Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
File:                     c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft (raw, json)
Hash identifier:          NgVcLdiU+KsBTCtLNPVOEeyeduGSZ0S2btIlqKkk7oo=
Subject key identifier:   90:EB:D1:12:2F:87:2F:17:B4:43:E3:98:AE:EF:77:75:10:8A:95:F1
Authority key identifier: 73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B
Certificate issuer:       /CN=736c83469d2807ebe397115bbd84f94488cc814b
Certificate serial:       019FAB9A7DEAA0B7124F6CA5379388C193BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
Manifest number:          E6
Signing time:             Wed 29 Jul 2026 02:00:56 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:56 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:56 +0000
Files and hashes:         1: WCRvbp_nJ61w_L7dB6Hf7IOGAtY.roa (hash: 64WvdrrvzHpzDzkmPq1Up/4HxutVHHLjzEFwNnqxnK8=)
                          2: c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl (hash: O3oa+Vwwnhkb9pzP6uSI7AV5ZBCT3OQnk4jkiwgkSsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:7d:ea:a0:b7:12:4f:6c:a5:37:93:88:c1:93:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736c83469d2807ebe397115bbd84f94488cc814b
        Validity
            Not Before: Jul 29 02:00:56 2026 GMT
            Not After : Jul 30 02:00:56 2026 GMT
        Subject: CN=90ebd1122f872f17b443e398aeef7775108a95f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:d7:0d:a1:85:bc:c7:4e:9e:9d:ab:f0:7a:
                    15:41:66:fa:20:a9:fe:cf:a4:28:ca:18:a0:f7:4c:
                    d5:f0:8c:a2:cb:b1:20:9f:a8:f1:cb:92:21:7d:1c:
                    53:40:f7:b2:71:3a:13:01:a9:67:bf:e4:78:0e:e9:
                    2e:db:62:20:54:cf:63:0a:b4:c1:70:1e:18:c9:d5:
                    2d:f1:49:91:5a:12:75:4f:22:d3:60:1b:bc:59:fa:
                    e6:45:0c:a4:22:a8:f2:af:15:d0:9b:a3:4d:d9:8d:
                    2c:52:60:d5:ae:f7:a9:c7:26:99:61:54:8a:0e:87:
                    06:fd:46:a6:19:4c:69:43:d2:52:6e:0a:3e:b4:dc:
                    d1:9b:be:80:cb:7a:83:f2:2b:5c:65:94:ba:0d:bf:
                    be:2d:b3:57:9f:27:21:a3:cf:5c:d2:2b:f3:4a:b8:
                    c2:e7:5e:d3:a8:95:fc:d4:9f:ca:0d:7b:81:c0:de:
                    7b:76:83:7b:c0:39:ed:02:d6:d2:f1:08:c5:27:59:
                    55:24:98:3d:51:9f:09:62:63:91:52:0d:7a:82:e4:
                    6e:2b:e2:ee:9c:9c:aa:73:8f:23:73:3e:79:92:64:
                    11:ce:17:56:64:95:17:23:96:86:b5:e1:4e:c5:f8:
                    66:27:ed:11:41:46:c6:61:4e:0c:0e:78:45:21:2e:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EB:D1:12:2F:87:2F:17:B4:43:E3:98:AE:EF:77:75:10:8A:95:F1
            X509v3 Authority Key Identifier:
                keyid:73:6C:83:46:9D:28:07:EB:E3:97:11:5B:BD:84:F9:44:88:CC:81:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2yDRp0oB-vjlxFbvYT5RIjMgUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/192afd-e08e-449e-80d0-98ca75018dbf/1/c2yDRp0oB-vjlxFbvYT5RIjMgUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:13:89:0f:00:45:47:11:c3:0c:0f:30:64:41:03:97:ca:38:
         86:de:93:3d:67:68:c2:21:e4:16:15:3b:e2:5c:79:3b:91:8b:
         8c:25:96:01:a8:c3:68:9d:7a:ac:0e:dd:e7:30:ef:e6:42:b3:
         aa:07:2c:02:d2:65:bf:96:13:e3:b9:20:ac:5f:84:88:a3:4b:
         2e:b6:91:ec:c2:1c:82:a9:2d:50:62:cd:5f:43:0f:88:d4:ee:
         c3:65:c1:df:70:f9:e7:f2:ec:14:79:5a:85:17:98:9f:86:71:
         02:16:97:ba:72:f8:67:f8:29:5b:97:34:5f:90:a4:6b:e0:70:
         f9:0a:c1:36:fa:aa:7b:5a:d4:b2:0a:6d:7e:fa:a8:7f:72:21:
         5d:2d:f6:bb:dd:76:2f:a0:32:8d:d8:7b:55:1c:82:6e:c0:ff:
         b6:2a:15:b0:4f:88:a3:0d:36:29:cb:57:60:4a:cb:88:9d:8e:
         2e:ac:06:11:e1:b9:d9:a1:7a:46:34:35:7c:91:53:af:26:e4:
         63:bb:c3:81:c3:1a:9b:76:13:20:c3:f1:25:4a:f8:3c:e8:7f:
         18:1f:9d:4f:bd:9b:32:1c:db:84:f0:a3:f5:2a:be:3c:df:fb:
         ae:dc:ca:6e:9f:63:6c:c1:b5:67:19:6d:58:b4:bb:36:98:00:
         39:cd:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:30:51 2026 by rpki-client