Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File:                     I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier:          JU804hYELwcGOW0oKrVWbjceh0AV3PKq7SxrbLZrnxQ=
Subject key identifier:   43:6D:66:00:EC:A6:5C:FC:35:F0:8A:4A:D1:A7:BE:46:C2:58:32:43
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer:       /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial:       019F935AD04CD81BFEB0B97183AD8F654C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number:          06C1
Signing time:             Fri 24 Jul 2026 09:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:30 +0000
Files and hashes:         1: DLPawj2OgKUwkgMYVqxK640ZM5M.roa (hash: j4U5ZtGc0iAMwMjKy2gODe5wP1RecXvOyD9/RnVr/+s=)
                          2: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: nOX+AXkLgC6EC/G6G/Euv9yrkREdWtgYk3xLF0v4Ct0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:d0:4c:d8:1b:fe:b0:b9:71:83:ad:8f:65:4c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
        Validity
            Not Before: Jul 24 09:00:30 2026 GMT
            Not After : Jul 25 09:00:30 2026 GMT
        Subject: CN=436d6600eca65cfc35f08a4ad1a7be46c2583243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:fe:51:17:27:32:95:ed:c0:f2:11:87:a4:
                    17:15:3f:88:1b:c8:8e:39:43:be:9a:dc:9a:72:b4:
                    ce:17:2f:53:af:02:a9:09:c9:37:be:61:44:ef:84:
                    9e:60:ce:61:cc:ce:e3:02:fb:84:aa:bc:b7:f7:3b:
                    47:61:be:63:68:b5:bf:7d:15:33:5f:85:d8:b6:5a:
                    6a:e8:c7:66:1f:dd:7b:98:14:09:e3:0c:01:26:ff:
                    cf:5c:ba:b3:16:1f:d1:1f:0c:39:2b:c1:bb:dd:2d:
                    31:f4:79:42:e8:72:2f:c2:94:81:6d:be:63:10:42:
                    c4:d1:35:f5:3f:be:3f:9f:ea:50:98:0b:15:8c:a2:
                    9c:4b:58:2d:5e:84:dd:76:6b:cc:c6:55:70:17:15:
                    0f:6b:2d:ac:58:df:17:b3:8a:4a:42:89:45:a9:22:
                    90:bd:a2:8f:cd:8b:1c:5d:35:61:23:aa:8f:21:a0:
                    a5:51:a9:cb:87:64:7f:9c:69:c5:43:3c:78:2c:b0:
                    3a:3b:ad:0a:e0:9a:a5:00:ed:d8:1b:1e:3a:4a:7e:
                    b4:05:40:ec:41:3c:82:a7:8e:45:ca:59:91:27:9d:
                    a9:93:1b:78:56:34:83:dd:f5:6f:da:86:09:7f:4d:
                    96:43:49:e1:89:3e:e6:72:8c:3b:db:f5:09:27:26:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:66:00:EC:A6:5C:FC:35:F0:8A:4A:D1:A7:BE:46:C2:58:32:43
            X509v3 Authority Key Identifier:
                keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:34:9a:81:bb:62:a8:29:fb:3e:7c:f7:3f:b6:69:35:c3:36:
         98:d6:34:ba:11:67:7d:8f:08:eb:30:75:f7:81:28:58:00:19:
         80:37:78:1f:db:ed:60:67:54:0f:6e:8c:69:6c:51:b1:fd:86:
         23:c7:33:1f:50:fe:80:fa:4a:62:0e:c7:54:ff:af:61:45:41:
         44:57:06:f2:e4:af:e4:19:6c:a5:64:b7:af:d0:27:d3:ea:ec:
         76:ca:a0:2b:c3:e5:95:e6:9d:92:98:ea:86:e8:f3:11:c5:ab:
         b0:46:3e:2f:e5:aa:7a:c9:4e:4c:6c:74:10:57:ad:f9:22:26:
         88:35:1a:42:55:dd:ba:b9:92:a6:aa:73:f1:5b:d6:a6:37:2a:
         4f:4a:03:1b:ec:a4:fa:45:7d:10:f0:26:99:a5:c4:26:49:33:
         dd:d5:72:df:da:f6:fe:22:bc:4c:8d:53:21:f3:91:82:9a:a6:
         22:de:f4:12:72:c2:ff:03:c7:d1:1d:19:86:a5:ea:52:7a:c4:
         d4:49:43:59:ea:8f:10:a9:f4:59:47:8c:6f:96:62:9d:8b:98:
         84:8b:35:bd:b3:66:3e:90:6f:0a:5a:bd:64:52:d4:eb:39:29:
         da:e5:98:13:55:e8:32:32:d0:45:ad:5f:a1:7c:29:71:c2:c1:
         2b:c1:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:48 2026 by rpki-client