Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
File:                     6eTclo7VKTWgTe47Ipwhypv9vX4.mft (raw, json)
Hash identifier:          UOUZP7oWLUbyvify4HhvAiAPWaYyl8zQy6lOx5/ZP70=
Subject key identifier:   FF:CB:77:5A:02:EB:05:C9:9C:D3:20:8F:49:FB:85:A8:CB:66:EE:DF
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Certificate issuer:       /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial:       019FAA509A14E0E551EE4ECEA72EB6E66468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
Manifest number:          19DE
Signing time:             Tue 28 Jul 2026 20:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:36 +0000
Files and hashes:         1: 3U5i5lLwqD2TvdeVIAyAIFPdim4.roa (hash: HhuAdfKxJdiqCANeowtxwSFVVhy23SFm3a3Q9J4Wgbw=)
                          2: 6eTclo7VKTWgTe47Ipwhypv9vX4.crl (hash: GFa3CZFnUOeEr2X880ZjRvTPE2u93mKMTQDO3Zo9n/c=)
                          3: S5i5ArBirheWkzfGpNXAWv02cGg.roa (hash: VZdHIoUfg3F4/LBtg4lHV8vxIVmG0uE+OLuH+2qEoRA=)
                          4: XK29cC1QNwFmLlwXGFjBJZAAGv0.roa (hash: 5TFT4jvvphRW6Wq8yqWzEFvPjIJTRforfs+JZwUoSgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:9a:14:e0:e5:51:ee:4e:ce:a7:2e:b6:e6:64:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
        Validity
            Not Before: Jul 28 20:00:36 2026 GMT
            Not After : Jul 29 20:00:36 2026 GMT
        Subject: CN=ffcb775a02eb05c99cd3208f49fb85a8cb66eedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:ac:35:78:09:de:ea:7b:89:38:1f:cb:26:
                    d2:f9:a9:d1:d1:6c:e6:1d:1e:2e:3d:26:17:46:83:
                    58:03:04:8b:8b:e8:fa:82:55:54:43:e3:de:e2:64:
                    6d:1f:cf:83:55:85:52:3d:b7:34:0a:7a:ce:ec:a1:
                    52:80:06:c2:a0:b9:11:05:84:2d:8b:46:3c:29:ea:
                    62:0e:5c:58:52:e7:ae:be:34:d6:93:44:7f:c6:d5:
                    d4:99:46:13:4d:b4:d0:e0:97:16:52:92:89:27:23:
                    80:23:32:83:1d:03:24:26:3a:8b:c4:79:d0:8e:f9:
                    89:67:18:9d:bc:ae:67:83:fa:5e:ea:d3:e7:4e:59:
                    ec:7f:30:d5:36:99:18:7e:4c:52:cb:05:0a:e1:05:
                    8f:86:8e:30:f9:05:bb:31:80:84:80:96:5b:11:94:
                    0d:c8:2b:37:e9:5a:d5:d3:0d:a0:f7:3f:83:ec:e0:
                    f7:5d:3b:5f:e1:56:49:4a:62:09:89:0b:83:02:46:
                    7a:b5:36:11:6c:64:e8:b7:c7:ef:63:06:6b:a2:ae:
                    e5:fd:8d:75:84:dc:42:f6:68:a6:ad:a4:bf:dc:0b:
                    61:57:b1:60:b0:4a:6c:bd:ac:76:93:a9:6c:cd:5e:
                    a3:a2:c6:bc:74:09:65:e9:21:0e:7e:b4:b3:38:97:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CB:77:5A:02:EB:05:C9:9C:D3:20:8F:49:FB:85:A8:CB:66:EE:DF
            X509v3 Authority Key Identifier:
                keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:01:48:51:53:17:72:bc:ea:d6:54:5a:9d:b2:0b:83:52:7c:
         73:28:4e:f6:93:ef:58:d6:5c:bd:40:6f:a8:10:9c:3c:b3:9e:
         60:42:da:ec:25:80:7a:97:04:59:12:65:fa:d9:db:87:6f:15:
         35:8f:4a:f4:da:4b:71:39:4a:8b:2e:c5:cc:56:00:37:3d:e1:
         44:32:59:f5:6e:8d:f2:64:50:93:c2:6f:76:a3:d8:19:67:6b:
         c0:34:bc:05:b7:7d:84:4c:45:97:de:67:4f:60:23:4d:a1:b1:
         e1:d1:20:48:8e:03:32:1b:71:ae:64:57:b7:c2:09:c0:c2:8a:
         19:df:a4:7a:d6:3b:f3:98:ca:f4:6d:2b:83:67:8f:a6:ff:5e:
         66:48:87:db:f7:ad:4f:55:f3:98:11:3f:e1:8c:aa:9f:bb:65:
         d2:01:be:ef:7b:df:4e:13:f0:d4:bb:e9:a7:f9:dc:11:6d:88:
         b3:a5:f3:77:6e:67:89:5b:03:20:a9:e7:b9:9a:2c:c3:55:5f:
         73:12:7a:41:22:84:c6:17:f5:bd:c9:8b:44:72:58:f1:7f:6c:
         bd:be:42:d7:08:f5:80:c1:0c:9e:8a:3b:28:18:44:56:e5:7d:
         18:75:06:9d:08:e1:64:0d:6a:d3:4d:65:2b:28:0a:52:2e:77:
         a9:97:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:42 2026 by rpki-client