Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
File:                     dkcGam8eUnJLJzFHdNk2k8FV8Og.mft (raw, json)
Hash identifier:          Sf8PYRRA0LjfiUkevNnAlUOKCD3AG8/T3Eb5TKDSQqo=
Subject key identifier:   6B:B1:F6:C6:6D:9B:D3:84:56:15:57:EC:2E:39:46:DF:12:9E:71:8B
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Certificate issuer:       /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial:       019FA0DF8185163652C5C4421E4D62B6B692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:00:29 +0000
Manifest this update:     Mon 27 Jul 2026 00:00:29 +0000
Manifest next update:     Tue 28 Jul 2026 00:00:29 +0000
Files and hashes:         1: dkcGam8eUnJLJzFHdNk2k8FV8Og.crl (hash: r/Vm8y9yUo1lg4XQLKpdHoj2MNxkSJ05eC8MsLLYnas=)
                          2: i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (hash: +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:df:81:85:16:36:52:c5:c4:42:1e:4d:62:b6:b6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
        Validity
            Not Before: Jul 27 00:00:29 2026 GMT
            Not After : Jul 28 00:00:29 2026 GMT
        Subject: CN=6bb1f6c66d9bd384561557ec2e3946df129e718b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:74:cb:21:ef:45:60:43:a8:de:aa:4b:25:
                    d9:fc:ab:d6:f9:0a:04:28:63:76:7a:9d:96:d2:4a:
                    a1:1e:07:d7:55:e8:ec:1b:c8:ed:06:81:bb:08:f7:
                    f7:27:c4:31:de:73:7b:87:1f:ee:65:6b:39:e4:68:
                    2c:2c:b6:d4:92:dc:7b:5e:58:3e:40:9d:70:dd:68:
                    1d:f9:02:65:6c:6f:1f:ea:4e:45:4a:00:01:04:db:
                    a9:91:c9:10:e3:52:ef:76:d6:4a:1c:c9:1b:07:20:
                    d6:16:54:32:49:a3:8d:67:1e:c7:ee:2d:b6:4a:11:
                    53:28:c2:6a:3e:1c:87:a7:63:93:c9:17:bc:1f:97:
                    d9:60:b8:29:13:b2:5d:22:15:fb:01:e9:72:c2:f6:
                    0b:28:b5:3f:ea:38:0a:4e:a5:e6:34:0c:a4:e2:f0:
                    19:08:1e:fd:93:97:cf:38:33:a5:39:5c:3a:70:44:
                    07:60:e8:a4:d6:69:84:50:fd:80:78:67:04:b4:dd:
                    f5:4c:d5:74:a8:db:57:ec:8d:94:03:c8:7d:6e:2b:
                    ea:91:63:4d:b3:8d:ea:f2:8b:56:fa:03:f1:d1:e4:
                    96:9b:8b:9a:5d:51:fa:c7:20:3f:cd:89:78:04:1d:
                    74:29:92:a5:84:dc:1e:a1:a2:9f:48:be:06:94:4f:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B1:F6:C6:6D:9B:D3:84:56:15:57:EC:2E:39:46:DF:12:9E:71:8B
            X509v3 Authority Key Identifier:
                keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:d2:9e:d9:5d:88:07:5d:e4:c7:9c:4d:cb:aa:2e:d5:af:
         2f:ea:b7:92:b8:da:e9:ef:f7:b1:33:ec:70:c3:74:f8:14:70:
         7b:5e:f9:8f:7b:f5:2c:54:4b:b1:73:2f:18:67:f2:cc:78:49:
         d4:c1:16:8d:64:65:ff:86:d4:2d:a1:b0:a3:d1:8a:e8:ba:78:
         85:94:67:7b:14:33:6c:25:30:74:36:a2:26:26:33:83:31:0d:
         0a:01:9a:ab:93:00:c7:bd:41:d7:55:5a:7d:b3:46:db:fb:0d:
         9d:9b:0d:28:3d:8a:f7:4d:a8:15:fd:f6:e2:38:d4:a2:43:9a:
         2f:9b:c8:04:3e:b2:27:83:fe:68:b4:e4:c1:b6:42:dc:09:8b:
         31:08:3e:46:d5:13:cd:4e:bc:e7:1b:9e:f6:b0:ef:20:b2:d9:
         66:7f:51:94:af:81:61:cd:d1:ec:05:18:5a:53:4b:0e:54:a8:
         b6:7f:62:26:e2:87:2e:09:3d:e6:1a:be:d0:3b:c7:00:64:f9:
         d1:db:aa:80:17:ee:2e:20:ce:1a:5d:64:83:93:8a:99:7d:9c:
         70:20:d7:d3:91:a3:76:ba:74:c5:bb:c0:e6:b9:58:d4:63:81:
         3a:61:fe:c2:7a:07:e4:b7:c3:dd:74:0a:17:9c:46:34:bf:4a:
         51:d8:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:06:21 2026 by rpki-client