Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File:                     b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier:          pruyvcrQWITf66n6yIXaBf+qriZtvwvXFlt++B9dJ6M=
Subject key identifier:   42:E8:08:55:BB:ED:B9:0A:37:70:9A:02:1B:E7:87:B7:09:98:E5:C0
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer:       /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial:       019F91A394ECCE88AB353AF3F94F3304DE6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number:          0EA6
Signing time:             Fri 24 Jul 2026 01:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:44 +0000
Files and hashes:         1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=)
                          2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: pjViRCa/15QDqp8N6yo0OXMqdXNXiDJ2jrGCENQqkLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:94:ec:ce:88:ab:35:3a:f3:f9:4f:33:04:de:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
        Validity
            Not Before: Jul 24 01:00:44 2026 GMT
            Not After : Jul 25 01:00:44 2026 GMT
        Subject: CN=42e80855bbedb90a37709a021be787b70998e5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:8a:d2:54:3b:8e:97:eb:cc:ee:58:14:ca:
                    aa:4a:8c:35:ce:d2:48:c6:dd:af:fd:0d:87:14:1a:
                    7c:48:25:1b:ce:80:59:61:63:19:ba:b9:ff:f9:45:
                    29:a2:ec:cb:8c:17:e3:b6:3a:08:09:54:90:b1:f5:
                    4a:70:9f:48:1a:3f:e5:92:20:89:1d:57:79:8f:c7:
                    d1:72:7b:62:3a:72:25:89:6f:7e:86:db:b8:9c:c8:
                    03:88:12:e6:52:c5:dd:dd:05:a4:22:da:b5:4d:ed:
                    83:a6:2f:05:74:ac:38:49:82:b4:2c:ec:a5:80:84:
                    e6:bb:78:96:76:a9:54:f7:2d:79:b5:c5:e7:3f:f7:
                    99:03:5d:4d:dc:23:e9:6b:86:4b:09:55:a6:6e:37:
                    1e:4e:b6:5a:eb:a0:cb:36:a9:a4:68:26:29:92:03:
                    4c:17:c5:ef:36:90:d2:b6:4f:2d:e8:9d:ac:68:63:
                    16:2a:50:30:06:f9:22:e3:fa:7b:bb:87:38:55:a4:
                    20:d7:b6:8e:aa:38:95:00:b5:2a:23:21:1a:a6:90:
                    49:40:56:d7:8a:8b:97:9b:21:f3:06:77:a9:0d:99:
                    ba:42:db:53:83:f1:fe:23:4e:20:25:fb:b1:53:1e:
                    6f:13:ba:bd:13:47:43:fc:f8:97:e6:28:74:4a:f3:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E8:08:55:BB:ED:B9:0A:37:70:9A:02:1B:E7:87:B7:09:98:E5:C0
            X509v3 Authority Key Identifier:
                keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:41:b5:a8:db:fd:da:80:8b:7b:57:d0:ed:be:00:5d:60:23:
         18:db:91:c0:a3:80:d7:54:0b:0d:fa:88:a9:e3:c5:91:cd:b3:
         51:44:c1:24:f2:0b:a2:35:bd:d4:81:b0:36:9b:2d:00:f7:b5:
         da:1f:bf:a1:96:be:bc:bf:60:ca:9e:48:17:57:0b:ff:a8:2b:
         d6:48:0d:c7:ec:71:be:4b:1a:d0:bd:d4:ab:8e:b5:56:a4:63:
         79:eb:b1:b4:46:7d:ee:53:8c:f3:87:b0:5a:52:63:71:62:41:
         5a:fe:7c:dd:74:ef:8f:1c:d4:de:a5:cd:84:41:1d:77:7c:8f:
         19:87:e4:b7:c7:b9:3f:b2:62:c5:74:6a:51:85:bf:45:7d:74:
         03:1d:fc:2c:4a:67:21:c6:6d:a5:fc:6d:9d:63:7c:f5:55:bd:
         5b:5d:e2:d0:3e:78:d2:ca:43:8b:8f:55:fe:b7:48:dd:f0:28:
         40:aa:b8:c3:c2:32:72:8f:97:50:e8:27:88:0f:2b:dc:e9:1e:
         1e:66:05:4b:2f:42:60:c9:d6:cb:ae:7b:76:fa:4e:a2:3f:03:
         b0:82:31:96:4c:c7:60:77:6d:6c:38:fc:a4:8d:7c:ad:a9:18:
         c5:5b:c7:9f:d9:66:46:ee:4f:4b:20:e6:df:7d:c7:ef:9c:71:
         c1:c9:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:04 2026 by rpki-client