Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          wd/+2CRSvxGBNo/ji/8Em0kRQYIDCORRckNNr2/4bJ0=
Subject key identifier:   DA:D7:CB:0B:3B:44:E2:3A:AC:87:87:31:51:65:6F:D6:80:15:60:F3
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       019FA9AC4DFD80B03AF6253F74539F4BAFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 17:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:09 +0000
Files and hashes:         1: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: N9BAY56h6G3/GeugdqL3pXK3QuhgyloK6Ajc29M7Q30=)
                          2: OZ-4bdLigPBsZcaqqgq1vun0WQw.roa (hash: pGYKvg2Oo9KoFiiz7qQh+48XYCnScT9nFS878Hx3KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:4d:fd:80:b0:3a:f6:25:3f:74:53:9f:4b:af:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Jul 28 17:01:09 2026 GMT
            Not After : Jul 29 17:01:09 2026 GMT
        Subject: CN=dad7cb0b3b44e23aac87873151656fd6801560f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:aa:ec:30:a8:c2:5e:7c:34:4f:b2:ca:e5:
                    04:6f:46:b4:ac:f5:72:07:12:d0:a5:55:e0:08:2b:
                    92:ef:c1:97:a2:2a:03:ec:0f:45:37:8d:68:08:dd:
                    e6:ea:e1:23:80:98:5b:b8:b7:2d:96:6f:62:04:97:
                    70:28:fc:8e:4b:c4:40:6a:8a:df:9d:56:d2:6f:fa:
                    21:b0:ed:51:a9:84:5c:1f:4b:af:76:20:61:b9:d6:
                    a6:bd:72:01:9f:af:21:b5:06:7a:5f:24:63:ba:58:
                    45:88:c4:6d:a2:c4:20:4d:14:4f:1a:f9:58:d1:8e:
                    50:7c:c0:47:2d:d7:54:a3:28:85:84:1a:e8:89:97:
                    1d:70:80:d8:1d:fd:00:11:fd:b0:8d:8b:57:b2:0e:
                    a2:7e:ad:5c:64:ae:44:51:26:37:f2:3e:7b:c2:f2:
                    51:51:a0:3f:5f:06:4e:e5:9c:ce:4a:6e:fa:47:60:
                    50:6b:d9:ba:19:7e:39:35:49:2a:61:35:e0:6d:40:
                    22:dd:ed:f1:db:5d:ab:16:73:b2:c8:fa:cf:b8:59:
                    4c:15:eb:6e:35:64:29:91:95:34:76:f8:8e:de:91:
                    60:8a:ba:4b:2d:22:11:f5:2f:b9:5a:e2:e0:c7:37:
                    af:ac:91:e0:31:1f:19:92:8a:1e:43:a4:58:97:65:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D7:CB:0B:3B:44:E2:3A:AC:87:87:31:51:65:6F:D6:80:15:60:F3
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:de:fa:79:36:b0:7e:27:e0:ab:fb:e5:5f:13:e9:73:ad:
         c4:97:f5:eb:88:ec:0e:f3:0a:36:0f:90:30:25:d6:88:a8:7c:
         18:50:aa:83:f0:96:8d:ee:60:71:f7:f7:0d:21:e7:16:1d:19:
         a2:47:bd:76:17:06:8b:7f:92:54:8a:ae:46:c6:c3:4a:1b:45:
         58:b8:86:89:c7:e0:87:c0:56:af:6f:f4:37:c8:7f:c4:61:4a:
         e6:96:c2:31:18:cb:c7:4a:d5:ec:84:38:6a:f8:85:51:cd:c9:
         59:96:08:fb:78:8c:e7:ef:eb:e8:d5:18:6f:83:c0:7f:d3:3a:
         cc:4a:e7:7a:f4:e6:bb:52:31:bc:b7:3b:fc:57:05:00:9a:f2:
         99:2f:fc:43:23:4e:9d:b1:b0:36:aa:ed:75:a3:8f:a0:a1:63:
         c2:bc:e6:71:46:67:3c:df:5a:66:40:8b:37:f5:3d:bf:d5:95:
         09:ff:54:11:36:52:f1:81:89:07:6c:92:3c:1f:f7:d8:0f:8e:
         c6:80:07:c7:50:e2:03:6e:8e:56:dd:ee:d6:9a:a5:e8:c5:1d:
         6f:57:85:83:ee:79:c5:4f:9e:2a:bd:bb:16:76:9d:a1:2a:1f:
         52:c3:c9:5d:a6:34:f7:de:a5:51:0c:80:d6:8b:15:7a:6a:a2:
         c1:73:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:56 2026 by rpki-client