Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
File:                     tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft (raw, json)
Hash identifier:          EUb2myx1uRi1apxBUNTC9/rswEPnXiVEp/xoFV1uZXY=
Subject key identifier:   B4:4E:C0:80:F7:3D:10:89:54:60:78:AE:57:07:CA:97:68:86:6B:7C
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Certificate issuer:       /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial:       019F8EA304A323B814B29D532B5A1E3EFD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
Manifest number:          01E2
Signing time:             Thu 23 Jul 2026 11:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:15 +0000
Files and hashes:         1: oBxSXzs7vZVR5pIabH9fSfJ9YCM.asa (hash: yiO3gUi5FUJST9MZ6eZJIcvD2fv1PnTYWKvJ/1y4JcI=)
                          2: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl (hash: k5uut2T79aUN06Uzf8O+BSA2BCLMy2XIpghY737pt1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a3:04:a3:23:b8:14:b2:9d:53:2b:5a:1e:3e:fd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
        Validity
            Not Before: Jul 23 11:01:15 2026 GMT
            Not After : Jul 24 11:01:15 2026 GMT
        Subject: CN=b44ec080f73d1089546078ae5707ca9768866b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:b8:da:35:49:05:8e:9b:56:2a:3d:29:cc:
                    ce:5b:a3:8d:7c:16:af:40:ab:57:2c:ae:de:2d:f0:
                    51:75:f8:6a:36:07:0a:f0:ba:84:bd:6e:e2:70:9c:
                    60:25:c0:54:3f:41:e7:f9:28:35:63:5b:a9:6a:c8:
                    45:24:67:cc:0f:f5:64:03:88:0e:60:48:f1:8b:8a:
                    db:6a:48:54:64:f2:e5:7c:ca:f5:b1:ee:52:f2:01:
                    b5:c5:1e:b0:94:c2:9e:b1:0d:e6:37:29:57:43:82:
                    a2:f7:0e:05:7e:19:d8:9b:b0:ae:b4:b9:ef:23:af:
                    a0:44:45:fe:9d:21:f0:42:fc:31:e0:9f:7b:7b:a6:
                    b9:00:c8:53:92:55:28:07:b4:a1:c9:c8:e7:f6:7d:
                    a5:2d:8e:63:9f:63:44:3d:da:0e:54:89:30:af:c0:
                    35:fb:46:19:3b:7e:45:27:73:02:fc:e4:64:8a:d7:
                    d3:b0:0e:50:c3:1b:b9:46:01:2c:1a:6e:d7:a5:48:
                    d4:ce:74:23:99:56:a1:4a:49:4a:9a:1e:82:45:1e:
                    52:17:e5:67:a6:68:91:e9:9b:1b:90:3f:2d:12:96:
                    52:f0:9c:c3:fc:81:b3:d5:8b:a3:c9:d1:f7:62:4d:
                    b9:43:c1:f1:89:82:75:78:34:2f:0d:1a:89:c8:3f:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:C0:80:F7:3D:10:89:54:60:78:AE:57:07:CA:97:68:86:6B:7C
            X509v3 Authority Key Identifier:
                keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:3c:d7:d4:ea:dc:59:8d:8c:12:0e:6d:e5:7c:3f:28:26:
         f6:a6:6a:36:45:3b:8b:1a:20:a8:d8:e7:59:2a:56:c2:14:17:
         0c:f1:92:fe:1f:ae:b1:82:11:bd:ca:68:76:e4:b1:c0:30:2f:
         66:49:e0:2c:ba:73:cb:50:d0:1b:ee:3c:6c:82:80:0a:4e:71:
         6a:de:fb:5d:22:f7:0c:cd:c5:09:50:34:ad:9c:7f:a0:b0:f1:
         45:71:e5:c6:ef:96:a5:77:92:6e:45:db:5a:f3:9f:ae:a1:bf:
         9b:11:e3:af:45:e2:8f:f5:12:70:5d:5c:b0:d1:04:ac:23:a0:
         d8:27:2d:8d:9c:56:49:23:73:79:d9:89:e7:c8:17:2e:0e:25:
         89:9a:3d:f0:79:26:f5:f9:f7:dc:6e:00:86:91:a4:01:8f:cb:
         4c:ba:60:6c:7c:d8:d2:8d:4a:87:41:84:b3:a1:89:2a:3d:d3:
         b3:93:14:e6:83:b6:2c:5c:e3:e7:c1:a4:98:7c:79:dc:92:09:
         31:79:3c:44:6b:c4:b2:d7:87:50:a7:70:48:0a:5f:d3:50:41:
         97:d8:e6:00:d0:12:92:b6:ff:c9:d8:16:46:b3:3d:19:61:22:
         5a:f2:c9:09:90:ff:a0:a6:f3:74:53:83:7e:85:72:e2:5f:64:
         57:b3:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:11 2026 by rpki-client