:86:ac:74:c5:f9:3b:a9:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
        Validity
            Not Before: Jul 26 22:01:05 2026 GMT
            Not After : Jul 27 22:01:05 2026 GMT
        Subject: CN=0cc46cb3364f09a71b86ddb667528eb298cd20ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:e5:a8:ba:33:ec:70:c1:41:2c:20:ab:b5:
                    f3:59:eb:e3:3b:ca:24:7a:a9:10:d4:4d:df:ad:06:
                    3b:aa:04:93:61:e0:a3:10:f3:1a:01:95:48:73:9f:
                    5a:01:77:e9:f8:6e:9b:46:b7:18:97:5e:47:a6:88:
                    40:17:4a:3e:67:1d:90:6b:92:38:d3:d3:39:f6:b0:
                    a7:98:8c:4c:09:7b:eb:96:b2:ba:2c:f8:5b:f7:2d:
                    1c:9c:15:ba:5c:db:a6:87:98:da:f4:08:42:a2:1c:
                    c0:17:8c:38:bd:66:b6:91:2d:ec:5f:18:99:05:7f:
                    3e:1b:e5:0f:17:84:2e:73:9c:c8:1e:a5:a8:e0:08:
                    64:be:2f:71:f4:3c:22:5f:81:bf:d0:fd:dc:e5:b1:
                    a4:a8:f3:12:21:dd:d8:95:d1:1d:77:6b:aa:a3:31:
                    96:69:4d:69:2a:77:ca:85:0a:83:48:1f:d3:95:1b:
                    da:5e:2c:bf:46:49:7f:ab:47:ea:b1:02:71:7a:3f:
                    64:63:4b:dd:20:f3:ec:1f:ff:90:02:59:c5:5d:ec:
                    40:03:3c:9b:6b:36:30:a8:8c:a1:9c:fc:35:f2:7a:
                    99:fc:fd:79:a7:87:42:83:57:16:e9:22:6c:78:63:
                    91:34:ab:ac:cf:79:58:74:0f:4e:dd:09:94:1c:68:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C4:6C:B3:36:4F:09:A7:1B:86:DD:B6:67:52:8E:B2:98:CD:20:AD
            X509v3 Authority Key Identifier:
                keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:74:33:15:b1:77:64:6e:6c:46:3f:1a:50:c1:6b:d3:d2:
         cc:a9:ff:fb:f5:aa:83:76:4c:5c:1d:66:20:e5:92:3e:b3:73:
         b8:b5:09:75:9e:bd:27:72:f2:44:ac:71:ce:6a:8e:30:f0:cb:
         77:90:e9:bd:a0:15:8f:ee:47:a3:d8:87:1e:4e:fe:6f:a2:5b:
         30:2c:69:f1:ae:24:d9:c4:a6:4d:68:f6:d2:a1:2f:21:7f:c5:
         34:b5:64:44:55:f2:f8:e1:2d:b2:69:80:90:2f:11:ac:18:05:
         11:32:d6:c4:78:eb:65:94:63:64:81:47:fd:26:e5:52:17:80:
         49:69:18:4f:8a:03:e6:62:93:fd:6c:e8:9e:95:74:f8:84:00:
         52:65:e4:d5:80:50:d9:dd:03:d8:3d:8f:9d:d2:a7:ea:e6:57:
         df:fe:b8:72:1a:56:7d:5e:65:5f:f1:78:44:7a:cc:29:09:c9:
         df:7b:77:e3:48:dd:b9:07:62:b8:1b:c4:f9:e9:4d:1f:9b:19:
         0f:ef:3a:c7:ec:04:45:aa:9f:84:f0:8f:d4:69:f9:da:bc:f1:
         69:52:08:6b:3d:5e:e7:1f:33:b4:f0:15:d8:cd:a9:cc:9e:ca:
         bf:d6:0f:d3:b6:ed:9c:fd:1b:fd:12:89:0e:10:41:3f:77:b8:
         7b:21:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:15:31 2026 by rpki-client