Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File:                     6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier:          EH03vkxX6MgbAw6lk7O9TEMUVdaDX3ebiugE0RBAAcU=
Subject key identifier:   34:E2:5B:90:91:01:78:35:37:5D:92:FE:59:0E:BE:19:15:BE:BE:83
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer:       /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial:       019FA89A0D2C753206ED4579BABFF0223445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number:          154C
Signing time:             Tue 28 Jul 2026 12:01:35 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:35 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:35 +0000
Files and hashes:         1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: zoGU0klQjJgCE5yGMLMhgtC/pGvxA/bljOi65EC1QCg=)
                          2: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (hash: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:0d:2c:75:32:06:ed:45:79:ba:bf:f0:22:34:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
        Validity
            Not Before: Jul 28 12:01:35 2026 GMT
            Not After : Jul 29 12:01:35 2026 GMT
        Subject: CN=34e25b9091017835375d92fe590ebe1915bebe83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:fe:cc:f9:95:e8:71:8e:c2:db:1b:7e:d4:
                    48:a4:cf:5f:a3:28:62:a5:ef:2b:92:79:fc:4e:01:
                    8b:f8:f1:cb:9d:33:be:f2:8a:fd:6a:3b:9a:98:05:
                    5d:7b:e0:85:6e:2f:35:7d:09:1c:4a:9c:b7:9e:5d:
                    36:5a:cb:f3:81:80:d5:40:f4:4c:81:42:69:92:5a:
                    20:98:ec:0d:cd:d2:4c:0b:4b:91:9c:7d:15:b0:f6:
                    85:df:b6:71:e7:9d:a4:2d:17:48:6f:c9:1b:40:82:
                    81:65:ed:77:8b:44:92:2b:64:0d:cf:3d:7c:c0:bd:
                    92:56:1f:09:1c:dd:b2:24:09:f1:9d:76:4c:ff:5c:
                    3d:41:6c:cb:d2:60:f1:4b:4e:6a:16:24:7d:50:58:
                    9a:63:d3:de:3b:95:d0:51:9f:d1:9d:40:a4:bd:1e:
                    84:40:e3:90:64:61:75:b8:a4:59:d0:e7:65:4d:1a:
                    be:73:bc:83:cf:ec:e1:92:08:c8:4d:94:35:a8:58:
                    d5:a1:31:7a:0a:98:ce:2c:f8:ec:59:b9:77:cc:75:
                    ff:42:eb:d8:6a:b6:1a:ac:4b:da:c2:7a:03:03:f1:
                    2b:3d:28:28:e4:2d:7f:d5:f1:eb:d6:16:a7:e1:b7:
                    7b:67:d5:88:9f:84:b5:78:3a:60:a9:d3:88:75:fe:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E2:5B:90:91:01:78:35:37:5D:92:FE:59:0E:BE:19:15:BE:BE:83
            X509v3 Authority Key Identifier:
                keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:00:d1:88:58:bb:03:e9:0c:ba:e6:1d:e9:9e:7e:25:2a:
         7d:81:20:a6:cd:d2:1f:1e:de:a3:2a:0a:d5:5c:3f:76:39:ed:
         01:b5:60:77:74:e6:63:82:75:a2:ba:1c:6c:e0:a8:32:e6:9f:
         bb:04:03:12:66:7f:0f:78:13:fe:34:80:84:84:2c:6c:f1:29:
         17:a8:63:42:b2:78:73:2a:dc:55:cb:1e:d9:38:e7:15:1d:1c:
         8f:1e:13:e0:6a:f1:43:14:83:89:0f:92:4c:34:ad:2d:19:ff:
         57:79:ec:6c:73:d8:dd:e3:04:b7:a5:89:17:26:11:a3:4a:7e:
         3c:de:98:34:25:4f:74:a2:97:3f:cb:ee:1a:52:c1:4e:2a:f4:
         6c:31:6e:88:e4:46:df:6c:b7:00:e7:a7:1a:0f:ab:f5:2a:73:
         44:07:13:7b:14:11:5a:67:ac:c9:38:72:82:c0:b7:33:80:e8:
         f2:4e:10:b9:18:bd:0e:84:f1:1c:b1:eb:88:70:60:a6:15:57:
         e4:d3:e9:1f:1d:b6:4b:d2:f5:b9:31:39:8a:a4:c0:7c:c2:a2:
         92:7b:e0:9b:d5:2f:d0:aa:ba:d6:75:49:0c:ab:ff:71:88:33:
         9d:2a:c9:26:e1:47:5c:84:d2:7d:2d:ba:01:59:c2:f8:fc:b6:
         f8:70:13:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:12 2026 by rpki-client