Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File:                     r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier:          GmT+eRu2bb2pwxNIMoAbwCdGbCAMOWkESiKq6q2npzs=
Subject key identifier:   24:48:DA:11:47:FC:33:0B:09:8D:32:0F:69:CB:84:10:CE:E3:FC:43
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer:       /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial:       019FAD885552A5CA0BF12D538A4CC32C7576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number:          1532
Signing time:             Wed 29 Jul 2026 11:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 11:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 11:00:20 +0000
Files and hashes:         1: 8VoV6D_eegqIBHZanaVQhQ_BcA0.roa (hash: BR+EO4ahbvoTRogEluDEGsMqIHtTB8hdFQ6Pgx2wNhw=)
                          2: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: QEhqBw82bn/HR4WKQsVP9czJ0voYvwDlpETsQNVtkDM=)
                          3: sG9W1Xy_sx6TaJNJJ2tAauKaFb4.roa (hash: 2TT3GLZDtqOpSaUq6isrPNnlWIbuaybJDZfYdXkAT/w=)
                          4: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (hash: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:88:55:52:a5:ca:0b:f1:2d:53:8a:4c:c3:2c:75:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
        Validity
            Not Before: Jul 29 11:00:20 2026 GMT
            Not After : Jul 30 11:00:20 2026 GMT
        Subject: CN=2448da1147fc330b098d320f69cb8410cee3fc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:ae:ef:bd:da:6c:57:e9:70:67:bf:20:ec:
                    ba:b2:b0:31:28:b6:31:23:4e:af:1a:3e:e2:48:2c:
                    4f:43:84:58:3b:4f:dd:22:1b:7f:4b:62:7b:65:26:
                    94:7c:df:e7:5e:37:a2:e7:c7:e8:72:c4:d9:57:e6:
                    fc:4e:04:50:dd:1e:bf:50:20:9c:ea:57:0f:2d:d1:
                    b9:46:6d:3f:31:b1:4d:1f:de:2b:ff:72:b9:e3:85:
                    92:31:db:2e:57:f0:d6:e1:c5:86:b0:34:db:70:43:
                    f0:e9:ea:cb:24:55:4d:25:10:68:16:ac:b3:dd:03:
                    b7:d8:f0:ea:1f:d4:9e:5d:98:06:13:6d:3f:21:c7:
                    f8:57:1e:bf:52:5d:c1:79:91:2a:25:c1:e6:93:e4:
                    9a:c5:a3:c4:c8:9b:12:b8:01:e4:0d:07:f6:50:d0:
                    56:f1:7d:31:5d:49:37:15:b3:77:e7:6d:7e:de:44:
                    aa:5d:fe:7e:16:dd:0c:fe:e7:2d:0a:54:39:d8:2a:
                    ea:cb:19:b3:53:8f:f1:44:3a:f2:d4:1d:ae:e9:f1:
                    06:ee:22:87:19:9b:62:f2:dd:2b:e4:bb:1c:03:40:
                    00:91:48:29:67:eb:dc:d0:79:4c:14:96:47:ca:b5:
                    8f:02:97:88:48:85:51:fb:11:81:ae:bc:a6:7f:6d:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:DA:11:47:FC:33:0B:09:8D:32:0F:69:CB:84:10:CE:E3:FC:43
            X509v3 Authority Key Identifier:
                keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a1:83:92:7f:3d:91:a9:93:8a:18:ec:a8:b7:c6:ff:e5:7b:
         09:a1:19:30:ba:0b:9a:6d:8f:13:1c:59:47:e1:71:f8:af:01:
         e6:b3:f4:26:1b:42:e6:43:1f:0f:77:3c:c8:7f:7d:0d:85:f5:
         ec:60:37:7d:ab:b8:69:91:c9:9f:35:60:7f:82:3b:db:95:45:
         08:bb:fb:44:03:19:32:ed:f0:5b:aa:a2:65:76:75:43:71:b2:
         95:67:09:1a:8a:58:0c:05:76:a0:97:f0:ed:af:36:f8:ad:95:
         cb:0e:59:e2:c1:37:eb:fb:63:00:06:7b:fe:8c:22:06:37:5b:
         1c:1d:76:30:cb:e4:1d:76:9a:c5:be:2f:30:06:f5:bc:cf:27:
         00:88:e0:77:ca:6a:a3:ac:83:bd:2c:3b:a4:78:87:52:e4:ad:
         d5:13:68:4d:38:18:2b:87:07:68:0b:a2:b6:2d:a6:d5:80:37:
         c5:62:08:d4:27:e6:61:47:34:02:91:36:48:f4:ec:48:ed:63:
         76:26:f4:42:fa:55:c8:7a:f3:59:23:0f:46:96:b8:4f:00:b5:
         23:2f:39:08:67:f3:98:0c:5c:04:59:62:98:fc:9b:66:0a:16:
         72:e3:ec:a1:8d:40:af:6c:1b:0b:d1:f7:e8:5e:cd:51:87:f8:
         17:db:b5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:11 2026 by rpki-client