Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File:                     bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier:          PyRnuX/g5l06PadPEQg0YXWgtRcnl0MiZuaEcwWWkoA=
Subject key identifier:   D6:C6:60:E5:6B:AC:C8:CC:B7:82:93:92:A7:2E:57:44:3E:94:B9:06
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer:       /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial:       019FAB630A230888703133604A1A158F6C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number:          19D9
Signing time:             Wed 29 Jul 2026 01:00:22 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:22 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:22 +0000
Files and hashes:         1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: M3ylSl1lsrfm7ROC4lImQGTzTVzSeHFeE5O295QpgnI=)
                          2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:0a:23:08:88:70:31:33:60:4a:1a:15:8f:6c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
        Validity
            Not Before: Jul 29 01:00:22 2026 GMT
            Not After : Jul 30 01:00:22 2026 GMT
        Subject: CN=d6c660e56bacc8ccb7829392a72e57443e94b906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d0:87:1a:dc:73:05:f6:8d:e4:a0:8a:f9:2a:
                    28:51:ca:11:92:11:07:d4:eb:7b:f9:1e:19:55:47:
                    d2:d7:11:9e:57:c9:73:2c:4e:5a:3a:3d:53:f0:b2:
                    1f:14:d4:08:25:67:42:fd:d2:9a:22:ad:c3:c0:cc:
                    10:f7:15:41:09:2e:fc:35:cd:eb:15:a6:55:75:7e:
                    47:75:58:b0:e6:cf:d2:22:28:86:ac:a6:2e:05:1a:
                    53:a0:b5:3b:84:48:92:44:ae:3c:65:0c:c0:f5:08:
                    ce:69:af:02:3c:64:a3:84:3f:89:f6:82:83:a0:6c:
                    fe:1a:e4:4b:3e:ee:e7:55:bc:e7:c1:82:17:62:05:
                    5c:ce:9e:91:06:ba:f1:c1:e9:a0:3e:2d:7f:03:cc:
                    17:b2:2a:4b:45:fb:2a:4d:bd:ed:2a:c8:78:17:14:
                    c9:ba:b5:3b:24:cd:8b:d3:9e:c4:0c:4a:99:60:73:
                    e0:df:fe:9e:24:e0:e6:c1:90:54:28:28:7e:23:73:
                    07:4d:4f:b9:c6:fe:ce:69:c8:4c:de:47:51:1a:c3:
                    87:02:73:dc:76:10:8a:c9:d8:09:3c:f1:20:ab:b8:
                    ca:20:46:e4:43:4a:84:99:85:9e:89:62:f1:da:7a:
                    65:3a:5a:43:5d:9e:84:8b:8a:ff:39:14:02:dd:bc:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C6:60:E5:6B:AC:C8:CC:B7:82:93:92:A7:2E:57:44:3E:94:B9:06
            X509v3 Authority Key Identifier:
                keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:18:ad:e3:4b:0c:f7:eb:55:98:1b:9f:89:5b:b9:90:22:68:
         53:23:63:dc:b2:b6:c6:87:d7:fd:85:49:d4:63:f4:88:56:f9:
         57:ea:a7:66:e1:2d:86:d0:f9:18:bf:18:80:e4:c7:66:74:82:
         4f:02:b9:5c:29:74:ed:68:74:c3:b7:ea:4b:24:01:3a:5d:4c:
         86:ab:e6:7d:2f:1e:1a:c2:09:b7:7d:54:fb:cb:22:de:11:30:
         f5:14:4c:fb:74:cf:64:99:69:3a:10:46:55:50:eb:75:3e:57:
         2e:8a:df:e8:70:95:67:fc:ca:93:79:3c:75:1e:68:05:61:d1:
         22:4c:4b:a5:72:cb:13:1f:f9:af:3c:90:51:2e:44:0a:c1:20:
         d3:ba:b4:48:eb:85:f3:b3:6f:01:92:64:b9:f7:d4:eb:f5:5f:
         5a:91:4b:8d:91:5c:f7:8a:0b:c6:4b:a7:d3:2e:c8:c2:0d:f5:
         a0:fd:84:98:81:94:4c:0d:3a:04:5b:ab:76:1f:e6:5b:9c:6b:
         7b:41:51:3c:80:ce:c2:c5:30:90:55:86:9d:f7:1c:19:a8:fb:
         6a:0e:99:a2:04:d8:ab:b0:2e:2e:79:9e:95:c4:e2:4d:b8:a6:
         53:cb:4f:dd:09:7e:dd:84:63:3f:2d:f0:f8:d2:95:b3:22:71:
         2a:9a:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:25:41 2026 by rpki-client