Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File:                     6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier:          9KVd/MEY37TB2h6vPCwrdwecBVrzC+Uzb5CZyxJqSU4=
Subject key identifier:   B5:6B:75:2E:F8:07:18:89:26:C0:81:7F:E1:C8:27:D8:60:5E:32:F5
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer:       /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial:       019F8FEC6C87118728592358260D9996030D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 17:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:03 +0000
Files and hashes:         1: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (hash: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs=)
                          2: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: EzaS/QBEMeDUSz/MsQxuUH7NLTniRjNuiSTzc3tLkCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:6c:87:11:87:28:59:23:58:26:0d:99:96:03:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
        Validity
            Not Before: Jul 23 17:01:03 2026 GMT
            Not After : Jul 24 17:01:03 2026 GMT
        Subject: CN=b56b752ef807188926c0817fe1c827d8605e32f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:27:c3:50:b7:6d:f6:16:f7:0f:29:53:c4:
                    a5:e5:b3:56:77:40:c5:7a:19:d4:18:5a:c9:c8:df:
                    dd:31:9d:ab:84:fd:db:10:57:be:70:92:7a:9b:4a:
                    14:62:3c:fe:ea:70:95:03:0b:fc:c8:2d:c7:e7:c8:
                    b9:4e:71:fd:e1:8c:da:b2:c2:3f:11:90:a2:ab:4c:
                    4c:13:17:cb:30:af:36:9a:1e:05:d3:82:62:0d:11:
                    af:3a:23:53:43:c1:09:62:c8:60:f4:02:f8:3d:ec:
                    3e:1a:ed:ca:3a:a0:fc:78:8c:77:15:47:b4:3b:a9:
                    3c:00:11:1a:42:2d:70:85:5f:45:f0:78:42:29:f7:
                    4c:ee:ee:5d:ac:cf:97:c1:ae:9b:32:d9:d0:0f:78:
                    1a:1d:3a:94:8c:e0:21:1e:0a:ad:83:8c:43:2c:86:
                    34:4f:e0:fc:ac:22:67:6d:ea:c2:6e:49:f4:6e:aa:
                    ac:f2:e2:c9:c4:32:fb:ef:57:79:dc:16:3e:df:b0:
                    46:69:49:ef:eb:3f:72:31:17:2b:58:87:17:b5:02:
                    3e:a4:16:e6:0a:13:f4:2e:5f:7c:16:61:89:a7:81:
                    85:0e:ad:20:cc:ac:ce:57:3d:ab:57:0b:bd:bc:8b:
                    77:1f:1a:86:89:78:94:27:15:39:dd:90:83:42:e5:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:75:2E:F8:07:18:89:26:C0:81:7F:E1:C8:27:D8:60:5E:32:F5
            X509v3 Authority Key Identifier:
                keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:06:92:54:77:18:3d:4a:b7:3b:75:00:40:74:38:0e:c6:73:
         a5:7b:7c:d6:55:2e:87:9a:96:87:e2:bb:2c:4b:19:c9:25:59:
         56:e8:b4:57:93:78:fc:b9:b2:b4:aa:19:ce:3b:1c:8e:65:2b:
         10:fe:7a:ce:1d:a9:05:87:a8:a8:4b:fc:98:cc:cb:c1:80:48:
         f3:9a:0e:34:2e:e4:17:d9:74:8f:7e:d8:02:a7:f3:1e:2c:d7:
         fb:e3:5d:2b:57:5a:55:6d:3f:c3:2d:74:e2:54:ed:57:d3:e7:
         bb:38:b3:f3:e1:94:42:fb:d4:53:ae:6d:6c:f7:60:0c:64:8c:
         74:52:6f:ab:bf:c8:14:3c:34:86:33:a4:a9:41:9d:20:28:4f:
         1c:6c:71:b0:09:44:5f:c5:1a:c7:c1:5f:5b:8e:f5:3a:a7:8c:
         c8:6b:58:0e:5d:98:1f:bc:74:2c:03:b8:21:8c:64:92:c6:74:
         0b:f7:90:13:0f:4f:02:52:67:e7:ee:34:8f:2b:2f:63:24:17:
         fd:eb:68:0f:8e:49:aa:08:39:6b:14:ca:56:a6:fb:b4:b2:e3:
         2b:dd:3e:0f:29:18:3d:e3:84:ac:df:71:e2:b8:e2:64:25:38:
         37:6e:4d:45:5e:bf:e5:1a:24:4e:b0:c5:7a:15:2d:38:8a:90:
         2e:33:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:25 2026 by rpki-client