Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
File:                     Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft (raw, json)
Hash identifier:          MkyeJ2Pjbwk6CKqV/V+zWa6ZEyaCZreGljc7gkXwxrA=
Subject key identifier:   DB:00:21:41:DC:6B:17:4A:4C:12:85:0E:52:80:36:68:DD:67:F3:6B
Authority key identifier: 32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84
Certificate issuer:       /CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
Certificate serial:       019FA2971D66DD78C2D12A51815DF847BBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
Manifest number:          06B0
Signing time:             Mon 27 Jul 2026 08:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:40 +0000
Files and hashes:         1: Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl (hash: 6eVQqv2f9vFQ6HPMUvOJqE34x0gvGhV72sQPpePH3s4=)
                          2: zS1zUonEO-G6AM1cws_9_ZwZdJI.roa (hash: NMcUU3mBJ1QzroUYREZhHCEZESdeRv4hJC0eLlS6EkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:1d:66:dd:78:c2:d1:2a:51:81:5d:f8:47:bb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329dbb46a4eb7645d994a0e4b984fcdac204a484
        Validity
            Not Before: Jul 27 08:00:40 2026 GMT
            Not After : Jul 28 08:00:40 2026 GMT
        Subject: CN=db002141dc6b174a4c12850e52803668dd67f36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:35:c6:05:3f:5d:a5:38:98:98:8e:e2:5e:
                    07:09:aa:28:3b:d7:c4:0f:42:af:19:0d:73:4b:ae:
                    38:1d:25:77:98:17:73:e6:5d:34:84:37:6b:d0:ce:
                    6f:07:bd:84:89:79:f1:c6:de:ba:ff:c8:b0:5b:3a:
                    2d:38:32:11:d5:13:18:3d:73:99:82:a7:b5:43:a1:
                    14:b0:d6:1f:18:ca:ea:67:e5:14:ef:94:d7:3f:f6:
                    0d:40:dd:05:93:61:d6:a4:7d:85:3f:45:ab:1d:7b:
                    a5:2b:aa:c8:a0:93:e4:43:02:42:b0:9c:21:bf:8c:
                    c3:3d:b6:71:ef:12:c6:76:97:43:cc:35:0a:5b:a6:
                    b6:c6:da:ef:f0:ae:3c:09:2c:39:05:de:88:c0:98:
                    ea:47:a0:cf:f6:f6:94:11:41:96:2a:16:d3:a1:93:
                    cb:9d:04:bf:90:88:1e:72:4e:e3:13:01:87:ff:2d:
                    1b:97:df:49:cb:c8:a6:40:aa:11:17:a3:46:59:a4:
                    95:99:e1:b9:00:92:2b:83:ee:7c:2d:97:c9:4b:99:
                    c9:2d:18:ff:86:6c:1c:d3:ef:80:52:62:0b:6e:1e:
                    b0:c3:6a:01:43:0a:68:fd:d2:c4:a1:02:1e:0f:e9:
                    b7:a9:c2:1b:93:9d:f6:fd:20:24:56:ea:56:a8:e2:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:21:41:DC:6B:17:4A:4C:12:85:0E:52:80:36:68:DD:67:F3:6B
            X509v3 Authority Key Identifier:
                keyid:32:9D:BB:46:A4:EB:76:45:D9:94:A0:E4:B9:84:FC:DA:C2:04:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mp27RqTrdkXZlKDkuYT82sIEpIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f171be-9653-41d8-a344-fec15ab84135/1/Mp27RqTrdkXZlKDkuYT82sIEpIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:f9:90:b8:35:a9:a2:17:f3:fd:c7:dd:1c:39:ae:75:7e:
         2b:0d:ca:72:e4:74:5d:f5:67:19:6a:16:c5:3d:d7:fb:af:d0:
         e4:17:0f:66:d3:83:9e:2d:64:14:f7:64:83:7f:d0:2c:b9:29:
         ae:a8:72:b8:ad:f8:62:31:b5:d2:6c:4c:1d:c9:5f:a6:7f:ee:
         58:aa:93:cf:96:d1:a2:15:99:b7:24:59:de:27:0f:55:58:fa:
         8d:1a:30:cb:fa:97:a8:0a:64:9b:47:bb:14:4c:13:88:a3:cd:
         aa:de:08:11:e0:d6:8d:67:6a:dc:79:1e:00:57:82:8d:03:c8:
         90:f9:a3:fb:77:9b:df:6a:ad:c6:d9:27:dc:b1:3a:e3:73:00:
         dd:71:3b:50:09:77:15:29:19:33:cc:1e:15:4f:28:68:79:61:
         8b:43:41:0d:a2:58:37:4c:a1:7e:c8:47:cf:2f:5f:79:75:4f:
         47:7c:d9:21:40:4e:e7:0d:ad:91:44:a8:a8:09:53:00:5b:f6:
         21:66:1c:16:c9:96:f2:66:9b:d0:e6:f6:74:92:95:78:f3:5e:
         d6:17:ad:b9:c1:40:d4:63:aa:3d:83:d0:ed:89:56:48:0f:61:
         fe:bd:59:c9:f1:62:b9:e6:d2:9a:67:5f:9c:04:39:87:cc:fa:
         a7:f3:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:30:03 2026 by rpki-client