Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
File:                     6DoszpCD6MFaHTJc9IdnVZ-StiM.mft (raw, json)
Hash identifier:          X6dG+amHCr2wjLnMPVD/4ronOYctNkwhSSPx7pfnFtQ=
Subject key identifier:   57:FD:42:6D:CB:3E:F1:F9:9E:8B:C7:3C:C6:0C:C6:8A:0D:B4:86:21
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019FA93E6E919DA211719437446E55E86FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 15:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:08 +0000
Files and hashes:         1: 6DoszpCD6MFaHTJc9IdnVZ-StiM.crl (hash: 7iBeyPELeUrAndNHQwM42CbTiQ2Ty5mHcMIoDnFhPNM=)
                          2: CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa (hash: EDn78xn+p6oMFAEmlxUOHaCSYp4j7S763nhsCUw2Kv4=)
                          3: H9CdRCLLB89FGC_P99zvO9bw22M.roa (hash: /+D8bia7Or2I7xsqu4Z5whu7vt5QZWNJo6zSPqWl4CQ=)
                          4: ORyyWOYfH2nmHuG5PcDCFlq-wYQ.roa (hash: OirWDledNDa67ty/dKSFYukThzm9V2btotcDCbLF1o4=)
                          5: Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa (hash: gtJSWV6dJGPToJtFvmcUYQb8AcDhxr2Bne8t1GW0tKE=)
                          6: zcCiixqCklulb_B107CrpvzF08M.roa (hash: I58sikhQ3Ff9PunOEcBamQjNVvG5kDBAQWFHprNeKL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:6e:91:9d:a2:11:71:94:37:44:6e:55:e8:6f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Jul 28 15:01:08 2026 GMT
            Not After : Jul 29 15:01:08 2026 GMT
        Subject: CN=57fd426dcb3ef1f99e8bc73cc60cc68a0db48621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:95:8e:34:17:56:56:e1:a6:19:c9:2e:ae:
                    73:3c:f1:cd:d5:60:4c:9a:15:32:1b:74:7f:bd:4c:
                    9a:11:6a:27:3f:55:dc:46:01:66:e6:0c:f8:47:6d:
                    c5:28:7b:e9:58:9d:43:cb:18:63:b9:f1:03:04:9d:
                    96:e9:91:82:60:5b:5d:55:7f:7f:26:a3:d5:42:c8:
                    38:df:06:ea:18:11:4a:8d:48:05:cb:ca:09:3e:b3:
                    4b:bf:43:bf:58:d3:5f:2c:15:80:dc:35:d8:8c:22:
                    f2:a9:02:34:59:82:32:f6:bb:ca:76:56:e0:24:51:
                    fd:b0:a2:25:47:c5:4d:8b:2d:5d:c1:6f:e9:96:ae:
                    0d:0d:d9:d6:56:c5:93:b2:78:35:a5:90:db:4d:03:
                    07:04:90:a8:c5:6e:05:24:5b:45:9e:45:b0:97:a7:
                    20:67:2e:8e:ce:10:8b:94:65:80:db:72:c2:22:8b:
                    25:d8:53:d4:36:00:16:a9:8d:c3:21:a6:fb:26:f0:
                    9b:96:bf:a8:c9:9e:5b:dc:e5:c1:82:95:b2:89:ea:
                    54:0e:d0:60:97:d4:8f:80:9e:fa:7a:9c:aa:3b:ae:
                    9b:53:d1:fa:bd:a1:0f:88:ba:f2:f2:a8:66:40:85:
                    b1:10:04:70:3d:bc:09:8c:1a:77:de:cc:51:61:ca:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FD:42:6D:CB:3E:F1:F9:9E:8B:C7:3C:C6:0C:C6:8A:0D:B4:86:21
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:89:b0:87:ae:04:97:af:b0:56:34:94:5e:ee:f8:ca:31:67:
         ff:32:9b:f2:ff:de:0f:c3:2e:01:24:25:8b:62:10:f6:80:20:
         ba:af:a5:d6:42:0c:3b:56:e6:af:10:4b:46:ca:ac:5f:22:40:
         24:c6:82:9a:fd:5a:75:1c:3a:61:46:2a:d3:5e:39:1c:94:5c:
         60:63:09:1c:a2:6f:25:ad:08:fa:03:d5:6e:92:58:f2:09:14:
         77:c4:52:4f:9a:32:82:11:48:a6:cb:dc:cd:f8:76:6d:f3:dd:
         7c:55:e1:15:2a:7a:8d:ea:a3:b5:65:42:3b:ec:b3:25:f1:60:
         10:a9:aa:4e:a1:cc:49:e8:ae:5f:17:94:62:5d:16:fc:84:8a:
         10:d5:cf:40:85:65:59:d2:f1:6a:c6:c5:b9:e5:34:82:3e:57:
         dc:c8:37:27:a6:3a:66:a0:6a:c6:4b:1d:fd:b5:bf:c2:38:73:
         f5:2f:e4:a0:6c:c5:6c:c1:02:7e:88:6e:b4:68:03:05:42:61:
         54:2b:8b:66:7e:6a:1f:6d:c9:51:0e:fd:23:e2:0d:5d:3d:02:
         f3:38:7f:73:8c:d5:84:79:41:79:14:59:00:a0:2f:a8:eb:8f:
         3f:35:d7:a5:be:fe:41:6e:0a:9a:ce:0b:0d:c6:fd:8a:5c:0a:
         65:a8:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:04 2026 by rpki-client