Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
File:                     6BB04ygiyL7zp9yzEoCCW9J1Rck.mft (raw, json)
Hash identifier:          cK56DRolchrZWQKsgXLyqE/jr82DI/shwjVkz+3LQBs=
Subject key identifier:   0E:75:97:A0:DF:B0:09:06:36:79:95:2F:EE:23:38:37:58:C3:AB:67
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Certificate issuer:       /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial:       019F95493B40E5440F2F4662DEF6F70A3A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
Manifest number:          1542
Signing time:             Fri 24 Jul 2026 18:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:32 +0000
Files and hashes:         1: 6BB04ygiyL7zp9yzEoCCW9J1Rck.crl (hash: IGSuQM7uFDC9KP1+ORSPpuEBoUrNW6GJcaq/m8gl8/0=)
                          2: CjBaa9MFOHdFcsIm4Lx8f3AZ6xI.roa (hash: QjbiROKOhG1ze6MejGLSTsEjjilErNJuaQg6C4Cn2lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:3b:40:e5:44:0f:2f:46:62:de:f6:f7:0a:3a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
        Validity
            Not Before: Jul 24 18:00:32 2026 GMT
            Not After : Jul 25 18:00:32 2026 GMT
        Subject: CN=0e7597a0dfb009063679952fee23383758c3ab67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:e7:8a:c2:02:ce:5b:04:31:d3:cd:c9:6f:
                    a8:c4:be:5a:4c:7c:aa:a1:36:8b:50:97:8d:70:f4:
                    3f:ad:1a:6f:86:70:6d:8c:c7:23:f6:d8:29:7a:99:
                    47:f4:f9:de:d6:a4:9e:77:0d:9a:59:cf:09:2f:f2:
                    d2:0a:ac:5b:20:fb:94:e9:13:93:21:27:92:ac:b7:
                    94:c0:32:c7:2f:69:ef:94:b0:41:3f:e5:09:f7:8b:
                    3d:2f:7e:15:0a:3a:f6:ba:14:e5:3d:0e:e7:39:ff:
                    1b:7a:06:2b:37:9c:87:db:10:4d:b5:bd:75:bb:41:
                    13:50:10:d8:5b:d8:07:56:a4:a1:0b:75:8e:20:ee:
                    71:ac:5c:5e:75:bc:70:87:90:4f:67:76:fe:c6:dc:
                    f5:4c:90:f5:36:2b:d4:11:e2:b5:26:80:01:87:12:
                    8a:88:37:fe:2b:14:c5:1a:f7:95:fd:0c:97:46:62:
                    02:6e:e9:a6:bb:08:6f:e1:b7:b4:9d:3f:ed:43:d3:
                    37:2d:03:8d:26:05:18:9e:f8:e0:45:17:1a:0c:bc:
                    0a:e1:99:9f:59:0a:b8:48:7d:06:55:12:b4:96:c9:
                    22:2d:1e:90:92:9e:22:b2:2c:6d:2a:73:28:86:a2:
                    46:d0:d6:08:b2:99:bb:a6:29:90:96:7e:4a:58:e1:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:75:97:A0:DF:B0:09:06:36:79:95:2F:EE:23:38:37:58:C3:AB:67
            X509v3 Authority Key Identifier:
                keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:04:fc:34:4c:4d:f0:a6:47:63:93:2e:26:0c:7b:de:e9:
         fd:b2:47:75:90:2e:be:93:d6:70:0e:a3:fd:7a:d0:21:8c:ef:
         f6:95:38:bd:d7:15:44:91:ae:62:20:99:dc:16:c7:bc:94:ac:
         c3:10:e3:fe:3f:3a:c3:93:4c:65:bd:0c:c5:9e:8a:53:a0:46:
         17:d2:e2:20:a2:04:2f:91:b0:7b:18:63:9e:2c:04:d7:1b:f5:
         d2:7c:94:19:e2:c9:df:2d:f7:24:b1:c9:ee:b3:89:5b:77:2e:
         02:58:09:94:93:25:02:c7:2c:a5:6b:f4:4f:ea:47:14:e3:65:
         f8:b2:ca:6d:e3:c3:44:ec:bf:de:8b:ef:bd:58:1c:8c:84:ac:
         09:0e:4e:6d:a6:7b:2e:d8:2d:b3:7f:ef:4d:ad:29:d4:3c:2c:
         91:85:30:4c:7c:68:8b:c0:f3:e5:c3:f3:9b:12:85:2a:92:9e:
         6c:c9:03:16:89:e4:e4:b8:d3:49:da:de:6d:5b:d3:e3:9a:1c:
         5c:43:e7:ed:ce:fe:fc:6c:83:0b:1c:50:6a:bb:f3:50:72:86:
         c4:a8:28:47:b3:7a:24:58:24:b3:0e:2a:45:c4:e7:a1:ec:86:
         02:82:23:d6:3d:9f:0b:80:4b:c1:2d:88:04:07:19:22:fd:50:
         53:53:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:36 2026 by rpki-client