Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
File:                     c6G3ZmRxfipNLlzyveO5cxkH-MI.mft (raw, json)
Hash identifier:          Z2d7pzqx4exfhHyyNS2gYlfR8xpUXXIwCMBrO5URdXA=
Subject key identifier:   A1:E6:2E:D9:33:08:01:41:A3:66:B1:0C:3E:C3:DB:30:6D:A8:79:C2
Authority key identifier: 73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2
Certificate issuer:       /CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
Certificate serial:       019FADBF99205E8579EA4D7A47DE6AAA19F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 12:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 12:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 12:00:42 +0000
Files and hashes:         1: XxtWaMM5sBfFC2sC8FpjDL8Ge7Y.roa (hash: HWIQrBtT9vbpCee5Xkd6bp75O2LIMTf2r4JmS0NQHJ4=)
                          2: c6G3ZmRxfipNLlzyveO5cxkH-MI.crl (hash: NUA0gZ94uMj7FvJHz3CI/Kgu6THjLPt7Tw9sKV1LFN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:bf:99:20:5e:85:79:ea:4d:7a:47:de:6a:aa:19:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a1b76664717e2a4d2e5cf2bde3b9731907f8c2
        Validity
            Not Before: Jul 29 12:00:42 2026 GMT
            Not After : Jul 30 12:00:42 2026 GMT
        Subject: CN=a1e62ed933080141a366b10c3ec3db306da879c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:93:06:d0:5e:6f:ab:b2:d2:16:1f:18:9b:
                    52:87:a9:30:73:b2:34:11:9d:e7:bd:87:95:9f:ac:
                    d5:76:a8:22:03:b1:a7:18:25:c6:75:cc:8e:b0:f8:
                    04:5b:63:67:cb:d5:ce:50:0f:21:81:3a:9d:07:7c:
                    45:ff:ea:26:93:f8:d1:b5:12:d9:74:01:12:f3:6f:
                    55:02:de:41:c8:f4:cd:21:73:e0:59:8e:b3:1a:19:
                    d3:8b:dd:a2:0f:f1:dd:18:57:fe:c0:1a:01:47:0a:
                    8c:03:c0:d4:84:f9:3a:1a:74:65:96:a2:f3:54:56:
                    bc:07:40:f8:9f:5d:3f:0f:d8:a1:6d:d4:c1:6c:50:
                    f7:5d:5c:c6:9b:1f:1e:1e:4c:24:ac:1d:7e:15:6a:
                    f9:a9:d8:53:fd:ff:d4:6b:58:4b:57:59:43:f6:e8:
                    79:c7:4b:de:34:c6:78:5d:81:02:63:65:7f:0f:24:
                    f9:2a:8e:a2:39:97:da:b2:a2:79:4a:bd:de:07:7f:
                    e3:c0:5f:a3:8b:cd:e5:eb:39:c7:c8:54:bd:7e:03:
                    d3:17:28:84:f5:93:7a:d0:9a:20:36:6e:ce:36:43:
                    1b:cc:72:4f:32:78:b3:cf:a4:cf:da:6d:fd:25:34:
                    23:9c:d8:eb:53:57:77:33:4a:71:08:54:a6:48:e7:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:2E:D9:33:08:01:41:A3:66:B1:0C:3E:C3:DB:30:6D:A8:79:C2
            X509v3 Authority Key Identifier:
                keyid:73:A1:B7:66:64:71:7E:2A:4D:2E:5C:F2:BD:E3:B9:73:19:07:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6G3ZmRxfipNLlzyveO5cxkH-MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3d2415-8133-40a0-9d8c-a6319ab179bf/1/c6G3ZmRxfipNLlzyveO5cxkH-MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:34:ca:31:cf:1e:f5:01:27:f0:09:69:ef:c0:02:a4:9e:
         fc:5a:63:99:af:81:35:4f:1e:3d:46:c4:3c:04:f2:75:dd:4b:
         f1:81:2d:16:26:c4:59:b2:7d:97:85:e4:63:cd:89:3d:fc:3d:
         d2:35:84:cf:6c:c5:1a:b2:46:76:62:48:3e:f7:83:47:d7:54:
         3f:fe:01:b0:cc:fc:81:3c:2f:d2:9f:29:4b:bc:5e:d7:6c:03:
         c0:8a:c9:e8:70:e1:06:d3:07:fa:26:8d:ab:12:0b:c6:a5:70:
         19:a4:fc:f5:df:ff:1e:f6:ae:5b:34:49:c0:51:de:2e:06:8f:
         16:97:f5:41:6a:f2:c5:56:6c:00:f5:6b:4d:ed:5c:02:64:d5:
         63:76:98:7e:79:c5:3a:a9:f2:3c:12:72:2c:26:68:b0:0c:db:
         7e:cd:12:9d:32:37:58:c2:92:04:50:51:23:c6:3a:a3:bd:3a:
         bf:47:f9:34:ed:d2:cf:74:4c:84:41:5d:e5:6d:cf:c4:a2:56:
         f0:2b:14:c6:7b:9f:40:c8:cb:4e:fa:9c:1d:28:4b:66:17:b4:
         3c:4a:c5:3b:2e:1a:73:2e:ac:c1:e9:d8:02:3c:a9:2f:cf:00:
         5e:bb:35:12:25:5f:85:e9:ed:50:67:c7:f9:3c:f9:b4:c4:31:
         f5:da:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:32:27 2026 by rpki-client