Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          dnzNSeUoXf6e3kbEhlqXRHB+Dvq5m1u7nx2hz0+JCjI=
Subject key identifier:   85:26:88:60:C0:85:C1:C7:BB:14:C4:D4:41:E1:33:52:3F:FE:D9:2C
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       019FAA198713765B6FB62B26F2AAFA7BAC27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          13CC
Signing time:             Tue 28 Jul 2026 19:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:27 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: VyyC1XRWy9RsrwRXLwa77N70SKwTxKf1nbEaxK2Ob0I=)
                          2: RKDDpCFJgRVsaPKFW2mBHa9GuIM.roa (hash: iYIciX5oRPMlYEZ43lpL4qlTSrlyvBgCIZc5o+HesAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:87:13:76:5b:6f:b6:2b:26:f2:aa:fa:7b:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Jul 28 19:00:27 2026 GMT
            Not After : Jul 29 19:00:27 2026 GMT
        Subject: CN=85268860c085c1c7bb14c4d441e133523ffed92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:a0:f6:7a:97:18:df:d4:6a:c3:65:9d:af:
                    7b:23:63:99:8c:ee:72:bb:d5:29:7c:3a:66:4b:3d:
                    8c:5c:de:0b:4c:05:9f:37:2c:ec:25:38:bc:ab:04:
                    11:be:3c:e1:47:04:bb:9f:50:32:35:a5:58:9b:46:
                    65:8c:75:e8:9b:f4:13:e2:55:67:94:1e:b5:bf:33:
                    c0:c0:43:b3:05:a4:64:64:6b:e8:35:5d:22:0a:30:
                    58:fa:5a:2a:89:28:43:be:f4:93:45:a7:2a:6a:b4:
                    22:78:d6:a7:d2:95:84:7b:7d:88:32:0a:86:3d:96:
                    45:99:bf:bf:8b:41:7a:aa:cc:4f:15:1f:e1:48:e3:
                    08:98:4e:2f:e8:12:57:a3:91:0a:6c:f4:08:82:1c:
                    2d:66:70:4e:4b:bc:e7:a4:f6:de:2b:a9:dc:04:f4:
                    84:c9:1d:a9:d7:13:22:4c:09:75:ab:3f:a5:1b:d0:
                    dc:a0:90:3b:d1:6d:1d:b1:2c:96:ae:e6:0d:c8:1f:
                    26:53:fd:36:79:09:71:04:55:c5:78:13:dd:ef:34:
                    05:cd:c0:4e:33:83:0d:a2:96:9c:0c:d6:30:b5:a7:
                    38:e6:ae:7f:8d:d0:2d:60:cd:9a:0f:8f:b0:6d:5b:
                    22:f8:ab:3a:20:31:86:fe:ff:91:77:c9:5f:55:0c:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:26:88:60:C0:85:C1:C7:BB:14:C4:D4:41:E1:33:52:3F:FE:D9:2C
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:38:ea:d4:55:97:77:32:ef:09:ae:cf:ff:bb:00:e8:e5:9b:
         41:6d:53:db:84:ce:e9:16:38:59:33:c6:16:6f:a5:0d:c6:58:
         89:1c:3f:f2:51:8e:df:55:ba:e7:fb:f6:5f:89:29:e6:08:f5:
         90:66:85:a4:8f:84:ee:09:e1:f3:99:7e:df:1b:ef:35:ae:03:
         cb:87:a9:59:69:f0:90:55:72:8c:88:49:ad:e6:bd:66:b2:36:
         05:81:1f:02:82:d6:3e:0b:13:45:73:db:f8:78:9f:70:45:11:
         96:8f:5e:0d:b6:fb:8d:b5:f1:64:00:d3:b4:52:65:3c:d8:8d:
         a1:22:3e:46:45:38:3f:f0:96:63:02:05:9f:e1:12:06:5d:c6:
         c9:df:04:a5:1c:ef:ec:7a:e0:f5:95:ae:a1:79:39:28:af:3a:
         69:5c:15:2a:73:7f:1c:60:53:b2:f6:38:63:58:52:bc:e3:eb:
         8d:da:17:fc:aa:9d:5c:4c:0a:a4:cb:5b:17:ca:93:67:cf:01:
         e8:d9:14:49:27:a2:e5:f9:60:be:35:24:08:d6:52:7b:9e:29:
         81:24:60:69:06:3f:3e:3d:b4:43:57:a0:37:09:65:96:3c:e3:
         9a:5c:26:b6:73:52:e3:cb:08:05:2d:59:42:65:d4:66:07:34:
         2f:bf:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:51:55 2026 by rpki-client