Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          jRb1F1ZT+ZAGoyvy9bqbqVJ2wghB8rmEYqmZD0Lprr4=
Subject key identifier:   0C:C4:5D:05:D4:F1:8F:61:16:A5:55:C6:19:B0:E0:14:37:AD:7F:B2
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       019FAA1A7B2045F5604C1F3321CE4EC68127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 19:01:29 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:29 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: Sb/yLw+h43JvqsXxibsm7UgiEtXoFfH/Td8Bi34PtIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:7b:20:45:f5:60:4c:1f:33:21:ce:4e:c6:81:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Jul 28 19:01:29 2026 GMT
            Not After : Jul 29 19:01:29 2026 GMT
        Subject: CN=0cc45d05d4f18f6116a555c619b0e01437ad7fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:49:ea:84:ff:db:5a:37:55:d4:e0:e3:ed:76:
                    5c:09:d6:46:04:f5:5c:7d:37:3f:07:21:7a:7b:1f:
                    c2:d3:1c:0d:6c:5e:c4:a2:3f:a2:c0:84:f9:e0:ea:
                    ef:df:e5:3d:0b:33:ce:71:1c:de:fc:98:0b:e6:31:
                    34:c4:e3:bb:92:b0:ec:84:90:29:98:f1:69:bc:08:
                    a1:ae:d4:d7:c5:c3:11:60:4a:92:04:c4:36:26:9b:
                    87:cd:72:20:a6:72:a8:f9:ec:43:a3:14:db:5f:6c:
                    49:9b:cf:a6:e9:5a:6a:39:54:c8:87:ed:42:b1:9c:
                    9e:17:be:71:fc:4b:d8:d6:de:03:94:f2:fb:fd:a9:
                    63:0d:8a:13:5d:0b:17:38:d9:43:47:60:09:cd:7f:
                    cb:f2:62:27:b7:19:cc:28:1e:40:50:0c:64:64:ca:
                    78:25:d3:93:db:af:e4:21:c3:9c:2a:ae:d5:95:c0:
                    b1:2c:9a:58:9f:c5:2f:1b:ef:76:79:ba:a1:ea:a3:
                    a5:ee:59:df:e9:e6:da:63:6b:a6:56:38:8f:cc:8f:
                    3e:ec:8b:ba:e5:92:e2:a0:34:19:a8:fb:39:a6:80:
                    0d:82:bd:ef:9b:7d:e2:78:4a:64:53:c8:5f:6f:f7:
                    6e:29:c5:35:81:26:bb:77:26:fb:cc:c4:8d:d9:7d:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C4:5D:05:D4:F1:8F:61:16:A5:55:C6:19:B0:E0:14:37:AD:7F:B2
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d9:d7:56:7a:59:d7:14:f5:f4:2b:1a:29:07:4e:06:97:82:
         91:88:f1:6e:05:82:b2:db:69:a3:64:1c:e1:d3:4c:72:71:46:
         4f:0e:5a:e3:52:3c:9a:e0:00:e1:cb:53:ce:1c:55:56:01:67:
         2a:8c:07:45:20:b2:f4:3f:45:04:0a:69:8c:40:36:60:3f:b8:
         d9:0b:97:ac:01:77:6b:f4:2a:68:df:20:95:a5:55:78:f4:b9:
         77:c5:0b:31:39:27:e6:53:16:20:55:03:69:bc:c5:07:7e:de:
         70:0e:a3:94:3f:de:02:79:b5:eb:36:57:e8:fb:95:1f:12:77:
         05:75:de:21:a2:c5:0b:a0:08:81:e5:20:9e:08:b1:ba:07:e0:
         df:49:0e:c2:6f:34:50:c2:e8:4e:2e:ab:ed:1a:f8:f6:1a:fa:
         f9:72:fb:8b:59:7b:78:38:3c:9e:75:f4:45:72:30:ec:16:1f:
         de:e3:ec:6b:45:05:03:e8:8c:15:2e:7f:a4:29:0c:97:64:34:
         9b:78:a5:c4:0f:c5:2b:3b:93:3a:d7:15:d2:7f:36:27:ae:6f:
         69:a9:ec:6e:33:a0:b0:06:c0:d1:22:70:1d:8a:2d:f9:07:f7:
         4d:52:56:0d:f5:ea:60:67:4d:2c:d5:ca:e9:ce:18:e8:b4:62:
         87:51:9d:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGnsgRfVgTB8zIc5OxoEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWJjMmVhNjI1MjM4YmI0ZTI4MjFhMThiZDVlZWVhM2E2
OGE3ZjkwHhcNMjYwNzI4MTkwMTI5WhcNMjYwNzI5MTkwMTI5WjAzMTEwLwYDVQQD
EygwY2M0NWQwNWQ0ZjE4ZjYxMTZhNTU1YzYxOWIwZTAxNDM3YWQ3ZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEnqhP/bWjdV1ODj7XZcCdZGBPVc
fTc/ByF6ex/C0xwNbF7Eoj+iwIT54Orv3+U9CzPOcRze/JgL5jE0xOO7krDshJAp
mPFpvAihrtTXxcMRYEqSBMQ2JpuHzXIgpnKo+exDoxTbX2xJm8+m6VpqOVTIh+1C
sZyeF75x/EvY1t4DlPL7/aljDYoTXQsXONlDR2AJzX/L8mIntxnMKB5AUAxkZMp4
JdOT26/kIcOcKq7VlcCxLJpYn8UvG+92ebqh6qOl7lnf6ebaY2umVjiPzI8+7Iu6
5ZLioDQZqPs5poANgr3vm33ieEpkU8hfb/duKcU1gSa7dyb7zMSN2X173wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzEXQXU8Y9hFqVVxhmw4BQ3rX+yMB8GA1UdIwQY
MBaAFOsbwupiUji7TighoYvV7uo6aKf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2Et
NTg5MjIyNzJiYjE3LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2EtNTg5MjIyNzJiYjE3
LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNnXVnpZ
1xT19CsaKQdOBpeCkYjxbgWCsttpo2Qc4dNMcnFGTw5a41I8muAA4ctTzhxVVgFn
KowHRSCy9D9FBAppjEA2YD+42QuXrAF3a/QqaN8glaVVePS5d8ULMTkn5lMWIFUD
abzFB37ecA6jlD/eAnm16zZX6PuVHxJ3BXXeIaLFC6AIgeUgngixugfg30kOwm80
UMLoTi6r7Rr49hr6+XL7i1l7eDg8nnX0RXIw7BYf3uPsa0UFA+iMFS5/pCkMl2Q0
m3ilxA/FKzuTOtcV0n82J65vaansbjOgsAbA0SJwHYot+Qf3TVJWDfXqYGdNLNXK
6c4Y6LRih1Gdfw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:28:16 2026 by rpki-client