Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File:                     6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier:          6tb6Zu/opfLJqZdQ77yByWU2MYsnCoQkpaFGSBQ0ETU=
Subject key identifier:   6F:A4:0F:4C:84:1A:4B:F0:2E:A7:49:47:AE:FB:08:41:E9:CF:C9:92
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer:       /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial:       019F8F7E4A27F07F945E64DB1616EEB53AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number:          19C2
Signing time:             Thu 23 Jul 2026 15:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:46 +0000
Files and hashes:         1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: VsFkbRM3pSWnNAISugWfriCXuBLAnjGGnFmFGyzr/uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:4a:27:f0:7f:94:5e:64:db:16:16:ee:b5:3a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
        Validity
            Not Before: Jul 23 15:00:46 2026 GMT
            Not After : Jul 24 15:00:46 2026 GMT
        Subject: CN=6fa40f4c841a4bf02ea74947aefb0841e9cfc992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:45:ae:da:c6:c5:7b:d4:1e:9f:d3:55:18:
                    88:ca:c8:d0:d7:90:51:9f:b4:cf:eb:3c:d2:b1:6a:
                    dd:e2:dc:43:75:d1:ae:d1:2a:27:f4:01:52:03:3b:
                    4e:ba:21:71:c8:7a:b1:df:30:e7:ed:48:46:fb:6c:
                    0a:77:3f:0c:e0:db:c7:ee:8c:da:d0:20:81:f4:9f:
                    e7:ac:e7:9c:08:1a:e9:4f:da:3d:aa:20:84:51:1a:
                    1c:8c:08:c0:af:5e:5e:53:a3:04:00:6a:1b:c1:76:
                    c7:2b:e1:17:ff:13:e4:56:0c:69:7c:d7:09:00:75:
                    45:33:63:65:fd:73:a8:51:1b:ab:d5:e7:b7:29:0f:
                    96:6b:c3:7e:72:3f:c9:d3:6c:6e:f0:77:6c:02:f2:
                    5d:6c:23:37:93:de:5a:78:a7:f4:41:7b:ee:e9:cf:
                    93:e2:01:a1:90:46:ea:63:b2:7f:6c:cd:7c:37:4b:
                    e8:d9:aa:a7:fb:fe:8a:ae:3b:ba:a2:30:af:c6:7c:
                    ac:b6:61:b1:0e:01:10:dc:73:47:a9:50:af:ed:e2:
                    11:d8:e9:9e:f8:5a:21:10:38:d1:86:26:8c:2b:49:
                    5b:0d:79:48:05:3a:c1:6f:bd:0e:17:2c:69:e7:15:
                    d2:0f:46:2d:34:ee:05:d1:28:55:55:95:c4:ef:9f:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:0F:4C:84:1A:4B:F0:2E:A7:49:47:AE:FB:08:41:E9:CF:C9:92
            X509v3 Authority Key Identifier:
                keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bd:8c:7b:ce:9e:bc:ac:54:b5:4a:dc:73:81:f2:75:f6:07:
         ae:49:f9:ae:f7:79:cc:f5:b4:4d:38:a4:f6:48:8a:f6:48:47:
         e4:24:be:2c:44:c2:75:1f:7f:fd:8e:b3:30:19:0b:23:3e:b5:
         66:b5:39:9b:0b:d4:dd:aa:1f:ca:79:ed:53:36:b8:83:06:6a:
         47:5e:e7:31:0e:39:ce:31:16:1c:d7:c3:c3:72:96:91:98:61:
         67:b6:65:5c:db:d2:ad:3a:e8:5c:bb:16:3b:be:c6:0b:da:32:
         40:06:89:6d:bc:bf:f0:04:f7:9e:a2:8e:52:29:46:af:f4:f5:
         eb:06:4a:f3:cb:3d:ae:2b:ec:b8:1a:a7:79:40:2b:ef:d4:ae:
         d4:07:9f:01:f0:42:dd:20:e4:6f:2a:cb:04:91:ea:90:3e:15:
         1a:4f:a4:b0:67:44:d2:b5:20:3f:d4:df:aa:51:50:e3:84:ba:
         58:6f:47:d9:44:58:65:6d:c3:0d:cf:57:6e:7c:28:85:13:3f:
         98:e5:6c:63:35:57:d7:48:fa:18:95:dc:d1:ec:e0:83:87:d6:
         9b:58:07:e9:45:3c:06:c1:b2:15:30:85:c5:47:53:53:c3:10:
         8c:e9:5e:ad:15:7f:fc:1e:f0:f7:fa:4e:e8:4f:72:4b:bb:18:
         f4:b0:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:08 2026 by rpki-client