Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          muhdUEpU7sVZtxYboiMWxth/Vt2EU8B1kOe/kIfzMSg=
Subject key identifier:   43:2D:64:E3:C5:0B:7A:7F:DE:C6:31:8D:E9:8A:0D:7A:06:47:9D:50
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       019FA7BD7829760D1AFCF8DB2382E1FB79A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          1928
Signing time:             Tue 28 Jul 2026 08:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:39 +0000
Files and hashes:         1: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: hhNSRgf3BKmFAW8qfy2FVMzKug+dInhPVD6Aq5yPwSA=)
                          2: YFM3OR80uMxXBvo7d01mGQqdTak.asa (hash: OUuOkx0VK1NKbygTu3e1bb1UITQTKF8W3QKqUov9Zmk=)
                          3: YzrXnq3vRorLDkTNpUF7ED1XPXE.roa (hash: akkM/3QksJnCzoJ9FHhEn+9ohX+WOVP8QHjLBNNOvGc=)
                          4: aYEe0Wp6s-0vMrsmI0r1Am-aAmE.roa (hash: 0zIQeQUHMUd4XTm26NFK/GYzSa6prZHKRHgzCL5iipE=)
                          5: cV6HlXd9VLe--dSuiSOFXK3TxRM.roa (hash: cKnEl0wq7eLVeKPF83FlArGfxSvAPlhsKghSnnUyAeI=)
                          6: mIcG_kEYZC1jyRE_dH-HaI-yzCY.roa (hash: 7aEUk3f39asrdQDlVo3nL7Bci/VYA+D2BlsnqVXZqDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:78:29:76:0d:1a:fc:f8:db:23:82:e1:fb:79:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Jul 28 08:00:39 2026 GMT
            Not After : Jul 29 08:00:39 2026 GMT
        Subject: CN=432d64e3c50b7a7fdec6318de98a0d7a06479d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:ee:3c:dc:aa:12:9e:84:eb:41:37:3d:d7:
                    1b:27:45:8d:11:b6:2f:f7:c3:a9:6e:09:9f:01:97:
                    19:29:71:8b:0d:ac:33:03:9f:9d:ab:6a:db:f3:1c:
                    ad:35:8e:8c:cd:15:70:88:bb:00:38:3b:17:6d:96:
                    fd:30:a2:e5:89:de:70:83:24:4c:e3:67:f1:5b:6a:
                    03:bb:7f:0b:5b:be:34:ec:a7:0d:b4:90:e0:94:42:
                    0a:c9:7d:04:43:80:9f:1b:b0:df:30:1d:0e:39:f1:
                    50:35:67:79:63:2e:c6:31:b9:55:2b:9a:13:0d:aa:
                    4f:1c:63:cc:5e:09:cd:d4:17:ac:44:94:65:49:e8:
                    78:57:23:1b:ea:9e:95:78:40:df:99:b6:46:b9:2c:
                    2c:df:50:b9:0b:3e:5e:be:8b:bb:bd:a7:07:30:63:
                    cb:10:f2:40:df:77:00:79:80:d5:3e:82:b1:12:e6:
                    22:98:80:f6:eb:d9:3f:5e:c4:06:6f:b3:e8:0e:be:
                    7f:5c:1c:81:2a:ee:6b:bc:af:49:bc:55:84:81:13:
                    b2:97:2d:1d:a9:aa:f4:e4:fa:88:e9:26:79:75:2c:
                    69:66:71:db:c2:bf:3a:1a:27:47:1c:54:78:e5:29:
                    e3:32:d8:fe:f6:42:24:91:93:33:46:94:a8:72:3e:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2D:64:E3:C5:0B:7A:7F:DE:C6:31:8D:E9:8A:0D:7A:06:47:9D:50
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c4:bd:83:42:e9:07:ef:62:79:57:bc:4d:5f:fb:30:25:89:
         f1:90:4d:c6:f5:ea:6f:b4:2e:2a:9a:12:5e:96:ae:cc:ed:0c:
         9c:19:86:34:08:90:02:03:95:7c:7d:f9:17:36:35:54:5d:c1:
         03:4f:d8:fa:da:37:91:72:03:50:27:83:aa:72:78:ef:39:a2:
         8a:43:97:49:e9:8d:89:36:1f:2d:9c:ba:d4:4b:0f:97:b8:f5:
         51:f8:3d:1a:f6:86:84:2f:21:42:01:0e:ef:e2:d5:4e:db:e0:
         1c:64:4e:31:bc:11:5e:16:39:4f:6d:3f:f4:b2:61:6d:8a:b5:
         a4:49:a9:23:41:8a:14:10:13:a5:6c:e6:fd:f2:33:f3:7c:ad:
         7e:4e:21:1a:84:5c:5a:20:3c:ac:b6:7b:39:60:70:1e:bb:57:
         17:b4:05:d8:e0:1b:63:b6:fc:f4:01:1e:89:05:5c:d5:16:da:
         7e:fc:c5:0d:83:2e:1f:eb:d4:a6:87:91:f8:29:39:91:42:7f:
         29:cb:8f:89:81:05:51:2f:22:14:b2:71:f6:de:40:fc:36:7b:
         ff:a3:6e:63:ef:91:e8:10:8c:45:bc:18:cc:74:dc:01:f6:62:
         9f:f6:82:73:23:41:81:e8:26:30:44:d0:14:03:9e:22:3a:38:
         fd:c5:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:00 2026 by rpki-client