Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          0B6VHtqtKIBn19CigFCFefZewXX17NjkgzqsM3ABWC4=
Subject key identifier:   2F:6D:0E:13:73:DD:FF:48:FF:4C:A0:97:87:00:71:86:6A:0B:31:3D
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       019FA86259F805D2CB3023F268102DF3DCC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 11:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:45 +0000
Files and hashes:         1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: HbllHUOKy8KYmr0vbxhp5wY+5weGd+gQ10ZQpuiWCLU=)
                          2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:59:f8:05:d2:cb:30:23:f2:68:10:2d:f3:dc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Jul 28 11:00:45 2026 GMT
            Not After : Jul 29 11:00:45 2026 GMT
        Subject: CN=2f6d0e1373ddff48ff4ca097870071866a0b313d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:96:1f:e1:2f:10:ec:1d:ba:25:98:a0:0c:e0:
                    49:46:5d:5b:67:b8:db:42:2c:d1:02:bc:45:d7:1a:
                    40:9c:70:2e:64:a9:bd:84:e4:c6:4c:c7:40:fa:c3:
                    2d:36:15:e3:95:b9:56:f0:a1:af:25:b4:bb:ea:a2:
                    a5:ed:fc:55:15:34:a5:ba:f5:29:6f:a8:f1:f1:d4:
                    bb:58:27:b0:ee:a0:fc:be:ef:58:61:91:55:34:18:
                    04:cc:a0:47:e4:7f:d5:25:07:00:3b:2d:b2:36:d2:
                    11:75:12:fe:21:3b:4f:8e:7e:27:5a:3e:f5:4c:bd:
                    bd:8c:a6:00:4d:ed:ab:58:d6:01:3a:6b:8a:da:ed:
                    87:10:9e:7d:9e:0e:0e:08:21:8f:82:4e:55:a2:33:
                    d4:cd:d7:72:2d:44:22:94:eb:62:cb:98:d2:fc:5e:
                    86:23:0e:63:6e:cd:a0:51:2e:8a:48:ba:c7:c6:48:
                    46:51:a6:e6:37:f4:c1:1b:45:0b:4f:77:9c:b9:3a:
                    f2:cb:9d:f0:6d:e7:e2:55:e9:ca:fe:95:b8:dd:51:
                    66:95:4f:48:7e:f7:72:5b:57:22:46:7f:32:6f:27:
                    1b:be:d5:32:82:7c:bf:9b:a8:8e:93:b3:51:81:f8:
                    8e:0e:ae:e2:1d:69:1e:a4:8f:bb:d7:37:5b:2b:7c:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6D:0E:13:73:DD:FF:48:FF:4C:A0:97:87:00:71:86:6A:0B:31:3D
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bd:cd:44:69:c4:52:99:22:14:7f:83:19:84:5f:c1:c6:ac:
         99:8f:8a:39:f4:52:79:c9:8a:58:a3:3a:62:4c:97:ee:7a:88:
         74:e5:a3:df:46:7a:69:9b:32:0a:5c:95:d4:fc:f1:b6:81:06:
         56:5d:b4:7f:fe:91:3e:4a:1b:8a:2a:a1:54:60:46:56:1c:f2:
         71:7c:ab:d6:75:c4:16:ee:f8:a9:62:f7:a9:64:1d:40:fd:cf:
         b5:62:60:61:12:62:76:44:e2:54:d4:3d:cb:a2:38:54:ac:94:
         35:7b:a1:ef:ef:67:dd:81:b3:e3:7f:5f:57:a4:40:2a:62:3e:
         df:6c:2f:dc:c0:14:dc:39:fc:3b:09:ff:23:6c:63:57:9d:14:
         d1:0a:be:a9:00:a8:06:b2:2c:07:58:68:2d:00:a4:7b:fc:bf:
         75:3f:f6:3e:a6:91:d1:06:ca:5b:f1:96:ac:fe:3c:eb:b6:34:
         92:9e:30:3d:14:e0:04:45:e3:5d:8f:a0:d4:f6:c7:31:34:85:
         e2:75:9e:c2:ef:e5:00:d6:44:66:53:3e:da:df:29:f8:0b:05:
         83:e6:64:7e:29:1b:6e:7b:2f:a6:2d:1d:48:80:5f:0c:30:de:
         c2:20:85:34:0a:c3:e6:1f:0f:a7:7d:1d:8c:3e:4b:cb:ee:b1:
         d8:52:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:23:57 2026 by rpki-client