Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          16t9AYRPIJn+vXCrq9wZclL0qcqaszAGA/BtIxBcwaA=
Subject key identifier:   59:3E:D2:87:79:B0:A1:F1:04:FA:5B:EE:B0:27:E6:7D:C2:0C:FE:9B
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       019F8F7EB68FF504B778AE2A74177EEF1B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          10BB
Signing time:             Thu 23 Jul 2026 15:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:13 +0000
Files and hashes:         1: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: LmG4YP3Ru2xf+jclJ6jJHSkY6E3yHLKGjJMsulx60nY=)
                          2: rnz0AGmhyjc03zeDgVmDHn1Nzi4.roa (hash: XRH72JOXK+p4Pq8ZDCdIn3aOnofnmhSgP4XUJzURHnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:b6:8f:f5:04:b7:78:ae:2a:74:17:7e:ef:1b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: Jul 23 15:01:13 2026 GMT
            Not After : Jul 24 15:01:13 2026 GMT
        Subject: CN=593ed28779b0a1f104fa5beeb027e67dc20cfe9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:1c:7b:72:e4:57:6f:12:7b:6a:ad:29:01:
                    8c:b2:27:97:7a:19:c7:f4:a2:aa:5c:cc:9d:98:72:
                    24:d3:ac:e3:bf:4c:da:01:ee:02:13:1e:4a:d1:6a:
                    ee:ec:04:95:11:7b:4c:fc:fc:f7:5e:65:d7:2d:db:
                    72:50:32:9c:b7:b7:7a:a7:e5:93:7d:f3:a1:e7:86:
                    05:42:ca:a3:44:80:3b:fa:0e:b8:8b:d0:c4:d1:75:
                    c3:5a:2e:28:4c:c5:ae:5f:85:5d:4e:77:a6:63:a1:
                    86:18:04:3a:19:9c:d8:43:5f:4b:a3:f3:b5:86:05:
                    06:80:bf:1b:4a:0a:4b:0d:28:03:52:e8:7d:59:1a:
                    c6:eb:9a:ae:94:e0:bd:e9:b8:58:26:d3:99:07:1b:
                    a8:50:99:80:22:85:10:b2:ec:7d:c5:84:88:aa:da:
                    9e:9c:38:2f:d8:1e:2e:fb:41:2a:c7:0c:85:91:27:
                    2f:7c:2f:4a:fa:8d:54:cd:32:97:93:43:b3:f9:11:
                    d7:e6:f1:8b:8c:44:43:c4:6b:9d:ea:67:a3:c3:1f:
                    74:56:3f:bc:ff:76:8a:26:10:d5:c5:25:c4:9d:97:
                    59:31:04:d0:18:50:36:25:b7:7e:52:65:b3:ee:fe:
                    fe:a5:80:66:d0:9e:6d:a5:a8:2d:56:bb:ca:31:85:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3E:D2:87:79:B0:A1:F1:04:FA:5B:EE:B0:27:E6:7D:C2:0C:FE:9B
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:60:03:aa:f1:05:ae:3e:e0:e5:7f:88:40:b5:5f:e9:d5:c1:
         e1:43:c8:31:ac:99:27:ee:d8:5c:23:aa:97:7d:eb:aa:e4:74:
         0c:e0:96:6a:5e:8d:89:bd:c2:51:b4:69:80:77:33:8b:da:3a:
         67:f6:3d:1d:d7:f2:44:42:83:fd:02:89:3d:ec:75:d5:d8:67:
         7d:87:14:e9:bb:a8:52:42:1b:a5:2c:4b:49:8a:a9:bb:bd:a1:
         10:be:0a:25:ea:57:6e:ee:f6:41:1f:73:98:f4:f8:d5:22:f2:
         15:ee:b4:35:ac:aa:68:17:5c:aa:de:50:5b:3a:8d:2d:22:9b:
         2d:09:04:3a:a5:22:6b:2c:8b:16:26:fd:e5:c2:f0:63:1a:18:
         e2:3b:7b:37:e2:ef:ed:35:bb:1d:ef:2e:71:c3:72:8a:28:68:
         6d:aa:39:ea:c1:2c:2e:b0:07:ad:60:93:83:08:5b:56:6f:78:
         a1:29:ee:ef:fa:b9:f1:79:b3:4a:a0:a6:8a:c8:fa:b3:79:27:
         df:f0:95:97:ef:f0:38:7c:c7:58:29:33:bf:c6:45:5b:ff:cc:
         ec:13:ad:a6:58:37:13:02:4b:da:b6:b6:41:65:78:52:8c:56:
         c5:7b:4e:c0:27:02:27:2f:28:10:ee:36:5b:f8:e2:4f:ef:c0:
         3f:44:1b:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfraP9QS3eK4qdBd+7xsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzUwM2I4M2ZhMDlhNzViY2I5MTA3NTQwMGY4MzA3YTY2
N2I4ZWQwHhcNMjYwNzIzMTUwMTEzWhcNMjYwNzI0MTUwMTEzWjAzMTEwLwYDVQQD
Eyg1OTNlZDI4Nzc5YjBhMWYxMDRmYTViZWViMDI3ZTY3ZGMyMGNmZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotwce3LkV28Se2qtKQGMsieXehnH
9KKqXMydmHIk06zjv0zaAe4CEx5K0Wru7ASVEXtM/Pz3XmXXLdtyUDKct7d6p+WT
ffOh54YFQsqjRIA7+g64i9DE0XXDWi4oTMWuX4VdTnemY6GGGAQ6GZzYQ19Lo/O1
hgUGgL8bSgpLDSgDUuh9WRrG65qulOC96bhYJtOZBxuoUJmAIoUQsux9xYSIqtqe
nDgv2B4u+0EqxwyFkScvfC9K+o1UzTKXk0Oz+RHX5vGLjERDxGud6mejwx90Vj+8
/3aKJhDVxSXEnZdZMQTQGFA2Jbd+UmWz7v7+pYBm0J5tpagtVrvKMYVLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk+0od5sKHxBPpb7rAn5n3CDP6bMB8GA1UdIwQY
MBaAFOp1A7g/oJp1vLkQdUAPgwemZ7jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjIt
NjIxNDBiMjAyZWI0LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jNDIxNjAtZDZmNC00ODJjLWJmNjItNjIxNDBiMjAyZWI0
LzEvNm5VRHVELWdtblc4dVJCMVFBLURCNlpudU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2ADqvEF
rj7g5X+IQLVf6dXB4UPIMayZJ+7YXCOql33rquR0DOCWal6Nib3CUbRpgHczi9o6
Z/Y9HdfyREKD/QKJPex11dhnfYcU6buoUkIbpSxLSYqpu72hEL4KJepXbu72QR9z
mPT41SLyFe60NayqaBdcqt5QWzqNLSKbLQkEOqUiayyLFib95cLwYxoY4jt7N+Lv
7TW7He8uccNyiihobao56sEsLrAHrWCTgwhbVm94oSnu7/q58XmzSqCmisj6s3kn
3/CVl+/wOHzHWCkzv8ZFW//M7BOtplg3EwJL2ra2QWV4UoxWxXtOwCcCJy8oEO42
W/jiT+/AP0QbGA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:19 2026 by rpki-client