Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          DcHlhLnbCh3K34vys9CT1CogK1XAt6d1eImaIRxYZDo=
Subject key identifier:   FE:FF:88:57:CB:A4:B6:C7:FD:B7:3A:6E:9F:97:F7:FE:3A:32:25:94
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       019F92B645A856A57EA7931C4CD59D9229D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          1097
Signing time:             Fri 24 Jul 2026 06:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:46 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: H1BB4hoAAr0dHH0axAcVJQ3FoOTsgYYOB6NzFKl2Bcg=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:45:a8:56:a5:7e:a7:93:1c:4c:d5:9d:92:29:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Jul 24 06:00:46 2026 GMT
            Not After : Jul 25 06:00:46 2026 GMT
        Subject: CN=feff8857cba4b6c7fdb73a6e9f97f7fe3a322594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:a6:6c:34:b8:38:d7:b6:4b:66:a9:64:ab:
                    de:2d:ff:7c:2a:a3:7b:62:37:20:1e:0f:c5:8b:7a:
                    4e:b1:6b:8f:71:fc:dc:b7:09:7f:33:c3:c0:c5:80:
                    e6:66:f4:c2:5a:9b:46:d2:d3:21:3d:92:83:0b:7f:
                    9c:d6:6a:74:58:fe:d6:fb:0a:0f:e3:47:34:06:4c:
                    72:96:0e:a4:30:37:0e:4c:c1:71:74:e4:b5:bf:fa:
                    e0:8b:c6:05:0d:cd:5e:c7:c1:eb:97:cf:c7:cc:43:
                    34:3a:57:12:ac:e2:a7:5f:4f:23:99:05:9e:4a:02:
                    4a:94:a0:02:01:1e:ff:0b:02:19:8e:6d:c3:a4:ac:
                    02:3a:b1:97:bf:76:70:f4:93:5a:cb:15:6f:41:24:
                    14:59:b3:f1:42:13:be:c2:4d:bc:bb:9a:c6:fb:64:
                    27:79:dc:12:08:59:d9:44:21:76:90:8c:b3:34:98:
                    27:d3:34:d8:b2:55:11:ed:71:b5:d0:6a:e0:5a:f1:
                    74:bc:ad:83:0c:00:31:49:e1:c6:0e:86:d4:d8:63:
                    91:c9:04:37:10:08:81:fa:9d:53:08:97:99:8c:1c:
                    5b:7d:c2:07:cd:ee:fd:be:46:c9:c2:0e:66:85:59:
                    49:ba:58:9e:23:cb:3e:0a:33:e3:dc:7c:6f:aa:4d:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:88:57:CB:A4:B6:C7:FD:B7:3A:6E:9F:97:F7:FE:3A:32:25:94
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c1:a7:f0:03:95:01:62:01:c1:f4:19:0a:b2:b0:d8:be:aa:
         b4:b2:90:66:37:e9:aa:6e:b8:da:d3:40:ee:03:2c:ee:59:b8:
         dc:d8:25:cc:72:92:25:5c:69:e0:b7:60:8c:89:9f:7f:c9:e2:
         bd:64:46:21:7d:40:bd:f2:f7:21:5b:75:e5:99:20:de:5f:74:
         02:f8:b0:1e:0d:1d:31:d3:df:a4:d5:e6:66:e9:bd:32:c7:46:
         0e:73:b8:51:17:89:ca:f4:a9:c8:f7:ab:e0:d8:5a:94:13:4b:
         dc:91:ea:36:8c:6f:29:8e:04:a3:49:36:f9:16:de:34:65:b9:
         8a:55:ea:e7:3b:82:ef:33:2c:b5:5c:45:97:ac:6c:ef:89:f4:
         42:1e:81:d5:a0:b3:2e:9a:dc:db:97:70:76:d4:49:b9:df:bb:
         65:99:10:26:1d:f8:1f:62:6d:58:d3:2f:c3:04:32:d5:6a:e1:
         3f:72:03:54:98:69:b0:62:d1:df:c2:fc:0b:d6:c3:9b:0d:98:
         87:34:03:dd:c5:3a:26:ce:98:e7:d6:74:29:88:09:d6:79:78:
         e8:47:3b:6f:5a:95:ed:c1:49:4f:aa:00:25:a0:74:1e:3e:ae:
         8f:2f:72:d6:52:40:6d:10:80:67:46:31:67:b9:7b:58:27:44:
         63:65:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:36 2026 by rpki-client