Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          kuumBp8aTg5RT1VeOzVLEq+UKmlMSolVCzXpNFkDLYA=
Subject key identifier:   DD:77:B2:90:14:36:23:28:99:63:46:C7:83:F9:95:86:89:47:BB:F8
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       01A001A61A28119FB5F8C7CDDCCCFBBC2543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 19:00:57 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:57 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:57 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: 29Bjhai+Snkhwt9vdScrraZMg2/+drhvszCP8BXTgz8=)
                          2: A8PCXHYtPKOyp3MabVe-odhqYuU.roa (hash: BBukl0iR4BOT3LGjsYPG4CkyN4d3K0S/00+hEdW+8z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:1a:28:11:9f:b5:f8:c7:cd:dc:cc:fb:bc:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: Aug 14 19:00:57 2026 GMT
            Not After : Aug 15 19:00:57 2026 GMT
        Subject: CN=dd77b29014362328996346c783f995868947bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a1:49:77:43:d2:73:9c:04:8e:44:09:96:db:
                    ca:73:79:d7:90:84:85:69:84:40:a8:0a:ec:58:0a:
                    f0:b5:1c:4a:6c:fd:b8:26:73:d4:8e:69:bf:b6:7f:
                    77:d0:b9:4c:b0:f8:a3:74:23:d6:47:52:01:31:8e:
                    8b:62:76:01:40:3b:d9:d2:59:c0:39:45:70:1b:8c:
                    40:51:f1:aa:d8:d1:ea:53:61:67:25:54:5e:7e:f3:
                    66:64:d6:2b:e2:71:0a:57:36:71:12:fe:08:fe:0f:
                    3f:56:c9:c9:fe:60:4a:89:5b:a5:46:10:37:dc:b0:
                    95:a7:15:92:0e:2b:ab:03:ca:d8:67:1a:56:b5:ea:
                    20:ea:e0:3d:c8:7b:63:27:f8:a8:fa:e9:a7:e6:50:
                    aa:7b:7d:b8:41:ea:db:66:d1:22:7d:40:a5:c0:d6:
                    ce:52:0c:f5:4c:a0:d0:f7:1d:1d:79:7d:73:d7:9d:
                    fe:45:8f:e9:55:b6:86:44:17:3a:2b:6c:31:cd:c8:
                    4a:a7:f1:5c:12:5f:0f:97:1d:f1:69:a2:e7:5b:c7:
                    83:b8:41:c8:6f:a1:d3:dd:82:f4:ca:dc:63:29:cf:
                    97:ad:43:3d:d7:90:92:8d:d1:77:bd:57:33:98:e2:
                    a1:92:4c:ed:ba:69:a3:ac:9c:77:59:7d:88:63:58:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:B2:90:14:36:23:28:99:63:46:C7:83:F9:95:86:89:47:BB:F8
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:af:c9:de:61:07:c6:2f:9f:6d:fb:20:91:dc:2c:21:82:23:
         71:e2:4f:6c:25:fc:a4:67:b4:27:22:85:35:a6:95:0f:00:38:
         fa:6b:bb:54:15:c5:a6:20:27:86:58:98:1d:7f:6f:f5:c5:fd:
         7b:3b:47:b8:79:c8:da:e4:02:fe:c6:e1:d8:55:05:e7:ac:5e:
         79:75:b4:20:25:b9:70:38:ad:7d:51:13:fe:44:d0:0f:df:f4:
         6d:b1:9c:ac:46:12:c9:1f:79:47:97:1b:91:34:db:48:bb:18:
         5d:ae:f6:b3:a2:39:9e:18:1a:c0:69:97:52:f5:19:40:7e:c4:
         35:da:15:5a:73:6e:f3:5c:9f:41:33:27:d3:f4:76:2b:df:b8:
         91:7b:8e:03:14:99:3d:bc:a8:0d:e8:c6:b6:89:92:16:57:d1:
         66:7f:c9:0a:80:95:01:31:45:2c:d1:38:d0:27:4f:e2:1d:31:
         71:57:60:d2:02:7c:0e:02:2a:3e:76:a3:33:56:f3:66:a7:e3:
         2a:81:22:0c:21:26:aa:e3:d7:e3:8d:b7:f1:9c:47:20:6f:56:
         34:f5:fa:cd:8c:62:11:74:de:96:92:ac:a3:9d:8d:f9:38:99:
         7d:d4:c1:84:2e:7f:67:10:49:08:16:69:a1:b6:dc:34:68:27:
         20:e3:c9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:04 2026 by rpki-client