Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
File:                     6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft (raw, json)
Hash identifier:          HZCkyi95p9Z5qwVI4gpQrItJrBzmjeM+RLxRYjtZCA8=
Subject key identifier:   E4:8C:34:7D:FF:78:94:BC:F0:87:A5:55:82:37:FC:44:60:71:95:BC
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Certificate issuer:       /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial:       019FAA88C654C446C3F391F5C51A3200793A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
Manifest number:          4D
Signing time:             Tue 28 Jul 2026 21:01:58 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:58 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:58 +0000
Files and hashes:         1: 6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl (hash: XKCNgJbzNFxqHU2D22DV1I981xdGqhfraq+QWlXAHmE=)
                          2: GKjbLO1_Vgx7dTSR9CTTd2P_xU4.roa (hash: UjwX3kVyOAC6szTsRew5gw7veFMEOvn3s6BDfa+zprA=)
                          3: GzDfSxqDCeSPBf2y3shNBBiZXvI.roa (hash: /+BjohrpeY7LNc+qriITdKXkfsBB8VP8fjcOHUD3hXE=)
                          4: RlLmyksqOdY49aYxtLwvWba7JE4.roa (hash: Ow9h/esw5o/I/Xu/UbWS0K9IFr+qLIBHcMZwlKPeqDs=)
                          5: esoyd4IrpdY7x5PNXLXB5VvYAbI.roa (hash: lEl0bccjKhWo3DBBIFZjtW/OMW53+2yV7zaPwrJwExk=)
                          6: hAKbSwAWtT9vkY3LZF9STshKfN0.roa (hash: Z7QB3UDvwHlmX3oqye1DZsyN1am+1lZGQVSApBtgUlc=)
                          7: shpDfVCiNqZZihnMrj5dXfgsCAQ.roa (hash: HPrUqlE/bGZfDnfrOOeSX3Y6okisxt+WgP9TyVPrn2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:c6:54:c4:46:c3:f3:91:f5:c5:1a:32:00:79:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
        Validity
            Not Before: Jul 28 21:01:58 2026 GMT
            Not After : Jul 29 21:01:58 2026 GMT
        Subject: CN=e48c347dff7894bcf087a5558237fc44607195bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:1c:92:07:11:55:59:f0:28:66:a4:5a:33:
                    4c:1c:cb:62:7d:d5:4e:b8:5f:38:f0:da:bc:3c:cc:
                    47:86:a8:7f:db:ee:f5:58:56:05:44:4f:c0:1b:7a:
                    d0:50:ca:3b:c2:f4:4c:65:38:a8:02:5c:59:a5:0a:
                    15:21:1c:7b:9b:d4:30:af:1b:c4:b3:d8:67:09:67:
                    3e:46:98:f7:62:df:d7:ac:00:85:6c:fe:b3:eb:de:
                    2e:48:ec:4e:0f:48:93:9b:74:c7:d0:cc:51:36:39:
                    e0:ea:63:16:67:fa:0f:8b:9c:be:62:f3:d3:3e:7e:
                    34:56:21:21:a2:b4:6f:71:ad:6c:e3:53:a4:41:b4:
                    27:53:05:b9:8a:7e:6e:50:38:a5:59:87:87:d1:1d:
                    55:08:7e:6a:ff:99:3d:cd:24:01:25:c0:44:78:ab:
                    ab:aa:60:68:a6:dc:af:6b:38:c3:9d:eb:b6:05:3c:
                    93:0d:b4:ea:83:98:33:dd:4c:0f:bd:79:b5:12:0d:
                    9a:a8:70:4f:40:26:ba:56:4a:fe:90:b1:c0:87:db:
                    1a:f1:10:4f:59:6e:bf:d5:6e:57:a6:a3:b9:bb:4a:
                    73:01:16:b2:fa:e5:cc:85:21:3b:32:0f:23:3e:39:
                    a2:1b:06:b0:45:28:bf:21:5a:56:c0:00:1c:17:9f:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8C:34:7D:FF:78:94:BC:F0:87:A5:55:82:37:FC:44:60:71:95:BC
            X509v3 Authority Key Identifier:
                keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:37:5d:9d:9e:68:8b:49:75:ea:2c:d5:88:37:8f:2a:8b:17:
         b6:bb:4b:c2:b5:21:e0:10:24:d4:93:4b:87:5f:3c:6e:4e:bb:
         2c:51:b6:e4:48:4e:73:59:65:9f:33:2d:a0:0d:e5:e7:52:96:
         7f:80:f4:b1:f3:09:4d:8c:20:17:67:b5:06:d5:40:8f:1d:ec:
         22:2b:f2:36:7c:73:8e:7e:35:0a:a4:e5:ce:f5:44:49:3d:e3:
         01:81:df:a3:16:fb:23:18:54:3c:73:78:e1:a1:97:eb:a1:44:
         f7:e9:1d:ac:31:af:10:e3:80:7f:72:da:94:04:c4:3e:97:bf:
         88:6c:15:0d:1b:8f:87:fd:8c:d5:5b:99:b5:72:99:78:d8:5a:
         72:13:bf:00:d5:06:d3:3e:33:07:e4:3c:ec:d2:e8:2e:a4:bf:
         c0:85:d9:7c:b2:42:9d:cc:ef:93:23:f6:16:4d:57:4a:31:05:
         85:63:48:61:2a:cf:d4:06:7f:6e:0e:ee:42:19:bb:5e:bc:1f:
         28:1b:8f:63:0a:c4:79:fb:de:c3:3b:9f:c1:d9:8b:69:8f:31:
         05:79:7f:0c:dd:70:d2:b1:0b:7b:c9:46:fe:3c:7b:a6:66:3b:
         51:c2:78:c0:fc:35:ae:c6:c6:6a:4b:e1:7a:81:03:e5:98:ce:
         90:59:89:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:40 2026 by rpki-client