Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          FdlQLtFyDueQbzushW6QC3U3K0bucY2CIcQm6hM63+U=
Subject key identifier:   56:55:E2:B6:CF:D9:D5:3D:4C:CE:FD:5F:84:30:05:EC:DF:73:46:B7
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       019F8FB57763695238320BBC3DCE30DA5875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          19E9
Signing time:             Thu 23 Jul 2026 16:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:02 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: pWgF3B7kLtqGJYlm5WcqTYn1b0eQV7hy4xY52ZZUC0E=)
                          2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
                          3: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
                          4: My2S5v6l75VknZ7EL2SiBdNBLt4.roa (hash: wEWt/qGUMsqIgdXHGGUBkhiVR/ctPqLfFTDFv5pXXM0=)
                          5: Q185qBCTAslf97Rog3SUyG95EBo.roa (hash: +jTEwCGDvqQHKcWHrPwBJB6gQVTArNQuwOaaAn3R7Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:77:63:69:52:38:32:0b:bc:3d:ce:30:da:58:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Jul 23 16:01:02 2026 GMT
            Not After : Jul 24 16:01:02 2026 GMT
        Subject: CN=5655e2b6cfd9d53d4ccefd5f843005ecdf7346b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:b1:56:f7:9b:da:b0:05:a7:46:c1:c2:14:
                    2f:d8:d7:b5:84:82:1e:18:f5:ab:01:ba:dd:25:bc:
                    40:09:b4:14:88:fa:a2:ed:2a:23:c2:6c:07:31:6b:
                    80:7e:e0:6a:c4:c2:fd:5a:b6:cd:99:f1:4d:00:24:
                    71:26:7d:fb:62:fe:57:e9:96:7f:6e:97:86:d8:67:
                    00:4b:4b:2b:0a:ce:a0:b2:9d:7e:e9:29:7b:be:0c:
                    f5:3c:a6:82:0d:eb:b7:b1:d0:af:82:b7:cd:ad:f1:
                    5d:55:5f:cb:df:94:24:b2:3e:f1:ed:a3:03:e1:69:
                    35:ad:29:96:64:90:08:fe:28:dd:47:30:a6:76:af:
                    37:a3:85:69:66:d5:13:58:b6:f6:a1:1b:6a:07:12:
                    9b:de:28:2a:a1:cb:08:58:67:44:3e:79:9d:3f:2f:
                    c9:71:aa:7c:02:13:cb:e4:10:47:be:fc:1a:f2:2e:
                    99:db:99:75:fb:a1:fb:b9:32:fe:f0:56:17:24:dd:
                    19:60:2c:48:7d:67:bf:c9:ce:96:6b:ed:5b:19:60:
                    97:cf:81:6a:7c:5d:45:b7:f5:be:88:97:e1:0b:4b:
                    0b:1e:99:20:87:f5:a2:cc:09:c2:17:ce:10:bd:d1:
                    22:52:7d:01:41:10:ba:18:4c:4a:06:2b:50:8d:cc:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:E2:B6:CF:D9:D5:3D:4C:CE:FD:5F:84:30:05:EC:DF:73:46:B7
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:73:ad:77:ac:4f:d7:fc:5b:70:72:cb:82:72:a6:e4:3c:57:
         2b:22:64:a7:ab:1d:5f:51:29:56:bb:e9:0f:46:2c:e0:30:2f:
         fa:f3:a5:8b:08:15:ea:34:76:e1:53:b1:c4:bb:c6:e9:8f:2f:
         56:6a:dd:4c:1e:4e:e7:64:c1:0f:b5:a6:d3:22:c1:a1:de:e6:
         61:7f:e3:5e:80:80:c1:de:6a:bc:90:49:e2:20:70:c3:01:04:
         1d:a5:b7:f5:37:86:86:ed:9f:b6:27:4b:ff:e5:09:81:85:44:
         5f:09:4e:a2:a1:c1:66:43:1c:08:18:51:b9:63:68:ff:9d:58:
         90:63:ac:5f:38:ee:84:6c:44:7b:82:09:c0:70:59:9c:3e:78:
         d0:39:6e:97:53:d5:c8:22:fb:ed:4b:64:87:c7:3d:fc:59:3c:
         5d:63:49:83:7f:68:97:d2:47:52:f1:98:f5:73:f2:84:6b:a6:
         de:d0:00:f3:69:17:4f:87:ee:16:8d:0e:57:e5:a0:d6:00:f6:
         03:50:cd:46:4c:10:47:a1:3f:d5:cd:7d:e8:9c:45:ba:f9:d7:
         a8:63:57:f1:f7:1e:e9:e0:99:d7:f6:87:0a:ea:de:39:b9:34:
         57:f0:72:10:9b:d1:68:f8:ca:07:c4:f2:58:2e:29:d9:fa:be:
         34:61:1e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtXdjaVI4Mgu8Pc4w2lh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1
YWI3Y2YwHhcNMjYwNzIzMTYwMTAyWhcNMjYwNzI0MTYwMTAyWjAzMTEwLwYDVQQD
Eyg1NjU1ZTJiNmNmZDlkNTNkNGNjZWZkNWY4NDMwMDVlY2RmNzM0NmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsyxVveb2rAFp0bBwhQv2Ne1hIIe
GPWrAbrdJbxACbQUiPqi7SojwmwHMWuAfuBqxML9WrbNmfFNACRxJn37Yv5X6ZZ/
bpeG2GcAS0srCs6gsp1+6Sl7vgz1PKaCDeu3sdCvgrfNrfFdVV/L35Qksj7x7aMD
4Wk1rSmWZJAI/ijdRzCmdq83o4VpZtUTWLb2oRtqBxKb3igqocsIWGdEPnmdPy/J
cap8AhPL5BBHvvwa8i6Z25l1+6H7uTL+8FYXJN0ZYCxIfWe/yc6Wa+1bGWCXz4Fq
fF1Ft/W+iJfhC0sLHpkgh/WizAnCF84QvdEiUn0BQRC6GExKBitQjcw3pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZV4rbP2dU9TM79X4QwBezfc0a3MB8GA1UdIwQY
MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt
MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5
LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXOtd6xP
1/xbcHLLgnKm5DxXKyJkp6sdX1EpVrvpD0Ys4DAv+vOliwgV6jR24VOxxLvG6Y8v
VmrdTB5O52TBD7Wm0yLBod7mYX/jXoCAwd5qvJBJ4iBwwwEEHaW39TeGhu2ftidL
/+UJgYVEXwlOoqHBZkMcCBhRuWNo/51YkGOsXzjuhGxEe4IJwHBZnD540Dlul1PV
yCL77Utkh8c9/Fk8XWNJg39ol9JHUvGY9XPyhGum3tAA82kXT4fuFo0OV+Wg1gD2
A1DNRkwQR6E/1c196JxFuvnXqGNX8fce6eCZ1/aHCureObk0V/ByEJvRaPjKB8Ty
WC4p2fq+NGEeyQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:55 2026 by rpki-client