Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
File:                     6_OFztCQ2_HQRHNOEqJw7muEHJY.mft (raw, json)
Hash identifier:          mpjuyQO35B6G8pTUtdr9Rn+7YC1ww3NALydUERvVAPQ=
Subject key identifier:   BB:2B:9E:13:91:03:63:AE:8F:67:2A:56:F8:18:2B:D3:98:40:86:F9
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Certificate issuer:       /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial:       019FAD1B05F075FA3973B01CB0B0AB6B2804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
Manifest number:          0997
Signing time:             Wed 29 Jul 2026 09:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:56 +0000
Files and hashes:         1: 6_OFztCQ2_HQRHNOEqJw7muEHJY.crl (hash: FooqwyUHsrJ/utFdYcE7WETLGY1WXfloax3xchldHLY=)
                          2: XpRtGgpQMgfYPr6Ae4n-CrXAlUE.roa (hash: NDYAShaJd5oq4XV/s8UZ9bjqNMFDxRAsxUeNLahhptc=)
                          3: fj5bsSjuUc6EOcUYU_AbknjdJUU.roa (hash: j5vvkFepIgEH6bOjdslOXR9IOh2ESlxcKkI5N8rCJlk=)
                          4: x4UYcdufAL3ng8pGSqFjgdXSCz4.roa (hash: 2STBeULPzfa883nzmJW1aoNIl1q/BlYpn/a/MGYClPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1b:05:f0:75:fa:39:73:b0:1c:b0:b0:ab:6b:28:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
        Validity
            Not Before: Jul 29 09:00:56 2026 GMT
            Not After : Jul 30 09:00:56 2026 GMT
        Subject: CN=bb2b9e13910363ae8f672a56f8182bd3984086f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:ae:58:39:5d:98:c5:b6:d9:66:f5:e3:d0:
                    02:30:38:a2:8b:34:8a:b1:da:6f:da:a5:51:28:6b:
                    f6:1f:de:0b:eb:45:4b:ab:3c:1c:d8:d1:11:7c:46:
                    68:a8:7e:62:0e:75:f0:f7:9f:f3:00:88:eb:df:1b:
                    b0:16:60:57:e3:9d:c4:e9:de:42:96:ba:ae:0d:09:
                    f6:c6:38:03:be:c4:9e:06:aa:2d:12:a2:74:ef:67:
                    c8:22:91:fd:e7:40:43:d0:00:7a:e3:8c:e9:8e:7f:
                    1d:e9:70:a0:db:6e:9d:9a:95:20:03:a7:47:22:c7:
                    75:0a:7d:12:37:6b:c1:33:94:d6:49:c6:68:40:0a:
                    56:2c:02:28:bd:52:d1:00:8f:7d:31:62:98:f3:3f:
                    7e:6e:bb:a5:ac:1b:ee:41:ed:d5:9d:ca:cd:2e:91:
                    fe:dc:0f:3c:95:4f:70:eb:1f:5a:32:e9:e5:87:cb:
                    8d:8b:9f:8b:ad:ca:ec:a5:eb:a0:3f:69:95:06:96:
                    ee:75:0a:9d:c6:79:8c:31:7b:8d:dc:ad:d0:f0:ef:
                    ce:39:4e:a6:17:48:3c:10:2b:b0:1d:1f:3b:ea:ea:
                    40:3e:c7:9d:a7:30:9e:ad:d3:83:60:dd:7d:8f:ae:
                    08:fc:7a:ca:06:8e:b8:6f:ef:7f:d0:1c:ba:37:9b:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:9E:13:91:03:63:AE:8F:67:2A:56:F8:18:2B:D3:98:40:86:F9
            X509v3 Authority Key Identifier:
                keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:f6:98:51:35:d4:57:7e:12:49:c8:07:48:eb:00:c0:68:
         46:64:45:30:5c:92:e6:a6:5b:72:4e:ae:5c:05:a2:c8:47:17:
         e2:58:89:97:c2:ae:ee:da:9d:62:94:f8:73:88:23:3c:c8:30:
         bd:e5:c3:b4:a2:5a:04:7a:09:43:b9:b0:5a:28:4e:5e:10:e7:
         7e:c9:78:69:2f:76:98:c5:b2:9a:b6:23:d3:a9:b9:20:9f:04:
         63:cb:70:1f:9d:76:be:c5:97:56:ee:43:f9:d1:35:48:46:bc:
         42:e9:3c:dd:4b:9f:95:cc:3b:c5:d3:eb:c3:83:03:fc:40:e9:
         14:a8:58:54:0d:bb:77:b8:24:26:18:cd:2f:71:87:46:25:32:
         22:df:da:e7:eb:69:56:24:9e:26:be:a4:c9:a2:a4:2f:ab:01:
         af:ce:be:75:8b:03:41:9d:08:39:73:2a:2c:39:19:a9:c4:cf:
         10:f8:58:07:02:32:03:ce:fc:b8:83:9b:3c:eb:a1:9f:4a:9e:
         71:95:44:5b:23:05:b0:ba:d5:41:3d:0c:d2:3c:75:5b:9f:ad:
         be:ac:15:7e:33:14:45:94:95:72:1b:d2:88:25:1a:0c:61:1f:
         11:e1:24:a3:1f:7b:17:21:ec:45:2c:f3:57:82:7c:3d:5a:0a:
         e4:b9:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:39 2026 by rpki-client