Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          JM4x+lb5QUdMqXD0buSwdr9khrzj/BTGosDM2QwMrOw=
Subject key identifier:   C7:C3:FB:B6:8B:08:AE:36:37:76:69:1E:2A:DA:8E:0A:A3:89:2B:5D
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       019FAABE91E6C31AA9FE28847D6C2A5797CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          13CF
Signing time:             Tue 28 Jul 2026 22:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:43 +0000
Files and hashes:         1: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: 4jpFy1sm/ReVV1qzlD5e3Y0Y15NDVB/HvOMsXvfiL2M=)
                          2: Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa (hash: a/DGW0i/X4m/ikPJX+oJ6qAZ0udts75Z/BZGzVsUAJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:91:e6:c3:1a:a9:fe:28:84:7d:6c:2a:57:97:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Jul 28 22:00:43 2026 GMT
            Not After : Jul 29 22:00:43 2026 GMT
        Subject: CN=c7c3fbb68b08ae363776691e2ada8e0aa3892b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:01:33:22:f1:f9:10:03:2a:09:d5:b7:da:
                    eb:72:aa:76:90:a1:fc:3e:79:b3:d1:22:bf:f0:44:
                    19:f8:83:33:b8:df:14:84:87:e6:5d:f3:f2:c8:b2:
                    53:66:91:8f:ed:4b:b2:22:8c:b7:da:43:a0:1c:20:
                    8c:3f:30:e6:c5:4f:e9:9a:b4:ad:06:26:c1:c2:41:
                    68:6f:f1:c8:4d:63:75:72:7e:0c:3a:2d:41:8c:2a:
                    75:39:0d:75:0f:45:a4:bf:9e:b7:8d:5e:fd:95:65:
                    44:3c:5c:8d:3b:85:1a:4b:b9:1a:93:bc:ea:59:6e:
                    d6:02:37:d4:ee:3e:5d:e3:b6:ee:71:cd:91:36:be:
                    34:30:70:9c:c4:2a:da:6d:76:f4:a5:24:c6:69:9d:
                    9a:3d:94:3d:91:f2:e2:66:0b:bd:4e:ab:4a:ad:24:
                    34:f6:8c:4f:f9:8f:b1:de:8f:5b:b2:2a:33:26:2c:
                    ca:d4:25:87:c1:2b:21:49:e9:f1:8b:8f:f6:74:3b:
                    94:f1:82:15:5e:04:34:b4:f5:b1:48:cd:f2:2a:d6:
                    07:7d:35:ac:8a:57:38:f9:64:8c:18:c8:10:cb:9e:
                    74:5e:7a:54:9d:fa:6a:71:ad:fd:ca:89:c2:e6:ca:
                    d3:f8:5c:13:02:27:2c:db:5a:70:c7:09:c6:6c:54:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:FB:B6:8B:08:AE:36:37:76:69:1E:2A:DA:8E:0A:A3:89:2B:5D
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3e:b5:15:20:b8:81:19:c6:a9:2d:c1:4a:30:22:1c:42:1c:
         a7:66:fd:d1:0b:23:2d:bf:ca:b0:f4:a2:c0:c4:90:2c:ec:ca:
         f5:b8:18:65:9d:b9:21:0d:9b:06:78:ee:bc:37:cb:a1:50:a3:
         60:3e:6e:a9:d2:f0:40:4e:4b:be:6f:29:5d:5c:6a:04:9d:d3:
         87:10:20:5a:39:88:d2:9a:54:23:ca:4a:72:1b:b5:dd:da:7f:
         20:f9:10:d8:58:e7:9a:0b:2f:3c:86:93:22:f5:eb:52:8a:01:
         c7:87:ca:22:9e:f4:f8:53:57:b1:dc:4e:bc:8a:40:41:26:80:
         f6:28:57:98:c7:e5:d2:f2:e0:5e:ff:fd:87:b0:7a:f4:90:8b:
         42:1d:c7:40:b3:bd:7e:7e:ab:14:52:a7:52:9e:48:24:08:60:
         67:f9:ba:6f:2a:60:11:59:f2:2f:34:72:ea:98:d5:6f:28:2f:
         0f:f0:36:7c:82:2c:38:ce:e6:9d:45:a6:64:7e:0f:f3:30:50:
         af:e3:16:8c:2a:d9:2d:9e:fd:ca:b6:79:f7:ea:2e:3b:d4:a5:
         fe:a2:75:83:8d:ed:11:dc:20:4e:5f:8f:34:ca:1d:91:af:c3:
         a0:b1:bf:64:ae:41:77:bb:c6:86:a6:51:70:03:2a:7d:a2:9d:
         c2:e2:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:48 2026 by rpki-client