Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
File:                     b6U11TlSoTJ99CLvgOuXvABDRn4.mft (raw, json)
Hash identifier:          1U6JBhiPhsNAXi24DBGY66BtAJNiwXMx1DdtmmbjLhM=
Subject key identifier:   94:12:46:AB:B8:7A:32:28:FC:24:BD:B6:60:EF:32:E4:AF:52:7E:DA
Authority key identifier: 6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Certificate issuer:       /CN=6fa535d53952a1327df422ef80eb97bc0043467e
Certificate serial:       019FA78692BE237870F6A31C19FA7FF547A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
Manifest number:          01FF
Signing time:             Tue 28 Jul 2026 07:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 07:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 07:00:42 +0000
Files and hashes:         1: YKdoVLd9ylGhk--_nieA-ylnwwY.asa (hash: iBRLVXc9pjx2a8hspS9tGoEHTB4wLOrd24lO6wYHwPE=)
                          2: b6U11TlSoTJ99CLvgOuXvABDRn4.crl (hash: rlLho69xBmgYLfc2rWSfIdmxBnYZeUkDnuf3IHTYCyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:86:92:be:23:78:70:f6:a3:1c:19:fa:7f:f5:47:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa535d53952a1327df422ef80eb97bc0043467e
        Validity
            Not Before: Jul 28 07:00:42 2026 GMT
            Not After : Jul 29 07:00:42 2026 GMT
        Subject: CN=941246abb87a3228fc24bdb660ef32e4af527eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:f3:9c:68:d1:04:09:9e:89:86:1d:5c:3b:
                    86:c1:f7:8e:18:d1:28:6f:1c:54:40:40:4a:40:0e:
                    41:bd:2d:29:80:18:68:a1:6b:15:3d:29:90:c1:e4:
                    e5:ea:5e:df:1f:00:00:01:9e:ad:6f:ff:18:07:3c:
                    b0:a9:a4:51:32:6d:63:6c:ca:05:14:22:6e:fa:1a:
                    be:28:0f:22:37:73:c7:10:91:73:85:42:80:98:8a:
                    55:31:c5:48:13:e7:6d:97:6b:a2:77:2b:a2:6b:09:
                    35:45:df:6d:2f:b7:3a:41:f9:f6:0e:0e:9d:37:58:
                    33:c7:fb:25:82:88:8f:cd:29:85:13:56:87:52:32:
                    86:4f:7e:47:e4:00:db:0c:a2:e7:46:8e:b3:94:96:
                    5d:5e:82:a1:84:4b:4e:e5:a6:30:ca:8a:02:d5:d1:
                    34:e7:84:1c:aa:22:f5:5c:65:f2:74:e1:16:3a:29:
                    93:18:98:8c:1d:bb:5b:08:9f:49:4a:46:45:88:13:
                    e5:20:d0:55:fb:18:17:e8:dc:70:db:81:83:98:34:
                    61:b8:c7:e6:f0:c8:7b:cd:11:07:d8:4f:fe:d2:f6:
                    b0:76:05:fc:9b:1f:0d:5b:7d:bc:99:75:1b:8c:a2:
                    10:13:eb:d5:b9:ed:6d:ad:cd:7b:78:65:14:10:24:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:12:46:AB:B8:7A:32:28:FC:24:BD:B6:60:EF:32:E4:AF:52:7E:DA
            X509v3 Authority Key Identifier:
                keyid:6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:69:14:67:46:12:c1:5b:75:8b:1d:e6:6b:12:6d:b5:98:
         1c:7d:94:82:9c:b6:75:c7:ef:d6:eb:80:0c:34:66:70:50:c1:
         1d:83:df:37:aa:72:37:d7:c2:ed:7c:2a:9a:17:b6:c4:c5:6b:
         db:f4:c3:a0:84:51:14:e8:15:58:41:3b:f0:88:8f:c5:e2:ac:
         55:d1:26:0a:bb:50:5c:29:d8:f0:b7:26:73:63:ee:54:cd:09:
         71:d2:69:fc:1a:62:1c:49:06:6e:e7:05:16:2b:19:83:ff:79:
         28:bb:a1:c6:94:a2:10:b2:5a:bb:db:6b:47:c6:ec:51:35:f9:
         36:35:7f:f9:55:de:8c:d3:87:28:4e:b8:01:34:75:31:6b:0d:
         15:e7:7e:7a:e2:80:a7:ac:a6:17:93:9f:1a:b1:10:09:29:99:
         3a:17:7e:44:cf:7b:6c:57:0b:d8:bc:5b:92:2f:e4:04:88:68:
         12:d3:4a:b6:1b:b7:f5:8d:20:98:71:09:f7:c3:16:e4:87:a4:
         9f:e2:7b:63:f7:f7:5f:d8:7c:66:95:a3:52:de:f0:60:63:74:
         a9:91:41:82:0e:59:31:74:04:bf:23:24:d7:5b:14:f2:be:67:
         54:61:a0:0d:eb:62:dd:a0:3f:12:c9:12:fd:7f:cd:77:ff:2a:
         8c:70:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:15 2026 by rpki-client