Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File:                     U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier:          9WHlG/DRzSCxAmqEPGcjZuKpXrxMp/+sy3unubAmQmU=
Subject key identifier:   6E:5A:C2:8B:20:AE:A6:DA:E6:0E:6D:D1:98:0F:9B:8B:4A:50:71:34
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer:       /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial:       019F90FE8E0910BE0444464D4D1C0E722155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number:          06AC
Signing time:             Thu 23 Jul 2026 22:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:29 +0000
Files and hashes:         1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: 8QxltlyxLmNWZqVqVtuVSY6NLb1hP0Uj826V/bDMNcA=)
                          2: gG12zQ9GIzWIe8J-nL_3zIACec4.roa (hash: 7EVnJBXzQgBi1RMypgklddOJkUa6XyxYAb4uWOaA9Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:8e:09:10:be:04:44:46:4d:4d:1c:0e:72:21:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
        Validity
            Not Before: Jul 23 22:00:29 2026 GMT
            Not After : Jul 24 22:00:29 2026 GMT
        Subject: CN=6e5ac28b20aea6dae60e6dd1980f9b8b4a507134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:c9:35:47:92:27:00:eb:13:33:1a:eb:e6:
                    98:7b:69:d1:9d:be:6e:3e:87:ab:1d:91:73:90:ea:
                    da:8a:3b:f9:c4:77:52:11:4a:6b:db:bb:e6:1f:3d:
                    76:8b:b7:2e:55:2d:74:88:9e:37:cd:a9:c2:54:61:
                    5d:9f:29:cd:f7:ec:ed:1d:b4:41:5b:cb:32:3f:0a:
                    38:bb:37:a3:be:7c:3f:7b:27:3b:b4:c3:3d:a4:54:
                    74:28:ae:2b:47:70:62:ef:06:e5:b4:19:4b:49:40:
                    2e:6a:bc:cf:fa:fe:05:69:35:17:0b:1e:4c:1e:34:
                    84:78:15:3d:20:e9:88:b2:f2:d9:e2:09:bf:21:e2:
                    22:93:20:0f:d2:81:92:98:53:d4:2e:80:05:75:ab:
                    11:20:47:89:a5:64:ce:53:a8:3c:98:3c:2a:a5:7d:
                    fd:93:55:8e:ff:f3:70:2d:c3:b5:1f:9a:d7:92:76:
                    ec:e1:54:aa:2f:b2:6a:03:0f:90:18:cb:14:5b:bb:
                    66:0b:f7:e5:98:bd:0f:d6:db:93:dd:4c:45:82:96:
                    62:6b:a9:0c:dc:b0:31:2d:84:f0:73:48:e3:c2:e5:
                    96:d6:25:64:6e:ed:c7:67:7b:c3:06:80:3c:5f:54:
                    7c:a4:1f:2e:3d:bb:a6:94:88:14:00:06:4c:24:60:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:C2:8B:20:AE:A6:DA:E6:0E:6D:D1:98:0F:9B:8B:4A:50:71:34
            X509v3 Authority Key Identifier:
                keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9f:90:34:c7:ad:b6:d8:78:09:cf:50:77:56:8f:b3:50:1e:
         84:c0:fd:d0:35:e1:64:2f:7d:17:88:b6:0e:52:7f:bd:57:44:
         1f:0a:56:29:5f:22:12:d5:64:0c:e7:03:af:e1:61:a7:08:97:
         12:a8:f9:25:96:ff:10:2f:c8:62:bd:6c:13:2a:70:95:70:fc:
         d4:cc:22:c7:53:3c:d4:2a:6c:f4:c7:82:7a:17:f2:6a:a4:a9:
         91:41:74:96:fc:a0:9c:f7:bc:19:bb:ca:13:89:ae:09:ae:7f:
         5f:2d:b7:58:65:80:1e:62:80:27:c8:8f:33:43:7c:a7:d9:ca:
         5f:99:86:76:27:33:59:50:7c:21:08:8e:74:ea:2b:c7:4e:c4:
         3e:56:d3:0e:db:f1:bb:ad:32:8d:87:d3:b0:a1:12:be:d1:43:
         74:bd:02:0d:35:84:08:25:38:ad:6f:6b:c1:70:21:91:47:30:
         bd:de:8b:db:30:90:ad:57:7e:6c:6a:1d:c1:b8:49:72:98:8e:
         9b:16:dd:b8:1c:c5:5a:fa:26:b9:12:2e:6a:96:59:8f:a1:ae:
         49:e8:c2:90:e9:c4:e0:f6:bf:00:1d:86:a8:d6:ff:02:57:b5:
         f4:eb:08:35:23:23:d5:69:4e:05:b6:34:8b:14:72:40:bf:3c:
         70:db:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:28:43 2026 by rpki-client