Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
File:                     6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json)
Hash identifier:          bhIzj8YF/xdy6hyyyywTroAt20B3q0cq/s20IfOwIVM=
Subject key identifier:   9A:78:CB:27:92:17:6B:BA:DF:29:BE:BC:FE:AA:6E:98:90:BA:F5:B4
Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
Certificate issuer:       /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Certificate serial:       019FA93E5F1A93F1951F6EFB19034B544CAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
Manifest number:          1296
Signing time:             Tue 28 Jul 2026 15:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 15:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 15:01:04 +0000
Files and hashes:         1: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: qsTpfe/9FlNj39rYrdl/g2EN/Y8DRscHtybb52JO0is=)
                          2: zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa (hash: IrlQd0d+Fguubk4wbis1+hKRc8zFTkF2CICSp+JnthA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:5f:1a:93:f1:95:1f:6e:fb:19:03:4b:54:4c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
        Validity
            Not Before: Jul 28 15:01:04 2026 GMT
            Not After : Jul 29 15:01:04 2026 GMT
        Subject: CN=9a78cb2792176bbadf29bebcfeaa6e9890baf5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:4c:59:2c:79:47:4f:bc:b6:7c:ea:e0:d8:
                    91:9e:ab:6e:77:1f:45:8d:e6:2b:4d:da:a0:81:22:
                    e5:cb:c2:2c:52:3f:9a:b8:57:66:62:ba:cb:ef:2d:
                    9f:aa:41:97:9e:a7:28:9a:a4:e1:e0:d0:46:19:dd:
                    be:31:a3:cd:5e:de:6b:6d:2c:dc:4c:f0:1a:8a:9b:
                    c5:d0:35:2b:d1:a1:5e:b9:dc:37:1f:4d:7d:d7:82:
                    e8:17:95:43:88:27:88:d9:6c:72:ca:26:39:a4:0a:
                    82:32:18:bb:b4:df:63:fe:b1:a8:e1:46:e7:87:ad:
                    b5:4e:f3:e5:76:ff:bd:78:c4:9e:08:50:98:76:41:
                    8f:e3:dc:3d:64:40:92:be:d3:90:50:42:0a:37:e4:
                    2e:db:68:28:02:b1:f9:bf:98:61:e1:22:a3:a5:cb:
                    de:8f:45:68:49:b1:96:0f:79:a5:e6:b3:59:2a:02:
                    fb:ca:31:e4:4d:f8:f9:96:f1:92:a2:c3:69:34:b7:
                    f2:da:c5:8d:1d:f8:d4:fd:cc:25:0a:00:bf:35:48:
                    d4:7d:b2:7e:0c:99:c2:24:4d:89:5b:6c:f4:2e:d5:
                    53:2f:78:8a:4b:ec:cd:65:d1:a3:9c:ae:7a:2c:6c:
                    17:b7:02:c7:fc:f3:ea:b7:f0:3f:b0:08:a1:ab:78:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:78:CB:27:92:17:6B:BA:DF:29:BE:BC:FE:AA:6E:98:90:BA:F5:B4
            X509v3 Authority Key Identifier:
                keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:11:2b:cd:bf:88:89:15:48:1e:23:96:02:2a:b8:61:33:c0:
         ce:f8:66:0d:57:e4:9d:ce:bd:00:4d:ed:80:90:b9:25:a0:20:
         e0:34:a8:d2:f3:9c:0d:e4:76:ac:32:cd:ef:c7:91:85:2b:7f:
         fa:b7:48:2d:13:ab:0e:23:50:86:1c:72:45:0c:ca:ef:10:43:
         80:02:f2:34:5f:f9:61:8d:3f:8b:12:51:da:2b:b3:71:80:5d:
         b3:40:a8:dc:bd:59:b5:87:3d:27:21:95:e8:3e:62:05:1b:06:
         68:7b:57:38:8b:6a:44:b4:13:8e:0d:55:80:12:14:67:b8:62:
         58:74:1f:e5:59:2e:12:81:23:6b:d7:e9:e1:a9:ea:7d:a1:8b:
         ac:08:d4:6c:80:0e:b8:32:5c:b6:e7:45:1d:ea:9e:93:80:a2:
         26:89:cb:42:5b:1c:07:38:5b:b7:73:88:4e:ee:00:d8:84:f3:
         c8:dd:57:6a:dc:9c:9a:44:30:61:93:2d:5b:b8:c9:b5:c7:4c:
         af:b1:de:8e:7c:44:de:86:26:38:f4:d4:b6:35:1d:79:82:62:
         b1:cc:4b:d9:98:b1:82:65:6b:34:80:99:17:74:74:96:69:a3:
         48:f8:b7:a2:d0:c1:19:16:a3:93:b5:cc:40:03:4e:81:87:18:
         67:7f:47:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPl8ak/GVH277GQNLVEyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ODI5M2FjMTY3MGNmMmUzYTRiM2RhNmM3NzcxZjhiMWU4
NGNmZWEwHhcNMjYwNzI4MTUwMTA0WhcNMjYwNzI5MTUwMTA0WjAzMTEwLwYDVQQD
Eyg5YTc4Y2IyNzkyMTc2YmJhZGYyOWJlYmNmZWFhNmU5ODkwYmFmNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbBMWSx5R0+8tnzq4NiRnqtudx9F
jeYrTdqggSLly8IsUj+auFdmYrrL7y2fqkGXnqcomqTh4NBGGd2+MaPNXt5rbSzc
TPAaipvF0DUr0aFeudw3H01914LoF5VDiCeI2WxyyiY5pAqCMhi7tN9j/rGo4Ubn
h621TvPldv+9eMSeCFCYdkGP49w9ZECSvtOQUEIKN+Qu22goArH5v5hh4SKjpcve
j0VoSbGWD3ml5rNZKgL7yjHkTfj5lvGSosNpNLfy2sWNHfjU/cwlCgC/NUjUfbJ+
DJnCJE2JW2z0LtVTL3iKS+zNZdGjnK56LGwXtwLH/PPqt/A/sAihq3i2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp4yyeSF2u63ym+vP6qbpiQuvW0MB8GA1UdIwQY
MBaAFOiCk6wWcM8uOks9psd3H4sehM/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEt
NTExMGY2YjU3OWJmLzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mYjZlMDctYmJjMS00NDdlLWIzZmEtNTExMGY2YjU3OWJm
LzEvNklLVHJCWnd6eTQ2U3oybXgzY2ZpeDZFei1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2RErzb+I
iRVIHiOWAiq4YTPAzvhmDVfknc69AE3tgJC5JaAg4DSo0vOcDeR2rDLN78eRhSt/
+rdILROrDiNQhhxyRQzK7xBDgALyNF/5YY0/ixJR2iuzcYBds0Co3L1ZtYc9JyGV
6D5iBRsGaHtXOItqRLQTjg1VgBIUZ7hiWHQf5VkuEoEja9fp4anqfaGLrAjUbIAO
uDJctudFHeqek4CiJonLQlscBzhbt3OITu4A2ITzyN1XatycmkQwYZMtW7jJtcdM
r7HejnxE3oYmOPTUtjUdeYJiscxL2ZixgmVrNICZF3R0lmmjSPi3otDBGRajk7XM
QANOgYcYZ39Hhg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:32 2026 by rpki-client