Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          dpRefh67ly+7dVpqueKaQZ18eRIMP7D7Y025SHeF/IU=
Subject key identifier:   E5:58:B9:A4:AB:C2:47:DA:25:3E:AE:25:09:BA:49:C6:A4:08:B7:16
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       019F91A44632279646B591EDAF0ECD09CC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          143D
Signing time:             Fri 24 Jul 2026 01:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:29 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: KnGS6KPhNBkGDBXdmYFIDnxdzBc4p//ijrdZoD62KAY=)
                          2: UpgEGqcu1GJuaf10KzAyz7aDr-8.roa (hash: FafcYCab2MaXN/I3JHkDEUMkIjEyTMvrCthzIZARBZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:46:32:27:96:46:b5:91:ed:af:0e:cd:09:cc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Jul 24 01:01:29 2026 GMT
            Not After : Jul 25 01:01:29 2026 GMT
        Subject: CN=e558b9a4abc247da253eae2509ba49c6a408b716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:ad:51:02:75:87:97:d2:d0:b2:20:e8:98:
                    6e:fe:5a:a2:92:24:c2:4d:36:39:7a:a8:ed:e8:53:
                    38:08:93:0b:40:64:36:d4:bf:9a:c5:7c:d4:bc:3c:
                    9e:8e:c3:bc:f9:01:3a:08:db:aa:78:59:00:db:b9:
                    b3:63:bd:f9:b6:60:bd:2f:be:aa:4e:59:4b:1b:a4:
                    f6:e8:0b:ab:54:ff:ea:d8:14:9f:b0:88:1d:f8:3c:
                    13:a7:e8:32:f4:b3:03:08:2d:88:45:30:75:12:4a:
                    b0:c1:2c:0f:b9:e2:60:e4:5b:0b:c3:68:e0:80:00:
                    4b:0b:c9:66:6a:d0:0c:50:47:87:52:48:30:b8:86:
                    90:a3:3d:87:33:64:da:d8:8d:2c:4a:b4:c3:ab:a9:
                    cf:69:29:0b:9e:ec:33:ec:3c:aa:d3:bd:99:4c:ac:
                    e0:ad:c8:ca:46:75:b2:ff:0d:c7:7c:57:95:6c:22:
                    f9:26:c4:03:89:70:92:5a:70:e6:bc:79:8b:53:dc:
                    4e:e6:d4:92:7e:01:5f:24:61:dd:20:09:27:b2:d8:
                    73:d4:1c:91:fb:54:36:84:ac:68:9f:b0:79:a0:01:
                    8c:28:02:ca:40:fd:8c:20:fd:05:5f:f2:e7:1e:ed:
                    7c:c4:1e:d5:20:c2:0c:e3:88:b0:84:2c:a6:85:04:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:58:B9:A4:AB:C2:47:DA:25:3E:AE:25:09:BA:49:C6:A4:08:B7:16
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:29:20:22:9b:67:0b:1c:4a:0b:a9:6a:51:38:05:87:e8:85:
         25:32:b9:9c:e2:19:6d:c7:ba:52:71:d0:e4:0a:93:5b:21:e2:
         ae:bb:74:fa:c6:3b:da:32:12:5a:f3:f7:16:fd:fe:4b:ec:88:
         50:a7:1d:63:18:9d:1a:03:6e:38:cc:6f:9e:3e:63:7e:1f:f9:
         74:65:73:16:83:e0:8d:e2:5f:88:f8:c0:bb:87:a5:ff:58:57:
         ef:56:f3:a8:b0:f4:14:e2:fa:ca:4f:a1:1f:84:7a:aa:df:00:
         c3:78:28:d6:33:98:50:bd:a8:11:f9:15:0f:0c:42:21:13:5c:
         c5:1a:d9:e8:9a:20:06:e4:a8:e3:c8:f8:10:fe:12:11:66:a2:
         ca:1d:fa:90:dd:c3:b4:24:4b:2b:fe:b0:77:45:11:a5:2b:22:
         ec:07:17:8c:c7:55:fe:73:a1:a3:81:c5:57:6d:91:44:55:f6:
         aa:c5:0a:df:c1:ba:e1:e2:22:81:5f:39:b1:94:35:12:da:ba:
         96:a9:0e:df:a3:04:dd:81:e7:a2:72:15:3b:cd:80:49:79:91:
         3b:42:58:32:92:0e:e1:a5:9a:43:52:6c:2d:ed:80:95:25:29:
         a3:91:b7:03:42:c4:21:2f:ca:7a:c9:86:38:6d:5e:2c:0d:d1:
         6d:9c:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:00 2026 by rpki-client