Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          8cSJSyyBsD6mn0nu1cgQns6Mmg8swLoI+3lidxz9F3k=
Subject key identifier:   23:74:F6:64:C8:6C:B5:22:60:D2:50:31:B2:C1:6E:99:0A:D6:4F:8A
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       019F8F101F65982A0C6642CD01D2001AA911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          13BE
Signing time:             Thu 23 Jul 2026 13:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:26 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: A77H3N0fG1NhsiD37CcvP+UL5u04a/NAdUKffVeR4gk=)
                          2: RKDDpCFJgRVsaPKFW2mBHa9GuIM.roa (hash: iYIciX5oRPMlYEZ43lpL4qlTSrlyvBgCIZc5o+HesAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:1f:65:98:2a:0c:66:42:cd:01:d2:00:1a:a9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Jul 23 13:00:26 2026 GMT
            Not After : Jul 24 13:00:26 2026 GMT
        Subject: CN=2374f664c86cb52260d25031b2c16e990ad64f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:df:6f:1f:60:ff:36:9c:6c:65:f0:4d:0a:
                    d6:ef:3f:0a:70:5f:df:11:14:ab:15:52:7e:d0:49:
                    58:6a:b7:cd:57:15:4d:1a:c6:c8:fe:a5:2a:a1:e4:
                    f3:37:89:44:be:fa:c9:a6:68:b4:b4:5a:af:30:22:
                    22:ef:00:62:92:a0:1c:72:6e:68:c3:e8:24:3b:ae:
                    2a:7c:75:ca:ef:7e:c4:0a:54:7e:ca:0b:5a:cb:e0:
                    95:7e:b0:a5:e8:19:43:9b:b9:c1:5b:28:3b:f9:d1:
                    c1:6f:d1:45:63:7e:48:ff:5c:a2:23:23:a1:18:80:
                    69:33:5e:d0:d5:9c:00:b7:72:8d:34:b8:b2:c4:1a:
                    1d:5b:0f:41:22:63:d0:d6:bc:74:5c:62:66:9b:f0:
                    71:a4:f5:2a:de:cc:df:df:75:91:66:2c:ed:d1:3b:
                    c3:e1:45:4c:44:d8:ef:04:6d:58:f0:b3:38:7f:ce:
                    b0:b8:5c:5f:0a:0a:55:3d:d2:1a:f6:5f:1e:ae:07:
                    8d:d0:6b:21:d5:90:cb:1a:5b:e7:77:59:e2:11:16:
                    44:aa:a3:4a:c5:72:fa:f6:f4:39:1b:61:63:59:2d:
                    5d:b6:8d:a1:c6:6a:bf:95:58:b8:1c:ea:be:0d:38:
                    6a:a2:0e:63:87:0c:58:73:89:28:c3:75:26:e6:71:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:74:F6:64:C8:6C:B5:22:60:D2:50:31:B2:C1:6E:99:0A:D6:4F:8A
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:dc:e3:e9:84:44:7c:f8:1b:f7:7b:a7:7d:59:ca:62:10:
         97:b4:e6:c0:62:e0:11:d9:1f:92:50:bc:76:ed:d8:65:f6:3f:
         56:70:3e:49:50:4c:d2:ad:0b:61:c3:f3:6f:72:4d:a1:c6:d3:
         20:44:d5:8b:5d:49:e4:09:17:22:44:34:c7:e6:13:93:e9:34:
         65:36:ce:82:a7:3d:c7:b3:61:95:85:0d:93:c0:94:69:3b:c1:
         f8:05:ab:66:70:c1:9a:df:61:7d:62:52:5b:f3:45:98:3c:92:
         6e:1d:88:f9:63:70:86:76:d5:67:23:10:3c:29:41:64:8f:67:
         eb:72:10:d1:c6:3b:0d:24:23:86:a0:63:c7:01:a0:71:ce:8c:
         27:5b:aa:69:55:fc:42:a8:1d:2f:b3:73:ff:55:1f:8a:ff:90:
         93:7a:05:23:b4:eb:d0:a9:18:25:8f:bf:cd:80:52:19:b3:96:
         9c:02:48:0d:68:a8:2a:b9:72:a0:f6:b8:27:5f:52:de:5e:54:
         61:85:f6:c3:0d:39:94:4a:41:ed:d8:26:ed:08:b7:75:53:91:
         d7:27:b1:28:cb:f5:f1:36:d5:27:60:b3:5d:a6:94:dc:3d:1e:
         8f:63:b4:dd:f9:bb:ba:a9:5a:be:dd:26:e7:8d:8d:6e:9d:88:
         35:48:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:41 2026 by rpki-client