Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File:                     6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier:          56e8EmAf8syvH2UBsgcezKYcwlP58h572WClwUSLFCU=
Subject key identifier:   23:C5:5A:C5:59:CE:2E:37:29:1C:FC:47:C1:D6:14:81:00:10:3C:27
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer:       /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial:       019F8F104204F5C0C4C9301F222B937C023F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number:          0CF7
Signing time:             Thu 23 Jul 2026 13:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:35 +0000
Files and hashes:         1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: nV7XQyMVPzdkaqntUR56pnjlGNVTBP1nQkVsZXSEFXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:42:04:f5:c0:c4:c9:30:1f:22:2b:93:7c:02:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
        Validity
            Not Before: Jul 23 13:00:35 2026 GMT
            Not After : Jul 24 13:00:35 2026 GMT
        Subject: CN=23c55ac559ce2e37291cfc47c1d6148100103c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:7b:d2:0b:3a:ab:a4:8b:1b:86:4a:df:f4:
                    e1:fe:fc:c3:57:c1:95:3f:24:12:4e:5a:71:3d:be:
                    6d:10:6b:e6:f5:bd:2b:68:b4:7f:3d:a8:86:a9:ea:
                    94:15:69:ea:41:a7:f0:c0:e8:82:bb:b0:0f:9d:06:
                    10:f0:9a:0e:0e:b9:28:88:0b:c5:0c:89:a9:54:45:
                    da:e4:52:c0:d2:1c:8e:63:c2:7d:02:0d:1e:1c:2e:
                    b0:26:b6:bb:91:65:83:7a:d3:5c:53:f8:fe:fd:aa:
                    3a:91:95:6b:ba:44:e1:4e:40:22:b1:da:70:c1:c1:
                    80:8f:ba:4e:5a:ce:cd:60:fd:1b:55:19:70:05:b6:
                    dd:60:22:f0:c0:9c:78:de:12:15:11:d0:67:f9:80:
                    e7:42:b0:0e:07:cb:da:56:1d:29:d1:40:f5:3a:94:
                    97:e1:09:1d:fe:cd:be:ba:af:a5:1d:c9:bc:a1:4f:
                    40:5b:18:df:da:c5:df:a0:01:0f:d9:e9:6b:28:5d:
                    85:70:43:1e:4e:e2:f8:ea:63:51:51:ad:46:1f:75:
                    c8:1a:de:e6:50:8c:14:f5:11:c0:2f:04:e4:be:ae:
                    45:43:bb:e2:b5:62:27:29:21:d4:f8:90:13:17:c3:
                    3e:63:5b:5c:1f:76:0f:5c:f5:19:ae:0e:af:49:30:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:5A:C5:59:CE:2E:37:29:1C:FC:47:C1:D6:14:81:00:10:3C:27
            X509v3 Authority Key Identifier:
                keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:00:a2:14:d1:86:19:e5:6f:02:f9:72:8e:a7:68:2d:47:
         3d:27:b6:af:dd:2e:2f:80:76:64:4d:86:aa:e4:2f:64:16:e1:
         b0:40:1a:51:06:91:bc:d0:27:3f:1e:ab:b0:d6:6f:0d:16:3b:
         df:d5:cd:a1:6a:7b:4b:fb:40:e2:df:f2:db:df:37:dd:6c:76:
         76:c8:f2:f2:e8:cb:4c:6e:07:3f:fd:5c:2b:b3:8e:af:ad:fc:
         5a:05:14:8e:6e:90:ec:f3:3f:d8:82:0d:80:1d:35:5f:c1:42:
         9b:cb:53:b2:5c:fe:7f:c7:6e:10:61:c3:9f:0e:c4:00:96:60:
         86:dd:ec:16:cf:b0:10:22:0b:17:a8:7d:f2:3a:26:5c:42:7e:
         e1:2a:33:9f:02:9b:d3:af:88:77:9c:af:a1:b1:ca:cb:6b:16:
         98:8a:0b:0b:a3:87:d5:06:da:93:71:f9:ab:8b:60:de:78:c6:
         50:e1:12:40:89:3e:e8:41:9b:7d:80:2c:a4:50:31:0e:2e:ac:
         e4:da:55:e8:1c:49:3f:89:0c:98:28:86:6e:1c:0f:6c:3d:63:
         47:02:e7:bc:08:62:8d:d7:bc:00:23:43:3f:ba:9b:3d:ce:a2:
         69:0b:0f:19:9e:f7:5d:26:95:35:a7:a8:ca:77:bb:66:cc:c8:
         14:ac:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:29 2026 by rpki-client