Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier:          g2vcgVdqQMrb1eigmC22lhRDUGkwIPlsr+nEUcsh0vQ=
Subject key identifier:   97:68:79:99:BC:34:12:AA:05:B0:77:CC:93:88:3F:A8:50:65:BC:6E
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       019FA8CFD93836D8A4580C400BC6EC80C6C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number:          19A0
Signing time:             Tue 28 Jul 2026 13:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:21 +0000
Files and hashes:         1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: IlFqfgmnSc37B5WDY7f9JSywTPWhoLcaZ9idBzmVgIE=)
                          2: p1kohFb8KaXP2aXevlAW3obI0Mk.roa (hash: MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:d9:38:36:d8:a4:58:0c:40:0b:c6:ec:80:c6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: Jul 28 13:00:21 2026 GMT
            Not After : Jul 29 13:00:21 2026 GMT
        Subject: CN=97687999bc3412aa05b077cc93883fa85065bc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:ea:6d:c8:87:1b:55:0b:4f:92:c0:9b:b8:
                    c6:8b:2d:62:80:2d:7d:a1:55:8b:00:3c:cb:2f:11:
                    b3:4f:b3:a3:a9:78:fe:c0:b6:b9:3a:9c:f1:50:a4:
                    3a:ba:85:b1:2f:95:c6:ef:ee:b3:6c:a4:7d:84:ce:
                    7a:01:23:02:51:e3:dc:4c:70:40:2b:67:7f:11:5d:
                    a4:a4:48:43:b2:35:50:d1:df:83:7c:e3:cd:49:f9:
                    4e:71:a8:c3:47:15:71:a2:fc:eb:53:2f:19:1d:3a:
                    2f:95:2f:84:3a:d9:86:6f:3f:36:33:23:51:3b:87:
                    b5:8e:48:06:6e:50:5e:1c:94:04:a8:75:ba:45:88:
                    b8:02:f2:8d:c4:b0:56:53:39:77:98:7a:7f:55:67:
                    07:f1:21:94:55:65:3d:c1:24:96:2f:7e:d4:44:78:
                    b0:12:1c:8b:ce:60:31:57:dc:2a:01:f5:46:d5:27:
                    55:91:3b:00:c9:45:dd:d7:cb:3f:e6:a2:63:06:61:
                    8f:56:8c:08:1c:4a:1f:2a:aa:e4:d2:3a:22:7e:9a:
                    ef:4a:0d:a8:a4:8a:9a:61:23:56:ce:08:4b:c8:8e:
                    32:f1:44:f4:50:23:05:10:5a:8c:64:26:d9:fe:d0:
                    ab:f9:f9:83:ad:67:67:7b:41:8f:d2:06:d1:7f:e7:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:68:79:99:BC:34:12:AA:05:B0:77:CC:93:88:3F:A8:50:65:BC:6E
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:af:1b:42:ad:60:f6:f9:90:d0:ed:f6:52:56:32:28:df:32:
         a4:ca:be:cb:c7:82:73:d1:5e:04:56:bb:03:fd:44:fe:66:2b:
         4d:b8:68:a1:f6:2a:47:bb:e5:1f:56:64:23:7e:6a:4f:03:f7:
         3b:6a:3c:7d:c8:fc:f0:39:08:f8:c7:8f:60:a9:b8:1b:cd:7b:
         cf:14:c2:1c:3f:ca:18:8e:d5:62:bf:2d:23:c7:25:da:75:a7:
         4f:f2:d5:f5:d3:d4:f0:20:16:5f:10:19:12:6f:8d:18:c4:8d:
         45:5f:81:db:3a:3e:62:ff:9f:70:e8:03:cf:3f:82:93:8a:8f:
         a9:49:7f:21:58:b3:57:06:36:e8:94:21:a2:4a:73:79:7d:5f:
         01:dd:97:2b:c7:26:95:25:33:10:2d:4f:20:23:60:f1:82:ac:
         d0:2d:21:1c:c7:b1:9d:74:76:93:14:5e:ce:37:0b:82:bb:c6:
         a7:14:61:1e:69:93:1c:62:88:53:f6:2f:27:3b:fd:1a:e7:c2:
         d6:6c:5b:d5:4b:ac:5a:9d:c5:45:7c:d3:d0:51:a0:c8:90:7a:
         10:ac:aa:40:7f:21:9f:8e:11:d8:e7:75:20:3d:2b:08:d0:31:
         ca:ef:b0:98:98:56:ce:18:18:f8:6c:0f:ce:8b:3a:43:50:a2:
         18:1b:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:52 2026 by rpki-client