Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          wYEAT4ONIDwY3U2VYK4fWPw00x7lkuVwmXb5MCYN7Ks=
Subject key identifier:   91:D5:28:4B:2C:42:92:49:EB:9D:74:B1:F6:8C:38:12:7A:CB:07:F8
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       01A001DCE9BD58C00EF2141A0A06FCDBDFFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 20:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:50 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: 9ZoW1RJs+yKr5px75PcMgIxurW4mC2UIZnwY0I9W4BE=)
                          2: yhCwjfMZQm7fd9jkt80pOtuEFGo.roa (hash: hs2p0KXq3AByfrOTWurPjFi6ySD7XrB1GNNKZ5BnbRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:e9:bd:58:c0:0e:f2:14:1a:0a:06:fc:db:df:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Aug 14 20:00:50 2026 GMT
            Not After : Aug 15 20:00:50 2026 GMT
        Subject: CN=91d5284b2c429249eb9d74b1f68c38127acb07f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:c0:df:bb:00:69:37:28:ba:61:39:b0:7b:
                    01:cb:c4:94:a8:4f:e7:50:b4:30:56:77:71:15:9d:
                    00:e7:80:04:9d:7f:8f:5b:33:d0:65:60:8e:b5:63:
                    7b:34:0d:3e:aa:5c:14:f0:e6:1d:80:bb:2f:b8:52:
                    ab:ee:ee:53:60:45:a9:02:d6:3b:1f:59:15:ae:24:
                    23:fa:88:f1:63:6b:eb:ce:6f:a4:22:9c:f3:d0:40:
                    3a:61:74:ed:59:5a:0b:1d:2d:e9:3e:f2:56:96:ae:
                    3b:68:31:3c:6f:44:6b:18:cf:84:4e:37:b6:50:21:
                    65:a7:c4:8c:1c:57:91:f9:1c:5b:5c:10:42:24:97:
                    2f:bf:7d:d2:f2:7e:bb:06:29:70:2c:e6:4b:97:18:
                    7e:d9:47:a4:43:a2:68:d0:e5:3b:89:e0:79:a9:b1:
                    2e:c5:30:af:60:73:b2:f3:5a:34:d1:5a:9e:f7:3a:
                    2b:d8:f2:0a:01:ae:9f:6d:c7:21:19:81:1c:9f:6f:
                    b9:5f:88:c8:25:94:4c:25:ad:de:9c:fc:70:c3:a3:
                    08:ea:83:bf:c5:ee:69:c3:4a:f4:39:6c:bd:e5:e0:
                    6e:6d:3f:04:29:14:16:d4:cc:bb:1d:97:4b:93:79:
                    e1:3c:ee:d8:f2:e7:9c:01:ca:2d:86:a0:74:b7:5b:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D5:28:4B:2C:42:92:49:EB:9D:74:B1:F6:8C:38:12:7A:CB:07:F8
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:da:3a:83:49:59:30:41:c7:c3:34:c8:f2:d6:94:3d:cc:
         f5:a9:01:0f:38:80:ca:49:75:36:9e:70:95:3c:58:68:96:9b:
         33:01:5d:82:16:a8:86:22:72:32:6d:eb:ff:9c:c1:eb:ab:94:
         1e:b2:9a:ad:6f:78:82:86:a9:e6:b8:cd:05:eb:16:41:81:9b:
         79:53:fb:ec:fa:bd:a3:cd:d5:5c:1b:48:05:f3:e4:e7:7f:5f:
         de:eb:dc:0c:07:75:b9:5d:1f:86:56:94:c2:1f:d1:e0:4f:b5:
         0d:f2:7b:1c:e9:dc:5f:8b:b2:0d:30:c0:c7:ee:53:30:2a:47:
         1f:59:63:3d:bf:8d:a5:9d:17:92:7e:3d:16:fb:a3:fb:7f:5a:
         a9:53:59:d2:a1:02:e7:a9:eb:91:f0:7c:2e:41:11:43:b6:73:
         d2:b7:58:58:64:74:2f:dd:bb:f8:5c:ea:62:86:29:cc:a7:82:
         55:f9:fb:d0:9f:e5:83:c9:bc:dc:d3:8d:1d:da:8f:dd:d0:a5:
         c1:8d:b1:95:b9:e4:fa:34:b2:4f:52:60:9c:d9:91:26:d5:ab:
         e2:c8:0d:21:07:e5:15:19:3b:69:8b:79:dc:69:1a:09:82:37:
         91:63:0c:45:3b:a6:d2:de:d1:a4:30:d6:be:cb:96:db:1f:32:
         87:b3:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:45 2026 by rpki-client