Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          klFGVX4nU4L0CJEi/53DPr0Nk1dcEmcQSV4Amgg8SyU=
Subject key identifier:   E1:0E:62:20:7F:BC:31:D6:A0:2B:65:FB:C9:70:6D:50:FB:58:B7:E3
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       019FA89A5E1C06FD2E7C45FC26F5390E403F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          17B7
Signing time:             Tue 28 Jul 2026 12:01:56 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:56 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:56 +0000
Files and hashes:         1: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: +1xXgAaN107BzztnbNXoSnp2jBLBCgFoRBlTjpyWoTU=)
                          2: 7loClnPIcUbtAbx6mGh0lsGW48o.roa (hash: yOcHIjd7oPv+N53vYMQlYvden0DATni198YCMHAm4lo=)
                          3: OdOsnmY7mFWYl3NneL7smCsUfBk.roa (hash: 3ZUW45T9dWsqHLezKT+QoIPnfwMwqZBKXn6daUP8VPY=)
                          4: RpFQVqs6AhWj2RTqUCdH4sWGuGU.roa (hash: j5JWbGxhiLws6+4v7Q+xQtpFTmvjadNSZy3J+QPjD2E=)
                          5: bJ1xftCeyWl4bXChZCw5Xi3s6aY.roa (hash: OVR8awV0iRm5IfM/UmEnkKeqOwpzIAzrZDkyNT/4Rhw=)
                          6: feRgJ8Tgs02CST_94QIydWyNOqI.roa (hash: 6/iSawmzTOEL47ThEXqsqngTOM3QKDo/dxI2Dx6rGEM=)
                          7: gsF1NmgMnu9Ca4ZyyOypgxhgV0g.roa (hash: TJu260zcK4vOdWrtlvkrVASOWCULxHs+p/9+8TiE4mQ=)
                          8: yli3cmEKkG3rbScNRHGblhqAvA8.roa (hash: qAidfk/RnX+PDBXeHtXjoHlHJ126KLvwshcghnEBZqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:5e:1c:06:fd:2e:7c:45:fc:26:f5:39:0e:40:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Jul 28 12:01:56 2026 GMT
            Not After : Jul 29 12:01:56 2026 GMT
        Subject: CN=e10e62207fbc31d6a02b65fbc9706d50fb58b7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:ba:a8:c0:c6:57:48:f6:b7:f0:d2:19:b4:
                    2d:68:dd:2d:15:c7:c0:f6:1e:e3:71:a2:36:39:98:
                    4e:60:ad:a6:af:59:12:f6:06:54:47:35:87:43:ab:
                    5e:50:22:30:14:7f:00:d7:e2:0a:5e:da:ed:a1:17:
                    26:d5:59:d9:88:78:09:3e:c7:4f:f8:d2:54:60:e1:
                    44:34:2b:03:d6:e0:ff:ea:9d:b2:1c:ed:e8:5b:fc:
                    0d:bb:3a:5a:0c:f9:0e:dc:44:24:75:36:f2:3b:5e:
                    3f:ee:99:c6:28:f8:cc:5a:ec:e1:0d:44:77:41:c0:
                    9c:c7:09:d5:72:7c:e2:f2:96:4f:77:10:af:40:ac:
                    67:37:45:62:26:07:4a:1d:48:8f:c4:e9:58:26:a0:
                    bb:d3:2a:64:b1:8e:47:96:25:a9:95:17:93:4a:43:
                    8b:5a:d8:09:0e:db:db:9a:75:8b:c4:be:cf:3a:35:
                    a0:a2:74:3d:08:1a:ff:5c:29:0f:0f:5f:ea:3d:b8:
                    a7:75:80:87:80:7a:d7:09:ff:f9:ae:5b:ee:77:a1:
                    df:47:3d:ce:dc:67:a1:bd:c8:28:2c:ba:77:e7:77:
                    32:20:93:38:26:fb:ba:9d:84:d3:64:30:b5:3d:f9:
                    32:94:72:91:38:f7:d4:c1:d3:19:cc:ce:d6:b5:e4:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0E:62:20:7F:BC:31:D6:A0:2B:65:FB:C9:70:6D:50:FB:58:B7:E3
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:40:5b:09:d2:42:eb:b6:e6:d0:b6:ca:d2:d3:7d:b5:00:
         b7:79:0a:2c:89:b0:ef:64:f0:f4:b3:81:57:f6:df:40:e7:c8:
         bc:c1:5a:50:81:7c:10:9d:03:1b:3c:48:08:e8:75:a1:85:60:
         6a:24:bb:bc:99:1d:3b:b2:63:83:fb:a4:7b:66:25:7b:02:42:
         ad:f7:5a:17:eb:90:93:ff:55:75:48:b2:01:a7:55:7c:f8:e6:
         5b:7c:df:e0:a3:81:38:53:78:60:fd:27:41:33:e5:2a:34:c3:
         c9:c7:f2:c5:a3:a2:d2:30:55:78:9a:97:31:cd:8b:5d:5b:67:
         d6:50:b6:f1:31:66:a0:c5:2d:c9:7d:89:19:01:18:6f:0c:a1:
         dc:68:ea:b9:df:b0:2b:31:80:1e:f1:01:8b:93:0d:53:82:fe:
         02:10:89:8a:3e:73:8b:bc:ac:a6:c3:38:aa:39:76:53:4c:3b:
         d9:20:69:a0:18:a3:06:af:62:6a:d8:a5:fb:b2:fe:1d:d1:d3:
         02:76:fb:a9:0f:bc:2a:52:2f:4f:5e:a8:fd:bb:06:83:d5:2e:
         5c:44:86:9f:80:50:42:72:21:bb:21:9f:60:ad:d2:c7:77:45:
         70:48:9e:58:83:7b:b2:c3:fc:18:f7:83:78:70:03:c7:7d:5c:
         26:02:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:42 2026 by rpki-client