Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
File:                     6e6weDKMPHspw3AA9xqS9XKRjeY.mft (raw, json)
Hash identifier:          7EOzufIq2EeSSnKpmZX7QiquGt2wrBeC8pv1zWFvTgE=
Subject key identifier:   3F:70:8B:3C:78:CC:A5:5E:AD:8E:96:08:C5:EB:3C:ED:BA:20:86:F8
Authority key identifier: E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6
Certificate issuer:       /CN=e9eeb078328c3c7b29c37000f71a92f572918de6
Certificate serial:       019FA975AE9FA5C3B85C44BA8BA33812B2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
Manifest number:          031F
Signing time:             Tue 28 Jul 2026 16:01:29 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:29 +0000
Files and hashes:         1: 6e6weDKMPHspw3AA9xqS9XKRjeY.crl (hash: S1JF+Wq/gLEroOAfmtZ86XfvlYidx9AadM6Lh7iXDGI=)
                          2: TCYoAFJaTqATlFl0u6eQAyMZXJ8.asa (hash: v+oV8YQrF1EVh7SFPiMT8Uf4NtlNNpd/LZU5zlH6PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:ae:9f:a5:c3:b8:5c:44:ba:8b:a3:38:12:b2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9eeb078328c3c7b29c37000f71a92f572918de6
        Validity
            Not Before: Jul 28 16:01:29 2026 GMT
            Not After : Jul 29 16:01:29 2026 GMT
        Subject: CN=3f708b3c78cca55ead8e9608c5eb3cedba2086f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:53:bc:3b:49:5c:97:ce:41:56:77:57:9e:
                    79:2d:55:0e:f6:ab:0f:01:9e:49:80:12:00:6d:21:
                    e4:12:c4:99:55:09:90:c4:27:49:46:d2:24:b8:34:
                    d0:a1:33:1f:cb:d0:20:73:69:44:77:8f:ff:05:f7:
                    49:32:7a:7b:44:c3:3d:55:b8:e5:c2:82:e2:7e:22:
                    07:fe:d0:24:a9:25:41:19:ee:31:e3:3f:46:34:3f:
                    00:7f:62:cb:2b:a1:da:14:83:0b:d0:d8:b5:21:15:
                    ba:76:9e:dc:9c:41:97:f3:c6:34:38:84:e6:dc:0b:
                    77:98:78:d5:eb:79:fe:42:d5:c0:da:a3:dd:d0:79:
                    60:0a:7f:17:8a:2e:0c:58:fd:67:1f:0a:a2:15:6e:
                    89:0a:80:56:32:51:c5:3e:5f:cd:90:fc:3c:ff:4f:
                    09:5b:5b:a5:51:a0:2e:a9:47:47:ce:94:14:52:45:
                    96:df:8a:97:2f:e3:4e:d4:5b:4d:61:02:ce:8d:18:
                    2d:6b:37:dd:f9:e3:15:31:44:0a:27:71:ab:36:93:
                    42:21:f8:a3:72:05:db:08:0a:be:8b:e1:6b:aa:30:
                    2d:83:5f:ff:24:c0:d8:0b:6f:3d:54:b9:a8:4c:04:
                    12:37:06:8e:23:23:d3:ac:a4:80:b3:11:72:20:05:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:8B:3C:78:CC:A5:5E:AD:8E:96:08:C5:EB:3C:ED:BA:20:86:F8
            X509v3 Authority Key Identifier:
                keyid:E9:EE:B0:78:32:8C:3C:7B:29:C3:70:00:F7:1A:92:F5:72:91:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e6weDKMPHspw3AA9xqS9XKRjeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9bdbd8-e25b-4b98-8194-14af2dfd2dfc/1/6e6weDKMPHspw3AA9xqS9XKRjeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:43:f3:12:60:53:2a:de:25:c5:dd:f1:c1:8d:fd:0d:b2:
         31:53:86:b0:c5:5b:92:c6:85:e3:f3:ad:a3:cb:b6:4f:61:b1:
         d7:9d:37:36:f1:6c:a9:02:d2:fa:e3:87:ff:3a:95:23:6c:0f:
         f1:19:3e:2f:1e:42:39:e4:14:8c:42:15:d7:25:67:20:1f:60:
         c6:d5:8e:1f:31:5e:9d:bb:62:1d:40:d4:32:a3:d6:24:ee:72:
         36:d1:70:7e:85:fa:52:70:9b:17:cf:2b:01:23:90:6c:06:65:
         ce:4a:f7:ae:c3:c7:a5:f8:df:9c:f3:a2:0f:ee:90:6b:22:fd:
         e0:4c:9d:89:00:22:99:8c:05:f6:c0:26:b9:42:79:4c:5e:52:
         c9:b4:4a:fc:18:a9:81:04:4e:ad:d9:d1:54:7b:17:27:a3:68:
         45:03:bd:ee:cb:36:a7:7c:81:6d:4f:8d:e0:67:05:98:df:8d:
         b5:62:bc:d6:f3:d3:c5:e4:d3:99:8e:64:5b:f3:3a:a3:4c:9c:
         79:29:ec:30:17:fa:c4:e8:09:2c:08:05:d9:39:74:d8:bb:3c:
         2d:8a:2a:c2:89:2f:c7:8a:fe:94:be:48:28:a7:aa:8f:3b:13:
         b3:bc:b4:e4:ca:c0:cd:1e:c2:ff:c0:77:58:61:56:37:56:1e:
         45:19:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:29 2026 by rpki-client