Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File:                     6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier:          oFeiwbZ9xIuTajVkfWINxLTNw9uE8GDqcrzU/JWCHlo=
Subject key identifier:   C7:06:BC:52:75:B7:63:B2:03:7B:75:34:F6:BA:B4:4A:8A:45:EF:55
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer:       /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial:       019FA861DFE20899AF8A304DF17B862FE9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 11:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:14 +0000
Files and hashes:         1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: Eee681a9BP5W5Qvwle2TS9NX2ltOkzvLHM9f/QFZZGg=)
                          2: Ol2LcIckb0JEorAeZ9ZW8Jfsn4Q.roa (hash: wPlF6pF4PXwOQzyCGkjuNlYnp29Vxy6PXU2oWbLVg5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:61:df:e2:08:99:af:8a:30:4d:f1:7b:86:2f:e9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
        Validity
            Not Before: Jul 28 11:00:14 2026 GMT
            Not After : Jul 29 11:00:14 2026 GMT
        Subject: CN=c706bc5275b763b2037b7534f6bab44a8a45ef55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:31:e4:3c:b1:15:8a:99:8b:81:69:4f:f3:
                    99:09:fb:df:36:e4:1d:b5:c2:74:2e:ca:47:76:64:
                    b9:2b:ff:fc:20:12:7e:de:2e:c4:e2:3a:86:61:17:
                    ac:57:26:85:05:ea:ca:7d:8b:1a:37:66:e4:ba:c1:
                    8d:47:2e:2e:f7:83:6c:ee:e2:ac:ba:27:64:2b:43:
                    42:ba:c8:54:4f:dc:94:33:cd:28:55:7d:d8:aa:58:
                    ed:50:45:56:16:c0:44:fc:95:aa:43:7f:d7:5e:11:
                    18:7d:1e:d6:a1:c5:47:35:5e:dc:65:68:cf:77:4c:
                    a9:11:04:22:e5:52:c8:84:e3:94:1b:2b:0f:48:e9:
                    60:f7:9c:8b:b9:40:5b:c3:3c:c4:77:81:59:83:0a:
                    1c:7c:67:25:f6:35:a5:11:45:46:9e:df:e4:e4:d8:
                    6e:a9:e3:34:6a:43:65:b8:c4:95:c4:81:b3:8e:82:
                    2a:64:cc:7f:db:4a:e2:97:1c:35:7e:7f:b5:4b:93:
                    43:8f:07:b0:3d:ad:4c:f2:01:1b:c6:a8:46:3f:fd:
                    81:91:64:6b:4d:86:06:c5:0c:80:2f:29:f2:b7:14:
                    cb:78:69:df:11:93:47:3c:64:f7:66:68:fa:66:80:
                    61:f2:61:2a:d2:20:44:bd:e6:78:01:e9:f8:91:c7:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:BC:52:75:B7:63:B2:03:7B:75:34:F6:BA:B4:4A:8A:45:EF:55
            X509v3 Authority Key Identifier:
                keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:2d:ad:95:38:cc:37:99:c7:95:f4:7f:f3:66:0c:61:ae:
         de:ee:41:03:0a:1c:a5:d1:85:d3:b9:ab:89:c5:16:f2:ef:ef:
         47:1a:95:ce:1a:1b:86:36:4e:88:04:ad:50:32:fe:b3:3a:b8:
         92:54:10:43:58:90:d1:08:46:83:0a:9d:66:ca:d8:ef:b0:8f:
         cf:4f:bf:1f:97:03:d5:d9:94:9b:44:6c:77:d0:95:25:76:e1:
         5b:ca:cb:31:f9:df:e1:c2:90:c0:2e:d6:d0:a8:37:29:b5:c7:
         f1:04:84:f6:d6:21:65:7f:b2:fe:70:5c:f4:81:d4:82:b5:e5:
         18:b2:07:b0:70:60:54:d0:63:2d:3a:18:b5:9e:40:71:3a:cf:
         5e:fe:59:d5:23:cc:b9:9c:ca:05:84:54:0c:46:ea:ed:2b:0a:
         82:8a:06:af:2e:d0:5d:56:65:85:7d:7e:f8:0b:ca:18:64:70:
         7a:12:fb:8f:e2:f4:76:09:af:4a:a4:8d:4f:9b:95:6d:7e:4c:
         a8:3a:13:79:04:81:7e:f6:8b:bb:05:7f:25:53:f6:37:0c:08:
         3a:2b:cf:8c:5b:60:c2:48:aa:52:89:4a:a5:1b:83:5f:56:d7:
         8a:f9:a6:5e:49:95:a7:1f:36:7e:76:f6:cd:65:06:ef:4f:98:
         59:92:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:24 2026 by rpki-client