Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File:                     1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier:          597aNsAOGu3DEABi6WmXDmCzX6bHmSdOStDDJEBtHIE=
Subject key identifier:   62:D9:6E:1D:9D:51:2B:D9:AA:80:86:60:06:5D:00:4E:A5:23:C0:12
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer:       /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial:       019F8FEBB4428B0163143F9C1D0D209D22C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 17:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:16 +0000
Files and hashes:         1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: Bg3w3kW53I/b24orQI6L9CPtTtWRA8HbOTCXnAeXseE=)
                          2: UYxV8QSgYZ229nA1vzJ1qGvwQXc.roa (hash: LcGONu3wOoaVH6EWybaw4+qxO61czSJNIoY1SzqQdQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:b4:42:8b:01:63:14:3f:9c:1d:0d:20:9d:22:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
        Validity
            Not Before: Jul 23 17:00:16 2026 GMT
            Not After : Jul 24 17:00:16 2026 GMT
        Subject: CN=62d96e1d9d512bd9aa808660065d004ea523c012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:b7:2f:73:08:60:26:b2:8c:3c:17:10:43:
                    70:23:e9:c1:a5:9d:71:6a:81:31:22:f4:c1:4d:4c:
                    04:76:ae:b9:10:a5:0d:42:4d:1e:50:1e:69:50:36:
                    26:fe:28:d4:28:b3:fc:bb:22:5f:c5:58:01:a1:cb:
                    76:28:d8:d9:77:fb:c6:3b:8b:5f:63:ee:d8:4e:38:
                    e9:0a:2a:c2:3b:db:5a:82:c1:b1:8f:11:45:f2:5c:
                    4c:b2:d8:56:bc:19:0a:e1:16:22:67:6f:d1:f2:95:
                    ca:9c:83:11:9a:e2:47:2d:e4:f3:e4:a2:95:08:93:
                    96:af:7d:71:59:a4:8c:99:c4:e8:fc:11:b2:f2:5f:
                    b7:a8:ff:7a:eb:4c:3e:95:fa:23:f1:99:4b:e5:05:
                    d9:16:a1:72:83:5a:01:30:72:fd:7d:0d:b7:78:5d:
                    6e:96:51:22:91:aa:76:75:3e:fd:6c:45:7c:f3:a1:
                    db:6e:a2:96:7f:f1:d7:f9:1a:ce:97:20:24:6e:3d:
                    f7:81:bc:65:06:b0:d5:94:f1:25:7b:b7:de:82:cb:
                    a6:62:36:94:4e:a3:e8:be:85:a6:bb:8b:8f:88:7e:
                    5b:c8:39:4c:cd:c6:88:85:3c:70:b9:c0:1c:ca:47:
                    b0:ed:0e:b9:59:7c:cc:f9:7a:58:39:23:62:94:61:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D9:6E:1D:9D:51:2B:D9:AA:80:86:60:06:5D:00:4E:A5:23:C0:12
            X509v3 Authority Key Identifier:
                keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:5f:6c:21:10:ea:c9:08:80:60:cd:0f:08:b5:02:f4:5c:
         a7:b5:85:b4:40:21:73:5f:9d:2c:a1:a9:e2:c7:58:09:00:90:
         5c:42:cf:94:8a:5e:a6:05:7a:db:37:92:30:6b:41:60:0c:95:
         2c:f4:83:3d:6e:01:0a:8d:36:8a:33:f9:4a:95:c2:92:d5:d8:
         66:11:da:6a:e8:68:ae:54:05:a2:6e:78:37:4d:b2:88:6c:2e:
         f4:84:b2:47:73:78:54:1f:3d:a9:b3:f6:85:a0:ae:18:73:06:
         a6:49:20:74:9c:4e:e0:67:d9:2f:c9:3b:ec:64:c1:dd:b4:59:
         b1:f5:2d:d5:45:89:c4:62:a1:3c:a4:4e:2b:2b:b5:44:90:01:
         9d:a3:8e:e4:2a:e2:20:96:de:a0:1a:0b:a6:9a:1a:39:c7:b1:
         1f:d1:b1:61:92:07:b9:69:c9:44:1d:69:b1:63:e9:29:54:01:
         fc:12:0a:e7:ce:3d:e2:67:be:44:4f:a7:d1:43:74:02:97:b0:
         ac:7f:72:a4:7d:e9:30:29:a9:7f:14:19:a8:15:e4:3e:7b:47:
         0d:e3:ba:c5:ad:31:03:d7:d8:07:29:5c:29:c6:03:d7:36:59:
         a8:53:e3:0a:e2:bd:37:ce:a4:cb:72:2b:fa:12:b7:15:54:08:
         12:6a:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:56 2026 by rpki-client