Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          4H3YArSuI5DXwc0RhC5VcSmXIRedJqLYb070Z3gJwbM=
Subject key identifier:   8F:82:87:25:08:56:CC:5E:FB:F6:E3:D7:81:52:9B:17:A9:17:C0:A1
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019FA898EF562373D9FEB12E425B13AE18CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 12:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:22 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: 19DNpuyrBWKL9tVFuju8eoStAA+6yxSDvzadtxwcjtk=)
                          2: 7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa (hash: N75hWXU4tOfgUVgJErnnaShCfMougCipyHaXnV/7ZoQ=)
                          3: ojQoLkOKYxW9nl-zMiY8owgWzH8.roa (hash: pBaal272/3ElS+FK2cqrYkE2HZTuwNTmpIvmWFEPo9E=)
                          4: wW5JJp_Tw5DERjslA8f06nsNm_4.roa (hash: soIoaQ26jxMV+jXruEWHSU8upxFyddMWkhBFffhBkYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:98:ef:56:23:73:d9:fe:b1:2e:42:5b:13:ae:18:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Jul 28 12:00:22 2026 GMT
            Not After : Jul 29 12:00:22 2026 GMT
        Subject: CN=8f8287250856cc5efbf6e3d781529b17a917c0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:a3:a0:08:c0:63:f0:fb:6d:e1:37:97:75:
                    ea:70:aa:bd:e9:75:94:bc:ab:b5:1f:1e:d2:3f:b4:
                    9c:58:e9:25:8b:86:c0:1b:1f:df:1a:e0:b5:a2:7d:
                    5d:6e:63:61:91:0d:5e:76:8c:1c:74:e9:22:b4:6e:
                    16:3b:98:c6:eb:f5:15:b4:45:0c:34:91:1d:19:cd:
                    4f:92:4a:b9:20:b7:b3:c9:85:ff:36:34:bd:2d:61:
                    23:40:54:2c:a9:c1:58:32:67:26:f4:d4:47:88:f7:
                    fc:b4:a9:55:f2:52:5a:01:29:8a:ac:d1:d4:8d:85:
                    31:b7:c5:36:30:cd:60:31:1e:81:d9:58:99:b2:be:
                    f0:85:fe:ea:2a:f9:e5:75:f1:be:f7:b8:59:3a:c7:
                    c5:ea:2b:a6:a7:fe:f8:ec:e5:cd:3f:51:8b:d6:1c:
                    a0:0c:8c:cf:2d:87:18:2a:c6:ea:96:aa:4e:ed:ba:
                    3f:f6:8a:8a:b9:e4:fd:4b:e6:65:b5:b3:29:7f:26:
                    6a:a1:f0:28:4a:f8:a7:5d:c9:0b:89:11:f9:e1:66:
                    97:6c:12:b0:9f:c1:40:f4:e1:7b:06:f9:0f:3a:50:
                    04:55:fc:27:c2:f3:55:52:01:23:f2:88:e7:fc:8c:
                    34:5f:ec:29:36:b5:68:2d:a2:16:b6:45:06:f7:2d:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:87:25:08:56:CC:5E:FB:F6:E3:D7:81:52:9B:17:A9:17:C0:A1
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:32:48:6b:83:84:25:e8:85:03:bf:d5:1e:44:e2:d7:a5:
         40:84:d6:4f:64:e0:a9:c1:d7:19:40:e5:08:4b:fb:87:a7:b6:
         f7:9c:8f:f4:6a:07:01:26:0c:48:50:76:95:18:bb:e1:a1:90:
         de:d4:08:5f:f1:8c:9d:44:4f:45:19:6a:36:06:ea:0a:d6:e9:
         9e:49:f9:92:13:c1:1c:bf:5e:c0:d9:1f:84:9c:77:18:f4:da:
         3e:e4:40:e2:6e:12:51:e1:3f:3f:15:d8:b6:29:5b:08:7d:f5:
         09:68:c9:56:fa:75:33:32:2e:c0:de:d7:55:f2:f6:6b:d2:2a:
         d2:81:6d:fe:38:2e:b8:f8:0b:8e:36:66:27:a6:7d:72:f8:93:
         d3:14:c4:c3:f8:2e:31:ad:1c:22:bd:78:f8:d3:9b:9f:14:9a:
         a3:c5:43:ff:6e:d5:31:cd:df:66:72:16:b6:ec:e0:64:f7:6f:
         6b:db:56:03:45:fc:ee:54:f5:42:e2:f3:e1:b7:72:de:6a:46:
         86:6a:b5:8c:31:78:ac:fc:15:e7:f4:b1:8d:c5:91:37:b9:1d:
         34:3a:0e:56:4f:83:2d:a0:b2:4a:92:8a:88:8c:e2:0e:37:b9:
         3e:e7:86:e7:6d:31:af:e8:d3:6e:8c:98:1a:24:54:e2:9e:4f:
         76:0e:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:32 2026 by rpki-client