Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
File:                     b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft (raw, json)
Hash identifier:          uwD8wbBOvQ3ObE1pxncXOlWOGg1U+J13B+8TPF3J6uo=
Subject key identifier:   0C:E4:A3:38:DE:B2:13:2C:5B:15:95:19:52:90:A2:84:2D:16:F8:59
Authority key identifier: 6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44
Certificate issuer:       /CN=6fa72e1fd221c67735fa8d11f68f2f5280d7c444
Certificate serial:       019FAC76917F23693B9A7FEAA0B2E7AD08C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:19 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:19 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:19 +0000
Files and hashes:         1: AOJWWRDy0nNR8JFkrrmMBV4f1SQ.roa (hash: lkx/0ZAIN+Tof0IXtGM9G76bJd4qUglgdd0G19sDUUw=)
                          2: b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl (hash: 8ZDkYUVak5gc3RgIS12GjJHKccId8lBxX3hCZe8Wq7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:91:7f:23:69:3b:9a:7f:ea:a0:b2:e7:ad:08:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa72e1fd221c67735fa8d11f68f2f5280d7c444
        Validity
            Not Before: Jul 29 06:01:19 2026 GMT
            Not After : Jul 30 06:01:19 2026 GMT
        Subject: CN=0ce4a338deb2132c5b1595195290a2842d16f859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:61:cd:36:8a:f5:a7:ce:62:d3:a8:38:68:
                    14:e8:f9:e8:92:d5:24:ec:5d:a5:f5:f6:b1:05:0f:
                    de:8c:92:41:62:3c:17:e7:a3:44:ba:56:2f:3f:99:
                    50:01:be:61:8b:f3:3a:70:53:f2:1a:c5:cf:03:72:
                    9f:9c:85:14:e0:0e:b3:8a:c3:db:d1:80:1f:e3:c8:
                    6b:55:46:c9:e7:d4:47:ae:a2:d8:92:c3:4b:a1:42:
                    66:10:d1:92:57:df:10:9f:2b:d2:09:2f:bf:98:c1:
                    d4:67:15:15:e1:1b:78:c3:f3:fa:cb:83:d4:0f:db:
                    02:30:e5:69:98:5c:82:63:1b:7d:67:ba:73:c0:92:
                    db:ce:c1:d9:b5:1a:6b:16:fd:03:ae:54:a6:ed:92:
                    f6:62:0a:93:f6:d8:d1:10:9b:73:50:fd:3d:51:1b:
                    a4:cf:07:de:fb:fb:09:5d:84:d1:d9:e2:b3:0e:36:
                    86:b3:66:3b:de:cc:84:84:fc:3a:e3:db:e0:d5:e4:
                    9a:9e:5d:f8:25:4f:a8:f6:4f:63:70:cd:10:2f:df:
                    bc:a1:d1:02:f7:2c:49:f8:2b:04:a9:44:22:b1:8d:
                    13:0d:2f:63:53:e6:a3:66:e9:17:aa:cd:b7:56:35:
                    b4:1f:08:c5:ba:ae:d7:b5:e0:4d:bf:64:f4:70:0a:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E4:A3:38:DE:B2:13:2C:5B:15:95:19:52:90:A2:84:2D:16:F8:59
            X509v3 Authority Key Identifier:
                keyid:6F:A7:2E:1F:D2:21:C6:77:35:FA:8D:11:F6:8F:2F:52:80:D7:C4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/b6cuH9Ihxnc1-o0R9o8vUoDXxEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:4e:ad:d5:4a:ed:bb:f0:f0:23:7f:50:5c:66:41:14:4a:
         38:17:8f:7f:9e:54:19:e2:bc:71:3b:84:cf:82:1e:d8:eb:c0:
         16:90:27:e7:8f:4d:e3:bb:06:ea:c1:bb:2d:02:d4:06:93:32:
         af:e6:48:57:bf:fd:b4:6e:06:47:34:19:9d:d4:04:75:79:47:
         e9:e1:91:2b:85:e9:ae:79:9c:09:18:1f:71:2c:e0:25:db:29:
         99:e0:97:bc:22:bd:9b:9e:ac:f7:28:00:69:e0:10:97:53:0f:
         2b:fd:21:3a:57:a6:f5:40:3a:1e:5a:b6:86:3f:6d:bc:f6:1d:
         2f:a6:7c:e2:79:9a:08:48:83:bb:ed:bc:e6:5e:42:73:88:91:
         96:1d:ff:33:e8:bf:c1:6c:61:8a:d0:21:4e:8f:47:4f:5a:d6:
         2d:6c:62:24:d4:73:ab:7b:08:b5:31:91:1f:59:b4:e4:b2:e9:
         f5:21:a5:5a:06:59:5b:10:31:71:8b:fe:f8:10:e0:a5:41:98:
         5e:7d:79:e6:00:85:c3:0a:0d:d0:18:17:a0:ab:17:54:1b:5f:
         c7:f9:8b:dc:d5:45:3e:b6:08:d9:fe:7a:fa:dd:16:37:2b:c0:
         bf:a8:8e:c1:b3:e3:30:95:91:2f:e7:8e:95:24:42:9b:bd:63:
         07:78:94:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:16 2026 by rpki-client