Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft
File:                     6yf9aphL6LGRNkvsjsU43aTRB8A.mft (raw, json)
Hash identifier:          F5jqtKyG/yVaJY78XYWM0uXSHiWnUOO6kBW7yK5y+Mo=
Subject key identifier:   16:A6:92:5E:B3:38:C0:44:2D:80:9C:2C:6C:47:61:66:E1:53:C8:0B
Authority key identifier: EB:27:FD:6A:98:4B:E8:B1:91:36:4B:EC:8E:C5:38:DD:A4:D1:07:C0
Certificate issuer:       /CN=eb27fd6a984be8b191364bec8ec538dda4d107c0
Certificate serial:       019F8F7F56829BCF8BED233F990FB8212D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:54 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:54 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:54 +0000
Files and hashes:         1: 6yf9aphL6LGRNkvsjsU43aTRB8A.crl (hash: Nm2xRH3//NIsFPM29WhZEJtuoYEUyQQt2UgKXmp0axo=)
                          2: JsCad4FCyfVUBF2WY6yR_DCWBVw.roa (hash: pEHKwoBlBoQLwZMsVB7ZRqvnfjBWmWm2YEzrTvzWI9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:56:82:9b:cf:8b:ed:23:3f:99:0f:b8:21:2d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb27fd6a984be8b191364bec8ec538dda4d107c0
        Validity
            Not Before: Jul 23 15:01:54 2026 GMT
            Not After : Jul 24 15:01:54 2026 GMT
        Subject: CN=16a6925eb338c0442d809c2c6c476166e153c80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:b2:85:a0:11:d8:4e:8b:41:2d:26:3f:79:
                    a6:2f:37:f3:d7:7c:98:1f:82:40:32:b4:08:7a:89:
                    f1:03:64:f4:06:19:b3:1e:38:50:db:23:4c:b2:39:
                    cc:8a:a8:62:99:20:d8:25:12:df:97:6a:96:84:0e:
                    22:aa:16:3d:e8:2d:94:7b:d4:de:59:46:f2:69:10:
                    91:6a:9d:cc:f1:9b:1a:80:f0:ef:a6:3e:0c:20:e9:
                    fa:f8:60:ba:f4:e3:6b:b9:06:fd:e3:5e:99:2d:87:
                    04:41:eb:9d:6c:6b:10:b6:ed:cc:b0:38:b5:28:0d:
                    97:7a:b2:28:20:02:d0:bf:74:58:79:da:eb:22:c5:
                    eb:fb:2c:23:d4:17:84:20:cc:fc:66:53:62:e7:ea:
                    f6:a6:18:31:f2:d4:cd:bd:d9:4a:de:18:19:44:7f:
                    96:5c:f4:d2:5f:40:24:c8:fa:b0:0a:a4:25:f6:c7:
                    b5:80:b6:e6:25:4c:7c:b6:73:0c:43:84:4d:3c:17:
                    79:ff:73:4c:6e:82:45:af:67:86:28:00:36:e8:c9:
                    dd:79:37:24:7a:d4:76:a9:86:cd:5b:16:bb:b4:f8:
                    99:1a:60:b7:b2:22:23:d2:93:3f:43:43:8f:80:ee:
                    05:ce:95:84:08:be:bc:84:c4:81:f5:ce:b2:cf:1c:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A6:92:5E:B3:38:C0:44:2D:80:9C:2C:6C:47:61:66:E1:53:C8:0B
            X509v3 Authority Key Identifier:
                keyid:EB:27:FD:6A:98:4B:E8:B1:91:36:4B:EC:8E:C5:38:DD:A4:D1:07:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:f1:2a:9d:f8:da:eb:ca:fe:e3:bc:73:42:f5:ba:92:fc:
         c3:92:49:2c:2b:2d:6d:4a:2c:dd:84:fb:cb:20:a7:dd:85:e1:
         db:f5:10:81:49:4c:4e:1b:72:8f:28:de:a0:b4:56:5d:21:c9:
         4f:b0:00:3a:17:2c:8e:1b:f0:cc:81:ee:fc:54:38:5f:35:fb:
         72:de:11:3d:a4:2e:75:af:56:35:12:c0:7c:b7:8b:82:17:0d:
         53:e1:5b:df:73:bd:1a:a9:54:cd:7a:c3:43:68:46:a4:76:4c:
         34:11:03:85:71:18:36:72:e4:a9:0c:32:86:35:92:c7:4b:73:
         9e:31:06:33:be:63:83:01:7b:97:1a:d6:ae:e0:c8:af:f5:1a:
         63:6a:6f:b7:de:fe:70:49:82:6e:2b:78:37:25:99:0a:0b:05:
         82:1b:6a:fb:53:85:dc:08:61:54:fd:83:98:74:e6:16:c8:cc:
         3a:6a:f4:f1:32:d2:4a:b4:93:ff:47:0c:e7:46:85:4a:12:e2:
         03:e1:51:4a:ef:91:ea:a6:a2:17:d7:8f:5e:07:aa:2a:1a:50:
         19:c2:5d:51:b2:81:f0:ea:a1:e2:eb:99:e1:55:97:cf:d4:66:
         b7:eb:5c:52:38:52:5b:a4:f2:43:2e:03:12:75:19:d0:01:22:
         b1:91:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:33 2026 by rpki-client