Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File:                     bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier:          Yx2dXFIU63+lA+nDuxyjRH2/EQ8SGETZ1Lr5QNWNujo=
Subject key identifier:   4A:04:B4:AA:40:F1:7E:C9:38:D7:F9:60:8E:B9:1B:0F:6B:52:EB:13
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer:       /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial:       019F867B3CE3ABE0BC134471DECBA2EB900C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number:          10A6
Signing time:             Tue 21 Jul 2026 21:00:51 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:51 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:51 +0000
Files and hashes:         1: 0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa (hash: yajzvHBczLvuRuutMDqrA4C/+S65nBUWHxWPZS+HU6Y=)
                          2: O-In-8EU6bPfnod8wXwR8FyJmbs.roa (hash: uelI0IHExddUnealsb56pd/EXHI/t8Ure6Mfv6igkCw=)
                          3: _vXqV2-g7xwCNYuc9LOG1sJWevM.roa (hash: BJlsW9/rnHnD9aRumzD296n7QaGzXmfbPDZjx3MN9U0=)
                          4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: O+mw2rAOXK7ExQeYn5AkCRMm+rfdmwQC9WdOko1IC0Y=)
                          5: j9TBm7xlc93nIZuNOs3NlUyZzEs.roa (hash: OJvrZsHB8fK3Xgo6IhUOmrDOAtYYR5DtLBMAzJ8x9HU=)
                          6: sv0D0rQ-jLLb0IGeX2ROX93EsFk.roa (hash: EYfC2dmfQZQGj+XZAmvsP8gEvS8pC+VQXFW+zSAWNtc=)
                          7: v1kxLCHFe4rXrYp0W0C1yyln4_I.roa (hash: 6ZjRVf5/3Gwzgj/w23L+ctsJZNRROST71Vpw12YsM/U=)
                          8: xIt8lJJjUgwrnGZj8-M-XAKLM8M.roa (hash: hFlPZerhEkhi26Lu5WKLWffMM3WUMXgzobrQrYJBZfA=)
                          9: xJiK9PyhaAqcxYB8Aiw7Fv_TmaY.roa (hash: l2//kwEVxmYAhAAeP0g1fPw8aXt0cKX6RabVhra8PNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:3c:e3:ab:e0:bc:13:44:71:de:cb:a2:eb:90:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
        Validity
            Not Before: Jul 21 21:00:51 2026 GMT
            Not After : Jul 22 21:00:51 2026 GMT
        Subject: CN=4a04b4aa40f17ec938d7f9608eb91b0f6b52eb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e8:70:64:a7:2b:55:db:02:b0:a7:88:ec:fe:
                    66:37:c1:27:91:52:4b:3c:d0:c4:dc:5b:a8:08:c5:
                    29:43:c5:4a:de:df:e5:49:55:43:cc:ea:84:8a:e9:
                    f4:1c:b3:25:d8:2a:5b:67:19:30:24:1a:0d:3c:50:
                    0a:d0:b7:0b:c8:fa:de:5f:de:ac:f5:f3:11:c6:2f:
                    63:97:f5:d1:d4:14:c5:67:07:a9:82:05:c1:3c:e5:
                    eb:b0:4f:60:8e:fb:71:80:ff:5f:4a:94:b8:79:2b:
                    dc:f2:83:5a:e0:48:65:74:79:31:d2:45:ae:0f:64:
                    47:85:25:99:e2:9f:3c:16:59:49:ec:95:2c:4a:e4:
                    7f:55:85:53:ca:d6:6b:90:08:53:fb:4f:82:7b:34:
                    9e:cb:43:14:24:8d:30:94:11:1c:1f:c1:89:5f:2a:
                    09:80:ff:be:8c:3b:0e:6e:0b:91:68:cc:02:11:8c:
                    c0:ce:99:b0:3b:9e:23:ea:d0:84:1a:8d:61:1f:8e:
                    f9:86:95:4f:2b:54:32:85:be:5e:55:f8:7f:a7:45:
                    9b:f9:07:e2:7f:80:f3:22:fd:5c:a4:4c:63:6b:90:
                    90:7e:fa:fd:e9:3e:03:c8:9f:59:89:c1:2e:fa:ab:
                    a7:c0:ea:b6:de:2f:b4:e7:f8:6c:e2:70:c3:86:5c:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:B4:AA:40:F1:7E:C9:38:D7:F9:60:8E:B9:1B:0F:6B:52:EB:13
            X509v3 Authority Key Identifier:
                keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b2:e6:e4:42:ca:dd:79:c0:e5:fb:e0:09:e3:ce:78:de:ba:
         8d:fb:73:4b:77:90:40:2c:06:96:e7:9a:18:41:4a:7b:18:c3:
         ec:fe:85:7c:e3:67:8b:a2:ec:68:25:4e:e7:27:4f:a6:0b:3c:
         07:ca:e9:45:75:dc:a0:db:65:e1:f4:65:68:ac:5d:93:99:9d:
         69:ef:98:c8:8d:7f:36:05:e2:20:28:55:85:89:a7:f9:a7:93:
         08:61:c3:8e:32:d3:02:ea:0a:0f:94:09:a3:e5:de:37:7e:3c:
         26:c6:9d:be:02:88:a5:b4:11:68:67:fc:fe:f1:eb:bb:cb:04:
         5f:f1:24:a0:88:ed:49:1d:c6:fa:c9:89:b5:cc:22:ef:05:4c:
         1d:37:3e:d2:78:ef:75:22:fc:7f:9e:ad:e0:fc:53:09:bc:96:
         10:6e:b6:37:b0:90:b8:0a:27:f3:59:1f:36:6f:99:16:ef:b7:
         58:eb:81:19:38:c4:78:35:02:d7:68:df:c3:ac:b0:27:aa:bd:
         44:26:ca:bd:05:79:34:91:80:87:c0:6c:6e:53:c9:32:96:f0:
         9b:9c:1c:93:7b:86:7b:6c:98:66:1e:53:ee:9b:20:ad:fa:6f:
         f4:c8:cf:ea:70:93:7c:ed:38:19:22:62:a0:23:e2:d3:9c:9c:
         51:d0:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:11:17 2026 by rpki-client