Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File:                     bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier:          lmff0gBrK+Wy/UEQzawPACjXb8/Kt96Wf3mPrZhJxSw=
Subject key identifier:   69:DD:AB:F4:53:63:4E:16:40:2B:0B:51:4E:D2:30:AA:1F:49:02:6E
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer:       /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial:       019F6570627330A3FDA20004D46F5351137B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number:          066B
Signing time:             Wed 15 Jul 2026 11:01:31 +0000
Manifest this update:     Wed 15 Jul 2026 11:01:31 +0000
Manifest next update:     Thu 16 Jul 2026 11:01:31 +0000
Files and hashes:         1: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (hash: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4=)
                          2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: eiyhxbRUfTy0/KBdkm3nS3JAluDo6gNQtpowBy/c90w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:70:62:73:30:a3:fd:a2:00:04:d4:6f:53:51:13:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
        Validity
            Not Before: Jul 15 11:01:31 2026 GMT
            Not After : Jul 16 11:01:31 2026 GMT
        Subject: CN=69ddabf453634e16402b0b514ed230aa1f49026e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:dc:e8:e6:41:bb:ee:fd:c7:9a:56:9b:98:
                    35:48:8c:fc:ad:57:14:b6:d6:2a:b5:a7:a5:1f:8d:
                    4e:6f:36:a4:a0:22:5b:f6:d4:ac:1b:94:75:eb:f4:
                    9e:b4:98:46:4a:99:5b:4d:64:f6:46:70:67:42:f6:
                    b3:31:10:1f:96:f5:71:5a:c2:b2:c7:38:2a:f2:71:
                    58:87:ce:87:4c:dc:b1:3e:47:e6:83:47:8d:83:a7:
                    8a:8c:a5:ae:66:f0:8a:59:c6:50:8b:7e:1b:c0:2e:
                    2d:8a:d8:c5:c0:5e:fb:fb:13:6c:25:9b:d9:ad:30:
                    46:b0:61:df:09:71:79:a5:19:f1:e1:b1:ca:fc:21:
                    fd:53:72:ad:1a:da:05:c2:5f:bf:08:22:fd:ed:42:
                    9b:71:08:ec:15:d0:e7:db:a6:b0:ae:48:05:b9:54:
                    0c:ff:2b:c9:35:54:a1:d2:d4:54:8f:f5:f6:f7:8e:
                    11:1e:ba:7e:1b:f9:25:d9:7a:a3:8f:54:ea:35:07:
                    73:28:00:27:c4:f0:fe:36:6f:16:01:90:e1:f8:d5:
                    39:2c:cf:76:1e:fd:8c:94:4d:cd:c5:46:65:42:d6:
                    60:f6:f2:1f:08:c2:25:d5:42:03:03:b6:35:0f:08:
                    1b:34:02:3a:1f:35:99:1e:ba:4a:ca:53:2f:05:bd:
                    1a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:AB:F4:53:63:4E:16:40:2B:0B:51:4E:D2:30:AA:1F:49:02:6E
            X509v3 Authority Key Identifier:
                keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:75:60:14:1c:b3:71:fb:f3:72:b7:92:6c:44:78:c6:ca:86:
         eb:91:90:0a:e4:26:c5:e3:79:3a:54:42:8a:3d:4d:a2:9d:34:
         58:8f:13:a5:34:ed:a4:0a:8b:05:ce:46:9c:30:b5:6d:45:74:
         07:d7:50:66:ec:17:fc:de:6b:e8:a5:df:c7:78:9c:07:fb:25:
         dc:d5:62:ad:13:4b:b8:86:2f:12:56:a3:e5:48:81:ad:9c:c5:
         bf:99:1b:dc:31:f4:3a:44:4d:65:b8:3a:4f:21:a5:16:b7:b8:
         1a:ed:43:a5:69:6d:ab:60:60:2a:95:74:f6:4a:53:e0:8b:3d:
         31:a9:20:f7:2d:9a:26:1d:53:72:c6:b3:cb:1d:bd:83:f8:16:
         57:ee:11:a5:c2:e6:b5:42:27:4a:40:1e:31:1a:1a:ac:0e:68:
         74:48:f0:de:af:29:47:8a:6a:00:bf:e1:87:fd:c6:68:67:70:
         1e:b3:ac:3d:44:e6:6c:8a:42:7c:74:4a:2f:9a:0f:86:42:f2:
         cc:12:dd:0e:78:64:60:32:ee:57:0c:d0:bf:7c:bd:b0:14:81:
         ba:9b:62:6d:07:2d:48:f6:2d:4c:a0:c9:9f:22:7d:b5:4f:4d:
         b7:44:93:5f:4d:d5:ca:f8:dc:ea:87:62:1a:41:2c:01:72:d6:
         51:ea:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 15:58:01 2026 by rpki-client