Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File:                     6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier:          L081PU77vPPMMHt179T0J7AHgFNZw3pirw9MuYSK2SE=
Subject key identifier:   B5:C8:24:D5:98:ED:BA:D6:30:6E:3E:13:25:9F:0E:72:ED:4B:B2:9F
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer:       /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial:       019F916CD86E7E8573C15F64439CC2DCD70E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 00:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:57 +0000
Files and hashes:         1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: luXDXVE97GBiRYjppQpk6cYSMT07pRgCzPi9gWprYfc=)
                          2: 7eoO73qePtRFhoL5aoJ-lw5N7YQ.roa (hash: N75hWXU4tOfgUVgJErnnaShCfMougCipyHaXnV/7ZoQ=)
                          3: ojQoLkOKYxW9nl-zMiY8owgWzH8.roa (hash: pBaal272/3ElS+FK2cqrYkE2HZTuwNTmpIvmWFEPo9E=)
                          4: wW5JJp_Tw5DERjslA8f06nsNm_4.roa (hash: soIoaQ26jxMV+jXruEWHSU8upxFyddMWkhBFffhBkYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:d8:6e:7e:85:73:c1:5f:64:43:9c:c2:dc:d7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
        Validity
            Not Before: Jul 24 00:00:57 2026 GMT
            Not After : Jul 25 00:00:57 2026 GMT
        Subject: CN=b5c824d598edbad6306e3e13259f0e72ed4bb29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:ca:e2:8b:35:63:b5:ce:75:ad:2c:3d:ca:
                    25:b0:3e:a5:1a:65:ce:93:25:f6:90:dd:2f:72:d0:
                    e8:6c:7a:ca:c3:08:db:eb:d7:f1:11:17:e5:da:70:
                    f8:bf:54:ed:1e:a6:ed:78:7b:e8:da:58:d9:70:f1:
                    06:c1:c8:88:d3:fc:72:52:56:54:66:83:da:95:fa:
                    0b:29:05:3a:37:13:51:3c:94:94:85:df:4e:6f:ff:
                    f3:0a:07:fb:b7:18:44:a3:3d:1f:14:3a:a8:71:35:
                    bd:d4:dd:bd:c0:e2:c7:c0:5d:41:5d:75:a1:a5:91:
                    4d:0e:f9:8e:39:4f:34:f2:d9:fe:8a:c3:5b:f8:83:
                    55:76:44:ef:12:92:a7:e5:59:11:d4:3d:ba:49:dd:
                    bf:cd:14:0f:f6:64:ac:46:11:1c:b7:b8:b4:06:36:
                    cc:0d:43:7b:ad:33:9e:29:9f:df:fe:70:72:52:e6:
                    cb:d6:e3:38:5c:b5:1c:5c:e9:ae:36:6d:04:a7:e6:
                    b8:88:f5:cf:5b:c5:6c:1e:93:ae:85:4a:a4:5f:3c:
                    d4:fe:35:96:f1:ca:6b:a2:51:e8:ba:9c:f7:20:5a:
                    41:8b:aa:bf:72:e9:4c:de:86:08:cf:2e:ac:18:5c:
                    d1:62:e4:54:46:e2:89:db:4f:99:5c:8d:1a:52:45:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:24:D5:98:ED:BA:D6:30:6E:3E:13:25:9F:0E:72:ED:4B:B2:9F
            X509v3 Authority Key Identifier:
                keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:11:16:61:cd:ba:39:06:fe:fb:34:2e:9c:5b:27:70:b3:
         37:01:b3:c7:c2:17:05:a4:50:de:cd:e8:6d:f4:6b:02:d2:65:
         a4:a8:66:29:3e:86:63:ef:40:be:63:a9:87:fa:50:a0:7b:6f:
         8e:98:73:34:44:57:81:ae:bf:ac:66:db:29:66:49:bf:46:36:
         e6:a1:d3:8b:8a:c1:8f:32:17:9f:00:9d:c5:7d:66:0b:d4:2c:
         74:2a:25:67:7f:f0:fa:d5:7f:14:68:d0:3b:5b:a7:03:9d:c0:
         e4:a5:1f:08:9b:77:72:39:43:a1:3f:f1:40:30:8d:93:14:76:
         c3:c7:3e:95:a1:fe:8b:35:ce:b0:f9:29:d2:92:5b:c9:8b:c8:
         d6:f7:a4:74:73:b4:8f:1f:82:ec:6a:a4:54:bb:83:f7:eb:20:
         b2:7d:7d:f1:2f:50:b5:8a:89:f8:f2:ee:08:61:42:cf:a2:00:
         10:e3:03:0e:b9:cc:a9:90:74:8a:dc:0f:19:1b:d6:d7:ff:8e:
         aa:7f:0e:0f:b7:37:b9:31:eb:ad:c6:bb:27:d2:b9:c8:70:bc:
         72:7f:a5:5d:13:3b:27:60:44:a3:1c:15:b6:0b:19:73:99:fb:
         26:ee:b7:cf:cb:de:52:1e:83:3f:e4:9e:2a:3e:20:b1:3c:b8:
         fb:73:b2:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbNhufoVzwV9kQ5zC3NcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZjIzOWE3MDA0MzczNDE3MmQyNjM3OGJmMjEwNmFlNzI1
NTIxODcwHhcNMjYwNzI0MDAwMDU3WhcNMjYwNzI1MDAwMDU3WjAzMTEwLwYDVQQD
EyhiNWM4MjRkNTk4ZWRiYWQ2MzA2ZTNlMTMyNTlmMGU3MmVkNGJiMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw37K4os1Y7XOda0sPcolsD6lGmXO
kyX2kN0vctDobHrKwwjb69fxERfl2nD4v1TtHqbteHvo2ljZcPEGwciI0/xyUlZU
ZoPalfoLKQU6NxNRPJSUhd9Ob//zCgf7txhEoz0fFDqocTW91N29wOLHwF1BXXWh
pZFNDvmOOU808tn+isNb+INVdkTvEpKn5VkR1D26Sd2/zRQP9mSsRhEct7i0BjbM
DUN7rTOeKZ/f/nByUubL1uM4XLUcXOmuNm0Ep+a4iPXPW8VsHpOuhUqkXzzU/jWW
8cprolHoupz3IFpBi6q/culM3oYIzy6sGFzRYuRURuKJ20+ZXI0aUkUlzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXIJNWY7brWMG4+EyWfDnLtS7KfMB8GA1UdIwQY
MBaAFOjyOacAQ3NBctJjeL8hBq5yVSGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQt
NjY5YmQxMTNhMTc4LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy80ZTkwMmEtMjk5Zi00ZGE3LTlhNmQtNjY5YmQxMTNhMTc4
LzEvNlBJNXB3QkRjMEZ5MG1ONHZ5RUdybkpWSVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3YRFmHN
ujkG/vs0LpxbJ3CzNwGzx8IXBaRQ3s3obfRrAtJlpKhmKT6GY+9AvmOph/pQoHtv
jphzNERXga6/rGbbKWZJv0Y25qHTi4rBjzIXnwCdxX1mC9QsdColZ3/w+tV/FGjQ
O1unA53A5KUfCJt3cjlDoT/xQDCNkxR2w8c+laH+izXOsPkp0pJbyYvI1vekdHO0
jx+C7GqkVLuD9+sgsn198S9QtYqJ+PLuCGFCz6IAEOMDDrnMqZB0itwPGRvW1/+O
qn8OD7c3uTHrrca7J9K5yHC8cn+lXRM7J2BEoxwVtgsZc5n7Ju63z8veUh6DP+Se
Kj4gsTy4+3Oy3w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:32 2026 by rpki-client