Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          cJoUieQyGtoDJ2iJp0MDFZpaKAjHmBqiKYqOMPhrFwA=
Subject key identifier:   34:DF:CE:F1:FE:B3:A3:D5:BD:7C:31:CC:87:46:34:09:FB:11:83:1A
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       019FACE392D6885EFDBDE7A9FA52F0948EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          193D
Signing time:             Wed 29 Jul 2026 08:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:23 +0000
Files and hashes:         1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: S/6lBty/Si3J6OULDuoMSc4beRFBp3nBJlTf5bZLpME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:92:d6:88:5e:fd:bd:e7:a9:fa:52:f0:94:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: Jul 29 08:00:23 2026 GMT
            Not After : Jul 30 08:00:23 2026 GMT
        Subject: CN=34dfcef1feb3a3d5bd7c31cc87463409fb11831a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:2e:44:e4:cd:cb:84:e0:6f:0e:f5:9e:a2:
                    c2:8e:80:fa:84:4f:8d:81:d0:77:51:f7:37:85:9c:
                    99:a1:e9:fb:54:5a:f4:af:b6:53:82:e4:79:13:94:
                    c2:d9:ce:5e:a3:b5:07:4d:a4:b0:2d:79:0a:38:f3:
                    ed:36:ec:38:68:8f:d0:11:59:82:46:93:31:f7:9f:
                    d8:b8:e6:63:82:9c:72:5b:33:e1:72:d3:92:49:16:
                    38:ab:b6:45:11:07:29:df:96:77:e8:ea:c1:f1:e5:
                    d8:af:ed:05:0c:0a:33:cb:e6:e0:65:93:24:40:dd:
                    32:bf:64:64:5b:8f:4a:dd:51:d5:e7:68:3c:20:ff:
                    16:da:93:cf:5b:cb:87:55:74:3f:b1:57:1c:ae:e6:
                    c6:9a:d2:6a:7c:09:90:f1:93:6e:47:bd:ac:c4:a6:
                    42:59:31:1b:59:7e:cc:45:cc:7c:ca:7f:5d:45:1a:
                    ca:89:30:38:b6:38:11:5a:1b:5f:88:0e:0f:a0:50:
                    8c:d6:b9:7d:e5:81:f3:fa:d9:7d:60:0d:23:96:9e:
                    24:9d:2b:9b:e6:a3:44:e9:b3:10:9f:06:73:23:ee:
                    f8:33:03:05:ff:20:6d:7a:10:70:3b:0f:9c:1e:96:
                    b6:9d:28:ed:b4:d1:fd:30:b6:69:4b:4b:80:72:fd:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DF:CE:F1:FE:B3:A3:D5:BD:7C:31:CC:87:46:34:09:FB:11:83:1A
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:55:df:f3:7b:1b:d9:91:25:4b:cd:94:ef:93:78:f3:54:1a:
         f7:d0:49:56:8c:5b:88:1d:06:87:68:de:fe:f4:54:3e:2c:eb:
         e4:07:7a:13:64:34:4f:a7:0b:d7:b8:00:c7:b6:42:4c:e7:d7:
         1e:1b:dc:41:09:f3:d4:da:4b:3e:4a:32:7c:78:b6:72:77:85:
         63:a3:f7:cf:d3:09:fb:29:7d:7d:a4:df:c6:53:b0:72:d3:19:
         ea:5b:d5:89:41:0e:83:f6:0c:aa:2e:73:f1:90:45:ed:46:8b:
         62:09:fe:b7:ec:5d:b5:83:7f:0d:eb:52:1a:08:36:12:79:d3:
         be:97:ca:5e:c7:55:59:30:8d:db:fe:4b:d1:91:f5:66:3c:d7:
         c5:36:ab:36:dd:64:3c:27:75:2e:54:e6:c0:3c:dd:60:94:44:
         4f:4d:b8:bc:69:24:28:36:87:46:84:01:6b:55:71:27:7e:a9:
         51:f0:05:00:65:91:dd:b2:b1:17:b3:89:f6:a2:13:b6:3b:61:
         7b:09:04:e1:c9:a4:43:c0:f2:64:15:c2:05:55:66:a5:6c:b3:
         78:e4:b4:d3:86:21:4a:3b:52:90:c2:80:a2:3a:8a:71:9c:90:
         a5:c4:04:31:ca:30:4b:39:11:bd:a7:ec:f8:16:f2:12:98:9b:
         9c:8a:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:27:41 2026 by rpki-client