Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          7PYu0H39dqyE4Mb5Du8r3xGPMAm0dSW1fYHjBj9GezA=
Subject key identifier:   3B:BA:AA:D7:F0:D5:59:C8:5B:8B:AE:68:AD:B1:5D:CF:3D:76:C2:9B
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       019FA9E2AD086BB759B986180CF3EAF74DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          10A3
Signing time:             Tue 28 Jul 2026 18:00:32 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:32 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:32 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: XG0wv7a41AGK1IuvRmk61lcsK+533XsNubg34qDU890=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:ad:08:6b:b7:59:b9:86:18:0c:f3:ea:f7:4d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Jul 28 18:00:32 2026 GMT
            Not After : Jul 29 18:00:32 2026 GMT
        Subject: CN=3bbaaad7f0d559c85b8bae68adb15dcf3d76c29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ee:aa:a5:b1:cc:6a:93:e1:1d:b9:8c:76:51:
                    f3:63:fb:7b:c0:8e:6c:5d:e4:0d:d1:24:c9:5b:d8:
                    a4:99:61:25:27:94:e4:db:d4:9e:b1:0f:d6:12:58:
                    b0:50:5b:bd:18:74:5c:98:7c:e8:d1:81:b5:ec:5e:
                    e6:a9:67:38:99:61:d1:dd:d7:ca:e8:6b:f9:d4:06:
                    f2:0d:b6:58:1f:91:45:c7:56:40:8a:45:11:ca:42:
                    b7:76:e7:da:34:e9:c8:dc:0d:69:1b:62:23:9e:29:
                    0e:f4:ac:e8:4d:38:6f:62:a2:08:61:2a:1a:cd:ac:
                    19:6f:e6:8e:1a:01:e6:96:7d:10:13:f3:67:fa:65:
                    88:6d:10:11:29:43:76:e5:0d:6a:38:65:e4:bc:9a:
                    10:de:c9:08:76:40:cd:03:c5:0b:07:75:d7:0f:06:
                    6e:29:d0:0f:8c:5a:d8:14:cb:e9:56:c5:b3:62:47:
                    14:13:ba:66:91:da:e1:cd:fa:64:72:23:56:9c:fc:
                    27:72:20:2c:76:f4:52:cd:f9:4c:68:02:ab:0a:43:
                    2a:b3:a0:f5:77:c1:95:cb:b1:48:6a:dd:ed:e7:53:
                    f0:33:f7:ae:77:e3:de:09:57:77:f7:81:af:f9:8f:
                    61:92:98:af:16:b8:1f:04:56:c0:eb:d1:0f:13:15:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:AA:D7:F0:D5:59:C8:5B:8B:AE:68:AD:B1:5D:CF:3D:76:C2:9B
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:37:19:34:8a:d8:43:cd:3b:d6:09:21:25:c0:97:01:d0:
         4c:7b:82:86:5b:39:a4:74:37:9d:dc:e6:cb:14:69:88:6c:b6:
         e6:db:06:44:5b:d7:8d:93:d9:b5:7d:5a:40:2d:20:da:ab:60:
         af:0d:ce:07:bc:45:f7:c1:d0:0d:fb:b0:91:68:c9:3c:a8:35:
         24:2d:ab:ab:38:2b:2d:a9:c1:bb:5e:6b:ee:5f:8d:a1:0c:99:
         d1:ea:52:a8:9c:37:3c:1d:3b:ff:b3:cd:b3:96:d8:21:b9:59:
         a5:dd:b7:01:e1:2b:d3:d3:c4:d0:65:4e:97:e1:31:a1:e0:11:
         52:6d:1b:3c:00:84:e5:f7:47:8d:fc:d4:e1:f7:9a:46:e0:02:
         68:0e:b8:44:0f:18:b8:02:d1:0d:85:9a:c2:ab:cd:25:1a:a1:
         be:dc:1d:21:25:64:ac:b9:ea:7a:2d:f6:a6:65:6f:4f:0a:17:
         7f:fb:4f:90:e7:42:46:e5:ff:c4:51:bd:ce:ba:e1:cf:8d:97:
         70:ff:42:4a:6f:38:65:b1:4b:8c:49:86:7e:c0:81:99:b2:1f:
         a7:4b:06:03:62:58:d7:bb:0a:08:87:a5:05:23:6a:03:50:90:
         72:de:7b:c5:10:d9:a2:96:52:09:d7:15:ed:b1:5b:18:47:0c:
         d4:ac:ab:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4q0Ia7dZuYYYDPPq903CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjcxNDQzOTA1Zjk0MGIxMzhkOWQ0YjRhMzQ4N2NiZmJk
MDIxZTMwHhcNMjYwNzI4MTgwMDMyWhcNMjYwNzI5MTgwMDMyWjAzMTEwLwYDVQQD
EygzYmJhYWFkN2YwZDU1OWM4NWI4YmFlNjhhZGIxNWRjZjNkNzZjMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+6qpbHMapPhHbmMdlHzY/t7wI5s
XeQN0STJW9ikmWElJ5Tk29SesQ/WEliwUFu9GHRcmHzo0YG17F7mqWc4mWHR3dfK
6Gv51AbyDbZYH5FFx1ZAikURykK3dufaNOnI3A1pG2IjnikO9KzoTThvYqIIYSoa
zawZb+aOGgHmln0QE/Nn+mWIbRARKUN25Q1qOGXkvJoQ3skIdkDNA8ULB3XXDwZu
KdAPjFrYFMvpVsWzYkcUE7pmkdrhzfpkciNWnPwnciAsdvRSzflMaAKrCkMqs6D1
d8GVy7FIat3t51PwM/eud+PeCVd394Gv+Y9hkpivFrgfBFbA69EPExVRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu6qtfw1VnIW4uuaK2xXc89dsKbMB8GA1UdIwQY
MBaAFOgnFEOQX5QLE42dS0o0h8v70CHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUt
NTdjN2U2MTk5YjEyLzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUtNTdjN2U2MTk5YjEy
LzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoA3GTSK
2EPNO9YJISXAlwHQTHuChls5pHQ3ndzmyxRpiGy25tsGRFvXjZPZtX1aQC0g2qtg
rw3OB7xF98HQDfuwkWjJPKg1JC2rqzgrLanBu15r7l+NoQyZ0epSqJw3PB07/7PN
s5bYIblZpd23AeEr09PE0GVOl+ExoeARUm0bPACE5fdHjfzU4feaRuACaA64RA8Y
uALRDYWawqvNJRqhvtwdISVkrLnqei32pmVvTwoXf/tPkOdCRuX/xFG9zrrhz42X
cP9CSm84ZbFLjEmGfsCBmbIfp0sGA2JY17sKCIelBSNqA1CQct57xRDZopZSCdcV
7bFbGEcM1KyriQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:58 2026 by rpki-client