Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
File:                     6SgMSHGyv5r8M1H99qV936fa9Iw.mft (raw, json)
Hash identifier:          UZzoWaOeIZSDRwmdXVEkp/qpaM8njlETwzYSj5/tiAg=
Subject key identifier:   70:59:97:B0:F9:7C:E9:EB:0E:68:82:1A:88:D6:92:EA:90:A9:81:32
Authority key identifier: E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C
Certificate issuer:       /CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
Certificate serial:       019FA7BD69DB2CACF945886391C34EC93346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
Manifest number:          A4
Signing time:             Tue 28 Jul 2026 08:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:36 +0000
Files and hashes:         1: 6SgMSHGyv5r8M1H99qV936fa9Iw.crl (hash: rkNqvzPyYMkXWG04Qlq8ejUd/W6ETr2IaWXk4WFwMdA=)
                          2: Zu0NNM9LW0_qKOEkPFOFwYsro28.asa (hash: xJ1I/gwQtV5C+82Ket3pblco0EI3111Sc/W6E6u6OIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:69:db:2c:ac:f9:45:88:63:91:c3:4e:c9:33:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
        Validity
            Not Before: Jul 28 08:00:36 2026 GMT
            Not After : Jul 29 08:00:36 2026 GMT
        Subject: CN=705997b0f97ce9eb0e68821a88d692ea90a98132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:aa:07:d6:09:b1:9a:f3:81:2f:3c:0d:1d:
                    ec:cf:b1:f0:c2:a5:29:dd:bf:cf:3e:d4:0d:c1:d1:
                    98:1a:25:72:07:41:4e:b4:18:d2:20:43:62:f0:e6:
                    66:1d:87:00:fc:e7:0a:5a:5d:93:74:9a:d7:d3:9e:
                    f7:a1:dd:b8:d9:98:47:4a:60:8b:12:be:0f:36:d4:
                    7a:ae:94:a3:70:7f:96:a1:3e:08:c1:b8:d0:b2:94:
                    b6:fc:40:18:a7:4f:29:49:df:93:13:9d:35:2c:42:
                    1a:b2:b3:2a:97:14:ad:61:ce:c4:a0:13:5e:41:6c:
                    06:c6:0f:8e:e2:47:ef:76:a4:97:2b:97:66:5b:52:
                    d2:30:4f:14:4d:b7:45:29:2c:7d:a0:49:c1:3f:0e:
                    7a:92:9f:d4:17:0a:42:36:c1:e1:84:79:f7:c6:9d:
                    d5:4a:59:1c:67:46:d5:1c:96:85:30:a0:a1:5a:97:
                    aa:90:15:e5:f2:81:25:1b:b4:32:d1:44:63:1a:f0:
                    dc:ba:8b:c7:7c:44:25:1a:9d:9d:2b:9d:43:d2:0c:
                    a0:b4:04:60:58:df:fc:bb:83:91:4a:eb:0d:53:cf:
                    32:25:d5:d5:8c:94:71:e0:2d:32:1a:f5:f7:b5:2c:
                    ee:b1:52:34:94:0f:79:f3:d1:6c:9d:73:a7:80:5b:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:59:97:B0:F9:7C:E9:EB:0E:68:82:1A:88:D6:92:EA:90:A9:81:32
            X509v3 Authority Key Identifier:
                keyid:E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:16:28:07:0f:c5:2d:19:4e:b6:fc:dd:b2:2c:b5:c6:66:42:
         4a:67:94:64:3c:46:b4:7d:8b:f6:f3:c7:b1:ad:fa:00:c1:9d:
         2a:85:99:6b:df:84:ac:db:8c:5a:12:31:e5:8e:72:e3:5e:5a:
         6b:89:82:ae:15:1c:41:01:66:42:22:d3:c9:b7:95:24:2d:06:
         a2:77:b3:14:62:01:f6:17:1e:65:27:6e:5e:c8:6b:12:e9:14:
         8d:d8:9e:7c:a5:9f:16:33:6d:f6:85:47:80:3d:59:08:37:fd:
         1c:be:89:7a:dd:6e:8e:85:7c:d9:a3:ba:9c:56:89:20:a1:8d:
         e7:1e:d2:e7:65:f3:e5:10:f5:ed:d5:2f:40:60:21:88:6c:c0:
         3a:14:f2:74:d9:45:41:5b:ed:d0:60:55:2f:99:75:4e:55:15:
         4e:ab:a8:43:cf:d4:5c:b9:a2:f0:75:b7:e5:a6:af:d4:fb:49:
         d7:97:fc:f6:e2:e6:b5:df:d4:50:c1:29:77:1d:a9:bb:9b:d7:
         c1:4c:d8:25:7d:00:5c:cd:06:5a:b4:f4:a1:31:47:fd:b4:2e:
         37:34:03:66:c6:10:d9:3b:28:ca:74:b9:c9:7c:32:f7:1a:f2:
         79:22:ab:5d:27:6d:8a:94:c0:43:08:61:4c:84:bc:57:a6:cb:
         4b:77:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:57:48 2026 by rpki-client