Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File:                     8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier:          eqnTy/1fw5CwgItmzE1o6zHrWwcccfJnJyIiZ5Z1s0o=
Subject key identifier:   A6:BF:A4:BD:3A:91:B3:40:41:DB:9C:41:C4:1C:74:58:3E:DF:86:19
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer:       /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial:       019FAC3F041B3690FDCFA68805C86849A113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 05:00:38 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:38 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:38 +0000
Files and hashes:         1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
                          2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: NxRYrLesFq1A2pAFiZlCSAauJ5IOLXeMbDPLXfImsw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:04:1b:36:90:fd:cf:a6:88:05:c8:68:49:a1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
        Validity
            Not Before: Jul 29 05:00:38 2026 GMT
            Not After : Jul 30 05:00:38 2026 GMT
        Subject: CN=a6bfa4bd3a91b34041db9c41c41c74583edf8619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:b7:e6:0c:fa:71:bb:64:44:85:cc:b9:39:
                    6a:9e:a1:b1:33:aa:9f:75:3d:ca:07:a6:3c:e9:5c:
                    34:18:6a:47:5d:6e:45:64:85:44:1e:75:14:83:08:
                    90:8a:58:d0:c5:83:b7:f7:ea:f8:19:e0:57:9f:73:
                    13:cb:06:80:65:0b:d3:2d:a9:90:6a:3e:46:30:84:
                    87:31:08:14:bb:3d:40:6b:3f:57:8d:72:bf:61:11:
                    bb:f4:af:08:91:2c:bb:38:ef:99:49:80:a5:a5:c7:
                    28:3e:c0:7c:80:6a:e8:19:bc:c1:12:15:8c:84:c2:
                    65:e6:52:25:5f:1c:40:2b:00:f2:68:6b:9d:34:e8:
                    ef:ae:e9:dc:f2:af:93:35:c0:d1:4b:68:8b:c6:2b:
                    e7:35:af:88:b3:32:00:3c:09:8a:31:16:89:a1:65:
                    6a:7c:5c:c9:97:bc:6e:3a:37:57:c0:eb:b4:1e:04:
                    44:9e:d8:31:25:00:36:a0:48:70:e5:71:21:f0:15:
                    1e:61:8a:fd:ac:f1:ac:89:88:17:d9:24:25:2c:2f:
                    40:44:f1:e3:e6:fe:85:e1:74:85:85:c0:b0:81:0b:
                    9b:29:fd:b5:ce:a2:b1:a6:45:90:86:fa:af:58:2f:
                    d3:bf:81:48:9b:72:3f:23:99:9e:b1:f3:95:97:7c:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BF:A4:BD:3A:91:B3:40:41:DB:9C:41:C4:1C:74:58:3E:DF:86:19
            X509v3 Authority Key Identifier:
                keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:95:7e:b7:f0:47:55:1a:64:c1:cb:3b:fc:ed:07:b3:9c:7a:
         ae:71:3f:7f:5c:73:e2:59:71:24:42:b2:3e:e1:ef:88:98:b4:
         8a:da:20:cf:47:7c:9e:21:c1:e8:37:4b:c6:d5:1f:e6:6b:fa:
         c4:4b:65:59:35:db:00:03:37:1a:54:37:01:d5:b4:b6:a7:dc:
         78:60:13:6a:e8:97:3a:f4:8a:fd:ff:8a:5d:66:42:7f:fa:1e:
         49:52:ce:c6:08:e6:88:12:3a:d6:22:32:29:a5:63:f9:1e:7b:
         0f:b2:ab:04:42:86:3c:02:ce:43:c2:a8:a3:f9:98:b4:d4:86:
         cd:8c:06:68:ac:9e:06:79:d9:c4:64:03:f0:42:ab:38:b9:30:
         f4:ed:1f:37:3a:92:1d:eb:c6:11:76:a7:7b:6b:39:40:d8:fb:
         3a:4b:60:09:94:eb:e8:41:17:7d:eb:58:64:06:4b:da:9f:dd:
         ca:86:bf:68:36:de:f7:e5:65:df:3a:89:ec:8b:f5:46:08:53:
         03:c4:54:94:47:cc:62:da:86:96:82:31:12:bf:4b:10:90:ef:
         02:92:9c:1d:03:14:b5:19:b7:d2:59:47:36:ed:92:ae:f4:da:
         f2:c8:eb:ca:c6:aa:77:b6:4d:87:55:5a:ca:9b:03:9e:0e:b8:
         f7:10:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:22 2026 by rpki-client