Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File:                     g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier:          FmxO3xVfhch1Px/dTGESlBC8Q0ALbYrog1ToucPsEUw=
Subject key identifier:   7F:DD:6D:CA:00:C7:D6:83:2A:AB:CA:6E:0E:62:66:FC:B8:AC:3D:4A
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer:       /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial:       019FA8CFE8B26FDB2F7D5D6729BD719A19A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 13:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:25 +0000
Files and hashes:         1: MFlCR2JXbFM0gvBh_dWTVgoL37E.roa (hash: yQHl3h+BIb30RJsHlvxFsia7sgue1T2fPrdJ6ihTuRE=)
                          2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: OSVWE7JgFuwL4hXBU/vNanL5hELc0vMMjzNY0mPYDEM=)
                          3: ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa (hash: iBbHmTmPmE2txWf3AwnVIHjDVj/1ExRukaV5Q59K53k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:e8:b2:6f:db:2f:7d:5d:67:29:bd:71:9a:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
        Validity
            Not Before: Jul 28 13:00:25 2026 GMT
            Not After : Jul 29 13:00:25 2026 GMT
        Subject: CN=7fdd6dca00c7d6832aabca6e0e6266fcb8ac3d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:19:5d:38:4b:9d:ac:be:e0:10:23:a0:64:
                    84:ca:62:0b:0f:ed:1d:04:c0:fc:3b:eb:d0:f1:0b:
                    10:f0:f0:5c:29:fa:45:c2:fe:4b:f2:65:9e:8d:24:
                    ed:35:60:16:e1:45:b7:86:74:1e:f8:1b:11:2a:99:
                    01:3b:5c:0e:56:71:28:2e:a5:e0:93:c7:b0:7c:5c:
                    e5:e4:86:e3:e6:75:d9:36:e4:15:91:87:8f:0f:b6:
                    9d:af:07:92:40:91:dd:a3:2b:fb:c6:ea:ed:42:c0:
                    4f:50:0f:e1:14:47:6e:90:de:92:8e:89:b7:c2:89:
                    c9:af:86:af:5a:81:72:46:ba:29:65:bf:5a:9c:40:
                    40:74:c5:2d:b0:35:8e:d9:d1:18:94:45:3c:ee:7a:
                    5b:8e:e6:6a:53:0d:b6:fb:c3:ad:19:aa:d4:d7:81:
                    03:52:4a:03:6b:8c:85:b2:e5:0d:bd:04:7e:bb:4d:
                    9b:8e:58:21:b9:44:fa:a5:fe:8d:6f:b2:98:75:3b:
                    2c:3f:d5:b3:45:9e:e6:e8:a3:ba:21:76:54:d9:9c:
                    20:91:16:7e:39:51:4e:2d:78:ca:71:d8:c4:be:f7:
                    00:af:0b:3d:f2:74:8b:9a:bc:19:1e:b7:03:67:75:
                    4e:72:c0:80:c4:11:95:35:48:79:f7:f4:bf:b2:68:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DD:6D:CA:00:C7:D6:83:2A:AB:CA:6E:0E:62:66:FC:B8:AC:3D:4A
            X509v3 Authority Key Identifier:
                keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:07:8c:1f:68:c2:df:01:a6:05:82:a9:7c:c7:78:36:07:27:
         09:98:c4:0d:cf:79:b5:8e:61:c5:32:4d:0d:3f:d3:71:9b:9f:
         b3:f0:b0:c1:2f:a8:71:20:4f:75:86:a5:ba:e8:a8:df:79:8d:
         2a:c2:18:fb:07:e1:b7:9a:29:e5:b3:60:0a:2d:34:28:8b:4a:
         3d:dc:ef:fa:4a:39:2b:1b:6c:1e:b5:c5:7c:36:f5:88:ef:d7:
         e2:8b:e2:b9:9b:49:15:8c:bc:eb:83:9d:7f:04:e9:55:e6:83:
         d9:b3:fe:cb:f6:89:12:da:44:6d:ef:e8:cc:c6:65:30:26:b1:
         d5:ac:ef:90:d2:c4:1c:0b:03:43:1f:3e:0c:73:52:c3:17:ef:
         58:69:89:df:e4:67:80:ab:04:fb:1e:b3:93:b2:10:3a:be:f9:
         06:ca:e5:78:43:76:50:aa:de:55:2a:6a:a8:9c:05:d5:a3:92:
         59:40:2f:cd:32:2c:5a:52:e2:cf:9b:25:3f:0f:16:56:00:48:
         f3:6a:de:aa:d3:f9:e8:7b:38:a7:17:e7:57:41:b5:56:96:73:
         ba:6b:11:d6:e8:c2:5f:ae:e4:76:c3:89:1d:92:65:25:b1:81:
         3c:aa:c3:d0:63:9d:99:87:28:73:70:ab:0c:17:bb:ce:7a:14:
         3f:27:0c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:34 2026 by rpki-client