Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
File:                     6MvUwjBi1pU3-y6Kisy_sCfytSU.mft (raw, json)
Hash identifier:          V/KvDCw9LfVcqpE+uxA9MUOvssBYu5Z+qoDYZOp/mdw=
Subject key identifier:   C6:E3:35:06:C2:8A:04:E7:FD:40:01:D9:4B:F0:DE:E3:BE:C8:F9:A7
Authority key identifier: E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25
Certificate issuer:       /CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
Certificate serial:       019FA9AC073245B8A8D18A1CFF70FA3B6639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
Manifest number:          0F2E
Signing time:             Tue 28 Jul 2026 17:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:51 +0000
Files and hashes:         1: 5s94JKAXDJrQpueM4W0HRuRUXqQ.roa (hash: CzNnEJOva2qyeDIKL4O8DARiGLjA2TNz7kBujtqjE84=)
                          2: 6MvUwjBi1pU3-y6Kisy_sCfytSU.crl (hash: /yHUg0UzsSqgfzNEB2oGxZN5iapL3l3JOScG7o7z+hI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:07:32:45:b8:a8:d1:8a:1c:ff:70:fa:3b:66:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbd4c23062d69537fb2e8a8accbfb027f2b525
        Validity
            Not Before: Jul 28 17:00:51 2026 GMT
            Not After : Jul 29 17:00:51 2026 GMT
        Subject: CN=c6e33506c28a04e7fd4001d94bf0dee3bec8f9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:3a:76:02:5c:b7:4d:6c:9f:3a:cf:81:29:
                    93:35:b3:ee:7c:4a:67:bc:44:01:86:c9:ca:5a:75:
                    30:ef:40:37:1f:bf:51:59:a0:d8:67:46:2d:29:0d:
                    17:90:5d:5f:37:04:5f:8c:72:ee:41:15:12:3f:d7:
                    3b:89:5d:f7:30:85:10:ea:09:3d:6b:e8:8d:75:95:
                    16:e5:bc:97:ea:ad:a8:4d:c2:81:18:ef:93:0a:74:
                    9c:03:9d:e4:07:64:70:c4:f7:17:95:7a:07:d2:3b:
                    db:72:99:76:ba:11:5d:47:69:77:4d:c4:ac:59:23:
                    18:9e:99:e5:7d:66:40:b9:2f:08:3b:ee:21:8e:f5:
                    9c:85:6f:ba:28:80:02:29:1b:67:ab:92:46:49:69:
                    a6:76:8a:4b:33:ab:79:eb:a1:75:5c:84:16:fe:41:
                    ab:ad:b6:34:4a:ed:5f:03:5e:e8:6d:e3:7a:59:61:
                    66:38:06:b8:da:bc:18:ca:63:7d:34:86:7c:76:23:
                    d6:d5:74:af:ba:4a:ff:52:7e:a9:8e:09:85:2c:32:
                    db:5d:8a:ff:a6:63:17:92:a9:4a:22:d8:77:32:e3:
                    18:24:51:a0:36:10:37:bc:52:a1:0e:34:1b:74:c7:
                    be:7c:35:ec:d3:bd:76:88:c0:b1:16:3b:fd:7b:68:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E3:35:06:C2:8A:04:E7:FD:40:01:D9:4B:F0:DE:E3:BE:C8:F9:A7
            X509v3 Authority Key Identifier:
                keyid:E8:CB:D4:C2:30:62:D6:95:37:FB:2E:8A:8A:CC:BF:B0:27:F2:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MvUwjBi1pU3-y6Kisy_sCfytSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b4ef48-39b3-4658-a766-7823bcca5970/1/6MvUwjBi1pU3-y6Kisy_sCfytSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:b2:fd:b6:96:f6:fb:cd:ad:18:29:b2:be:28:c2:b7:1c:
         14:59:d2:69:a3:d9:72:15:ea:7b:4f:f7:1b:db:7e:1b:76:c5:
         87:35:ac:f4:e9:53:d5:12:c4:4a:a4:7b:69:ba:be:f0:32:be:
         94:d9:99:de:01:5b:9e:ee:34:c8:f3:d1:a4:ae:bc:7e:98:fe:
         dc:ab:fe:0c:27:07:49:70:21:e4:71:6a:7c:2b:04:0a:b9:af:
         80:3d:b2:d4:54:36:b0:0f:95:6e:e7:76:da:13:86:d7:9d:ed:
         37:55:b4:65:b4:6d:26:6f:a8:36:f3:2a:0a:55:ca:00:b1:61:
         7c:9f:5d:59:55:8d:7a:e5:82:05:fd:e9:f4:ae:5b:03:af:90:
         15:a6:8f:1d:d0:58:84:c6:90:ca:57:38:de:7c:b8:59:ad:15:
         cc:20:b4:92:5a:c3:47:65:0a:bb:04:81:f1:93:2e:43:f1:6a:
         53:2a:d7:9e:9c:36:0f:08:a5:4f:2e:7f:46:42:dd:90:7a:37:
         fd:1c:48:af:d6:24:3d:6d:45:61:23:b5:a3:17:4a:7f:7c:de:
         35:ce:ef:0b:73:c0:21:9d:4d:bf:93:27:e0:89:e3:c0:ef:be:
         e1:7d:29:4c:7e:40:c5:42:9b:9b:a8:3f:1e:40:e9:14:b8:cd:
         59:20:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:53 2026 by rpki-client