Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File:                     6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier:          iagwx3tal6g2v53Q4p/cKq2mL9QpQMa/T3me4/pccuw=
Subject key identifier:   AB:D3:FC:E6:EC:5B:0C:72:40:B2:2F:C1:65:A5:32:B7:90:57:65:52
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer:       /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial:       019F90C803292CE4471A7CE52485E7C646F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number:          19D5
Signing time:             Thu 23 Jul 2026 21:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:54 +0000
Files and hashes:         1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: CO8LpZfyu1DYmhUB/I8PGEA79/seaqfuc5Ap0dLYWW8=)
                          2: h49K85L4UEyeEFjotSv0qoO9c5E.roa (hash: Om6LbPxllmjNlvNuigobtMNJ+3VA5Oexf50hnPEjfBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:03:29:2c:e4:47:1a:7c:e5:24:85:e7:c6:46:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
        Validity
            Not Before: Jul 23 21:00:54 2026 GMT
            Not After : Jul 24 21:00:54 2026 GMT
        Subject: CN=abd3fce6ec5b0c7240b22fc165a532b790576552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:32:df:98:1e:60:83:ae:93:c9:dd:f4:b0:
                    f5:ed:da:0a:48:ad:a8:2c:c0:38:da:95:06:82:60:
                    a3:13:ce:fc:bd:3d:0d:57:fe:84:83:ad:70:3e:9c:
                    ad:f3:61:1c:01:0e:c8:5e:a4:f1:ab:65:1f:57:41:
                    28:72:0b:9f:a4:4a:80:9e:0d:3f:a6:62:25:a6:88:
                    ca:77:42:91:03:0a:c4:fd:cf:cf:1e:65:31:af:4b:
                    20:b1:e5:04:6b:7e:e8:9a:00:a5:c9:67:43:59:1d:
                    d1:a3:9c:40:f3:9b:bf:9c:71:fd:8d:43:72:36:4e:
                    3e:0f:cb:5c:7f:37:a1:fc:1a:a5:5e:6a:1c:0e:5e:
                    6f:18:10:7c:c9:c1:00:12:8b:ab:65:ab:1e:49:4e:
                    ff:74:c5:51:84:8c:b9:5f:c5:70:5a:48:4f:66:17:
                    3e:33:7b:21:8c:6f:9c:a8:84:10:b2:4e:58:ea:c3:
                    85:c2:b1:c1:4f:2a:71:ed:88:58:7d:48:e8:58:4e:
                    55:14:1a:5c:40:51:6d:d5:62:ca:67:45:cd:63:6a:
                    4f:ac:fa:78:b5:16:7d:08:57:cd:ae:dc:f9:5d:d7:
                    2f:2d:69:26:e0:c1:39:95:97:74:58:41:f6:65:b1:
                    fe:15:7a:c4:6d:a3:4a:f7:d1:11:2b:2a:fd:fe:88:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D3:FC:E6:EC:5B:0C:72:40:B2:2F:C1:65:A5:32:B7:90:57:65:52
            X509v3 Authority Key Identifier:
                keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:47:64:b6:b9:e4:c0:d1:2e:0b:dc:74:36:77:b0:8a:1a:
         4b:39:76:d8:2a:08:5e:3e:28:fa:63:4a:8f:9c:fc:08:bd:08:
         bf:76:e5:7c:a0:f4:d5:c5:f6:60:57:bb:08:cc:f1:f3:89:e3:
         5b:03:68:34:41:2b:90:9d:3f:ef:84:7c:b7:4f:85:a6:27:56:
         3b:05:c8:29:9e:a9:a3:bc:99:e2:81:e2:fc:e8:5e:46:06:4f:
         fd:d8:28:05:60:65:b9:c6:b7:3e:c0:97:fd:f6:49:26:71:17:
         a1:fc:a6:0e:df:fc:5a:ed:6b:58:51:97:1a:56:37:0c:98:13:
         fc:37:7b:95:83:b2:3e:80:3b:d3:b2:6f:f2:64:f3:65:df:a7:
         57:fe:c1:f6:85:a1:0e:86:ea:ce:71:2a:01:d6:93:31:54:32:
         9c:3b:fc:ca:5e:6b:d0:7c:26:cd:8b:c9:85:2e:7e:df:e1:71:
         4f:19:2f:a2:de:57:0a:4a:66:c3:88:bf:ce:76:20:d8:43:a2:
         97:68:4a:87:0e:b2:02:cf:80:13:e3:a2:15:e7:0a:a8:27:a2:
         52:db:5b:a4:97:2e:3a:1a:c5:69:e2:77:a5:96:65:a8:03:dc:
         f3:c5:21:20:eb:81:9f:aa:6a:82:46:88:a8:62:38:b6:f5:72:
         76:14:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:36 2026 by rpki-client