Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
File:                     6Is19ZnvHCbySYP5Fafq7GeXx_o.mft (raw, json)
Hash identifier:          moATVWnwKe+EsPW+zJHCBZ3GkDSoUhzTer1oSDtkRdg=
Subject key identifier:   B3:1D:D6:0A:03:F0:4C:D2:01:32:04:A3:C4:C1:65:97:29:16:1C:F9
Authority key identifier: E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA
Certificate issuer:       /CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
Certificate serial:       019FA9E27FC4C83F60BB4D0497F446E49231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
Manifest number:          15E8
Signing time:             Tue 28 Jul 2026 18:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:21 +0000
Files and hashes:         1: 6Is19ZnvHCbySYP5Fafq7GeXx_o.crl (hash: gyZk9H8dQVtnQiUgtG7XSRCQgb/CbgqrA91FBrMq4MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:7f:c4:c8:3f:60:bb:4d:04:97:f4:46:e4:92:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88b35f599ef1c26f24983f915a7eaec6797c7fa
        Validity
            Not Before: Jul 28 18:00:21 2026 GMT
            Not After : Jul 29 18:00:21 2026 GMT
        Subject: CN=b31dd60a03f04cd2013204a3c4c1659729161cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:cf:61:7d:60:b0:8b:7d:c6:89:67:9c:2b:
                    82:de:57:5d:30:23:9a:e2:9d:24:b0:6e:4c:34:96:
                    c6:6f:86:b8:02:98:75:8f:01:e9:68:c4:2d:bc:77:
                    3d:73:a3:f6:f6:ea:df:a8:66:db:17:f5:ab:a7:ef:
                    db:59:b7:6c:93:60:a1:53:ac:7e:31:20:42:91:4a:
                    30:6c:13:0e:67:95:5e:19:60:1a:df:57:ac:8c:08:
                    5a:b0:45:13:f8:80:3f:8f:8d:5b:01:51:89:a4:b4:
                    6b:49:d9:17:24:a6:b7:f5:78:08:a7:db:a7:bd:de:
                    d1:63:a0:8e:b9:7f:65:b3:58:b5:57:24:8b:84:47:
                    8a:e3:45:43:a9:a0:c6:37:5c:bd:cc:93:14:85:59:
                    0f:5b:17:98:63:8d:44:75:c7:ba:f3:e0:36:18:c9:
                    d2:bf:85:62:b0:3d:05:42:11:ae:e6:86:a3:65:42:
                    5a:51:5d:19:e4:43:dc:6a:1a:e2:71:2d:b9:f8:b3:
                    03:5e:97:98:26:91:99:0a:cb:35:11:a7:37:7a:b3:
                    7d:ea:6f:b3:19:ae:55:36:c5:fd:8e:be:77:ec:aa:
                    9a:c3:78:a3:35:4f:a7:51:d0:e8:05:7e:4f:bb:81:
                    b6:d3:e3:48:85:01:3c:20:7d:98:d0:02:03:f3:ee:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1D:D6:0A:03:F0:4C:D2:01:32:04:A3:C4:C1:65:97:29:16:1C:F9
            X509v3 Authority Key Identifier:
                keyid:E8:8B:35:F5:99:EF:1C:26:F2:49:83:F9:15:A7:EA:EC:67:97:C7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Is19ZnvHCbySYP5Fafq7GeXx_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/311977-26ba-4da8-b062-770595363e65/1/6Is19ZnvHCbySYP5Fafq7GeXx_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:15:94:0c:6c:8e:e3:b7:f3:4c:12:a0:e8:f6:f2:37:61:9a:
         fc:98:f4:df:0a:77:29:28:14:e8:4c:51:5d:94:d4:97:35:74:
         17:78:a5:40:e6:69:41:0f:40:d1:dc:c1:ca:bb:79:4d:69:a7:
         e2:bc:e4:ee:4d:09:2b:62:30:77:48:b2:19:e1:ef:72:5d:59:
         4e:a4:ec:29:aa:92:c5:e0:f7:ce:23:ea:3b:13:a7:64:b3:9e:
         f6:c0:a7:f5:91:21:1f:20:e8:af:e0:6b:6f:b9:69:6e:6a:7e:
         cb:fd:01:7f:7c:6b:a6:0b:f7:07:3b:2a:f8:9c:9a:59:f3:82:
         eb:f0:cf:58:e3:9a:4f:fe:23:95:cc:fc:fb:7f:f5:52:6a:7d:
         98:57:cc:56:2c:da:08:c3:dc:0e:bb:d0:24:9f:e8:ce:e8:f4:
         ef:db:00:67:64:c4:cb:cd:a9:e1:0c:d8:32:33:aa:e9:b8:e2:
         6e:2e:f9:4b:4d:f3:ec:b9:94:d0:92:ba:53:61:be:92:48:35:
         0c:76:ec:92:9f:c6:a4:43:00:8e:80:38:70:96:d4:fc:22:f1:
         7e:94:0e:d9:0c:7f:82:90:06:3e:48:14:04:c0:7c:74:2c:43:
         19:2b:94:ba:0a:bc:be:dc:49:ed:c3:5c:5a:5c:fe:09:bd:a4:
         ee:25:b2:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4n/EyD9gu00El/RG5JIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGIzNWY1OTllZjFjMjZmMjQ5ODNmOTE1YTdlYWVjNjc5
N2M3ZmEwHhcNMjYwNzI4MTgwMDIxWhcNMjYwNzI5MTgwMDIxWjAzMTEwLwYDVQQD
EyhiMzFkZDYwYTAzZjA0Y2QyMDEzMjA0YTNjNGMxNjU5NzI5MTYxY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R/PYX1gsIt9xolnnCuC3lddMCOa
4p0ksG5MNJbGb4a4Aph1jwHpaMQtvHc9c6P29urfqGbbF/Wrp+/bWbdsk2ChU6x+
MSBCkUowbBMOZ5VeGWAa31esjAhasEUT+IA/j41bAVGJpLRrSdkXJKa39XgIp9un
vd7RY6COuX9ls1i1VySLhEeK40VDqaDGN1y9zJMUhVkPWxeYY41Edce68+A2GMnS
v4VisD0FQhGu5oajZUJaUV0Z5EPcahricS25+LMDXpeYJpGZCss1Eac3erN96m+z
Ga5VNsX9jr537Kqaw3ijNU+nUdDoBX5Pu4G20+NIhQE8IH2Y0AID8+6eswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMd1goD8EzSATIEo8TBZZcpFhz5MB8GA1UdIwQY
MBaAFOiLNfWZ7xwm8kmD+RWn6uxnl8f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjIt
NzcwNTk1MzYzZTY1LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTE5NzctMjZiYS00ZGE4LWIwNjItNzcwNTk1MzYzZTY1
LzEvNklzMTlabnZIQ2J5U1lQNUZhZnE3R2VYeF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExWUDGyO
47fzTBKg6PbyN2Ga/Jj03wp3KSgU6ExRXZTUlzV0F3ilQOZpQQ9A0dzByrt5TWmn
4rzk7k0JK2Iwd0iyGeHvcl1ZTqTsKaqSxeD3ziPqOxOnZLOe9sCn9ZEhHyDor+Br
b7lpbmp+y/0Bf3xrpgv3Bzsq+JyaWfOC6/DPWOOaT/4jlcz8+3/1Ump9mFfMViza
CMPcDrvQJJ/ozuj079sAZ2TEy82p4QzYMjOq6bjibi75S03z7LmU0JK6U2G+kkg1
DHbskp/GpEMAjoA4cJbU/CLxfpQO2Qx/gpAGPkgUBMB8dCxDGSuUugq8vtxJ7cNc
Wlz+Cb2k7iWydQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:36 2026 by rpki-client