Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
File:                     6KMuimrG9uw3hg7nwH6435MUd3k.mft (raw, json)
Hash identifier:          xIv1T7bLEOYgLHRo3UECfao35EjTblocPK2gJRTrnJM=
Subject key identifier:   8B:FC:56:EC:76:E1:A8:2F:EF:D6:07:81:AC:CC:B8:19:5D:08:E3:C1
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Certificate issuer:       /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial:       019FAA8784BCB370735504A311076B8099B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 21:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:35 +0000
Files and hashes:         1: 0tMWDsmaNpirizCIuYm2kQJNSB4.roa (hash: 7gDJtEKwpzRoEr+LF0O50BFAilj5lath99QLh0PO740=)
                          2: 1Irv8E4u7UykS63xv-ROJgQRbvY.roa (hash: ONra4D/SwQN2JXNsh0SIHWZc56JHdpcbYmoF15rsgHw=)
                          3: 6KMuimrG9uw3hg7nwH6435MUd3k.crl (hash: s9E+NMoY3Zi7mHpm0elf7wje3L0V6Gd0rJc3f/XwOnI=)
                          4: BSyVVnIQyVE4YwB72lzy14u_BDA.roa (hash: UV3CW9R7w+p/7qtVB+/WOrunh+7+rnwo65AYKWYxNqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:84:bc:b3:70:73:55:04:a3:11:07:6b:80:99:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
        Validity
            Not Before: Jul 28 21:00:35 2026 GMT
            Not After : Jul 29 21:00:35 2026 GMT
        Subject: CN=8bfc56ec76e1a82fefd60781acccb8195d08e3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:2a:35:6d:77:75:ca:12:c6:05:9d:3c:87:
                    7c:93:d7:77:ff:60:fd:f7:63:03:42:1b:35:48:61:
                    71:85:d8:70:0b:ed:50:c6:5a:d8:ec:d5:4e:72:d2:
                    9e:6e:40:25:2f:7d:f0:e7:c7:ff:34:08:88:96:1d:
                    4d:21:91:d6:35:6d:d5:4a:0f:31:b2:84:32:91:19:
                    23:43:96:4c:61:38:34:e9:b2:30:b7:1e:99:ea:d2:
                    e1:83:a8:c6:bd:fd:51:da:1c:57:fb:46:7e:c9:cb:
                    cb:43:40:45:5f:2c:14:2a:9c:30:96:c4:e5:9c:d1:
                    b7:93:07:78:c1:b7:16:28:94:4c:40:05:86:63:ce:
                    e0:3e:f9:c0:64:e4:38:29:a3:ca:b6:9b:65:00:b4:
                    13:72:f0:be:5a:91:fc:74:ab:d7:65:bd:4f:10:7d:
                    5f:65:5f:40:a5:c1:27:08:58:ac:d2:9d:5b:ad:4f:
                    a7:fc:0c:7c:45:ce:fd:32:3d:df:34:aa:11:73:48:
                    e2:d2:61:13:02:6f:0b:e8:a4:5e:34:23:70:f3:21:
                    3d:e1:57:cc:00:db:7c:87:ef:9a:c4:88:45:ec:a5:
                    80:92:3f:df:30:95:8a:2d:3d:27:76:4e:f0:77:d9:
                    f8:9a:7a:d8:42:b6:f1:6a:dc:36:54:de:25:86:96:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:56:EC:76:E1:A8:2F:EF:D6:07:81:AC:CC:B8:19:5D:08:E3:C1
            X509v3 Authority Key Identifier:
                keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6f:ec:9e:ab:48:a3:6f:f2:b2:e7:6a:31:45:f7:62:3e:76:
         f3:cb:3a:17:42:39:2b:e3:85:eb:19:e0:d9:8d:66:18:94:e0:
         98:92:59:e3:51:71:c1:d6:3a:8e:28:ac:66:6d:1d:0f:40:44:
         cd:ce:4a:15:ab:c2:24:76:84:45:33:78:1e:ba:04:fb:fe:97:
         7d:2b:a5:35:c8:4f:91:82:7b:b7:10:d4:a6:8f:11:06:31:ea:
         16:6b:85:cf:d3:ad:32:ba:c9:c2:5d:ba:43:0e:f6:03:e2:65:
         c1:1d:0a:99:ef:74:64:99:d8:8f:b9:62:cd:5a:d0:26:98:56:
         a3:37:64:bf:85:04:e0:7b:f6:f8:73:f5:e7:dd:66:bb:9c:f4:
         a0:8b:e2:37:71:76:6c:c8:e1:de:97:27:1c:fc:12:87:62:d2:
         ab:35:ea:2f:9b:0c:a5:f0:f0:ca:4f:ea:a3:38:7c:9f:ab:5a:
         e5:2d:08:31:99:4a:c9:ce:88:88:5d:c1:9c:d7:69:22:b3:7e:
         b4:34:72:d2:01:e8:a0:49:4c:5e:17:f7:e1:2c:95:b9:03:f1:
         c2:d9:8e:41:34:5e:b5:0c:4d:5b:59:e2:69:90:28:e9:b8:97:
         f6:b1:06:da:a6:bf:88:77:4b:fa:ef:a8:2f:ba:df:a9:5b:46:
         7d:e9:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:14:38 2026 by rpki-client