Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
File:                     6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft (raw, json)
Hash identifier:          oRswPoTWfSwYFZcRMQ3pxUQmD1iom3jl3VlyTMYhau0=
Subject key identifier:   FE:DA:A7:1D:97:97:14:AF:BC:BF:07:CC:96:66:88:2D:73:96:92:79
Authority key identifier: EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D
Certificate issuer:       /CN=ea2f671f10834dae48ea8d987342c375cab3316d
Certificate serial:       019F8F4789A2435DD9F60CC123EEF5D2ADC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
Manifest number:          05BF
Signing time:             Thu 23 Jul 2026 14:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:57 +0000
Files and hashes:         1: 1-BDF7EdL9hLHZ4qCs6jAWm3n8G8.roa (hash: 3HI3L0u1gTr2C+yxlBAEamd5L6jvpyumi2g5XXRKy/k=)
                          2: 6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl (hash: gYW3sbxe3GAtKSXAmkWZbhHpYFkY+akFsOGZT5sIWLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:89:a2:43:5d:d9:f6:0c:c1:23:ee:f5:d2:ad:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2f671f10834dae48ea8d987342c375cab3316d
        Validity
            Not Before: Jul 23 14:00:57 2026 GMT
            Not After : Jul 24 14:00:57 2026 GMT
        Subject: CN=fedaa71d979714afbcbf07cc9666882d73969279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:3f:8a:44:2d:b6:c7:0e:33:f8:6e:68:15:
                    49:f4:ad:a4:4d:23:12:88:96:19:89:61:06:01:3e:
                    a4:6a:15:fa:44:57:f4:ea:0c:3f:b9:09:b8:7f:33:
                    47:0a:86:f3:c6:88:dd:b1:80:51:d0:79:9e:c9:bf:
                    f6:0f:cd:f9:53:59:4b:5d:a1:25:62:e2:4d:96:90:
                    64:d7:ec:69:92:4a:d5:68:69:2e:23:fa:83:3a:01:
                    09:5e:9a:ad:0b:9e:34:84:f6:6c:ad:a5:07:19:d0:
                    3a:fd:19:a2:54:2f:da:51:b9:b5:f2:0b:2f:2e:5c:
                    9a:8a:4d:09:bc:0f:46:f7:77:a9:80:0c:3c:f4:41:
                    f7:27:62:8a:6d:d3:e3:03:12:a9:9e:ab:de:c3:03:
                    c0:86:90:70:a1:6b:bf:2d:2e:b7:d7:ad:3c:b4:52:
                    c7:b1:cb:b1:91:a7:de:22:13:a9:95:a9:83:be:94:
                    a8:79:fc:96:f7:61:4c:4a:6c:3f:a3:c6:f2:23:9a:
                    ec:f0:77:12:14:1c:e1:aa:a2:f5:1f:b6:03:b5:3f:
                    aa:36:bc:7b:44:6c:3e:c1:a8:6e:f1:bc:ed:8b:cd:
                    95:85:e1:19:63:4a:7b:41:f7:35:84:9e:4c:c6:8d:
                    e4:c0:94:79:a2:30:54:d9:ae:3f:53:95:b5:7b:a0:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:A7:1D:97:97:14:AF:BC:BF:07:CC:96:66:88:2D:73:96:92:79
            X509v3 Authority Key Identifier:
                keyid:EA:2F:67:1F:10:83:4D:AE:48:EA:8D:98:73:42:C3:75:CA:B3:31:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/10ba73-aebc-4771-a3ac-1c420f05579f/1/6i9nHxCDTa5I6o2Yc0LDdcqzMW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:40:22:93:b7:d7:1a:c1:4d:8e:6e:55:23:4f:2c:99:85:ed:
         a7:b4:97:f8:35:fb:11:eb:cd:f0:be:8b:dc:27:e8:23:39:80:
         bc:8e:2a:46:49:66:f1:71:0e:df:f1:cc:fa:7a:3e:d2:ef:79:
         54:66:78:7e:5d:4f:14:4f:93:45:18:1a:86:d6:dd:f3:ff:e8:
         2b:e0:5c:8d:74:f8:e1:44:0a:bb:6c:d2:ab:e6:55:82:95:a8:
         3e:46:9c:1c:58:06:c4:e3:f0:b7:58:50:7a:d8:74:21:8c:c2:
         db:1e:f7:8d:6e:16:55:d9:aa:c5:a6:50:f9:ff:d7:33:a2:33:
         d0:c5:cc:6e:23:d8:cd:85:e3:2b:c7:98:aa:c1:06:89:0c:e0:
         1c:0c:2a:fd:ff:7d:33:20:95:c6:7e:cf:64:97:d9:7a:5a:73:
         d6:13:6b:92:d7:e4:94:c8:42:69:41:d1:75:db:44:e5:8f:83:
         73:29:68:6e:da:af:11:db:82:be:d1:36:c1:2d:d8:1e:2b:37:
         82:cf:17:8e:81:34:a9:93:d6:69:23:fe:8f:ed:d4:dc:94:c7:
         ea:1a:e2:64:0b:a7:42:d5:80:eb:14:31:2e:f8:d3:9c:6f:98:
         b8:86:49:36:99:61:49:8d:06:99:10:e4:cb:51:9f:49:66:80:
         ef:49:b3:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR4miQ13Z9gzBI+710q3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmY2NzFmMTA4MzRkYWU0OGVhOGQ5ODczNDJjMzc1Y2Fi
MzMxNmQwHhcNMjYwNzIzMTQwMDU3WhcNMjYwNzI0MTQwMDU3WjAzMTEwLwYDVQQD
EyhmZWRhYTcxZDk3OTcxNGFmYmNiZjA3Y2M5NjY2ODgyZDczOTY5Mjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEU/ikQttscOM/huaBVJ9K2kTSMS
iJYZiWEGAT6kahX6RFf06gw/uQm4fzNHCobzxojdsYBR0Hmeyb/2D835U1lLXaEl
YuJNlpBk1+xpkkrVaGkuI/qDOgEJXpqtC540hPZsraUHGdA6/RmiVC/aUbm18gsv
Llyaik0JvA9G93epgAw89EH3J2KKbdPjAxKpnqvewwPAhpBwoWu/LS631608tFLH
scuxkafeIhOplamDvpSoefyW92FMSmw/o8byI5rs8HcSFBzhqqL1H7YDtT+qNrx7
RGw+wahu8bzti82VheEZY0p7Qfc1hJ5Mxo3kwJR5ojBU2a4/U5W1e6DpNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7apx2XlxSvvL8HzJZmiC1zlpJ5MB8GA1UdIwQY
MBaAFOovZx8Qg02uSOqNmHNCw3XKszFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmk5bkh4Q0RUYTVJNm8yWWMwTERkY3F6TVcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMGJhNzMtYWViYy00NzcxLWEzYWMt
MWM0MjBmMDU1NzlmLzEvNmk5bkh4Q0RUYTVJNm8yWWMwTERkY3F6TVcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xMGJhNzMtYWViYy00NzcxLWEzYWMtMWM0MjBmMDU1Nzlm
LzEvNmk5bkh4Q0RUYTVJNm8yWWMwTERkY3F6TVcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUAik7fX
GsFNjm5VI08smYXtp7SX+DX7EevN8L6L3CfoIzmAvI4qRklm8XEO3/HM+no+0u95
VGZ4fl1PFE+TRRgahtbd8//oK+BcjXT44UQKu2zSq+ZVgpWoPkacHFgGxOPwt1hQ
eth0IYzC2x73jW4WVdmqxaZQ+f/XM6Iz0MXMbiPYzYXjK8eYqsEGiQzgHAwq/f99
MyCVxn7PZJfZelpz1hNrktfklMhCaUHRddtE5Y+DcylobtqvEduCvtE2wS3YHis3
gs8XjoE0qZPWaSP+j+3U3JTH6hriZAunQtWA6xQxLvjTnG+YuIZJNplhSY0GmRDk
y1GfSWaA70mzWA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:20 2026 by rpki-client