Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File:                     t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier:          J5Y9Dm4AY+/TrgmXrBcTMQUWUWtlSMm0mSh/Ivfl1GA=
Subject key identifier:   6D:DD:CC:5F:EF:ED:76:66:5A:3C:98:92:D8:4D:70:13:4E:71:C5:5D
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer:       /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial:       019F8F7DD0A5424CDAE6C71EA9A2AB563063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number:          12C6
Signing time:             Thu 23 Jul 2026 15:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:14 +0000
Files and hashes:         1: V_mkvcjVjS1-u9rT2y0dgg79_kc.roa (hash: rMLTGatwFgUj/JsrB7K3p4u1VzSPILlwRtAyB+ELLeA=)
                          2: oNnDZwusFuv5UtMyxcJz3DtbE00.roa (hash: gdqrDRQ7FgRPSgYvq2DfctPsFTOhIJlWOftupYpojX4=)
                          3: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: ZJq65MVl1qW2SqOWqc3NP6ZLw7tilZpFBQeY9KtwbI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:d0:a5:42:4c:da:e6:c7:1e:a9:a2:ab:56:30:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
        Validity
            Not Before: Jul 23 15:00:14 2026 GMT
            Not After : Jul 24 15:00:14 2026 GMT
        Subject: CN=6dddcc5fefed76665a3c9892d84d70134e71c55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:53:52:46:f5:ce:b3:1c:71:7a:05:83:33:
                    54:91:68:c9:2d:a9:9d:59:a8:dc:e3:a7:77:13:cc:
                    e5:21:ea:a8:13:65:8f:0a:84:94:4a:63:7c:67:dd:
                    72:ce:b2:94:05:4b:76:4a:15:72:69:4a:ee:60:6c:
                    5b:3b:d5:ec:82:45:54:4b:16:1d:3e:bc:98:bd:8b:
                    26:25:6d:84:30:e5:21:ed:47:90:a2:fc:1e:2c:5d:
                    be:14:6b:96:60:36:f5:71:23:37:cc:7c:22:4d:91:
                    e9:77:e0:63:67:ef:aa:19:44:6e:11:75:6d:45:1f:
                    e3:5a:42:18:57:a7:12:de:d5:9c:de:5f:04:4a:90:
                    38:d1:ba:8b:9e:21:db:fc:c7:99:0c:33:e7:1b:f2:
                    44:45:f7:c8:a4:e2:eb:97:a2:9e:eb:24:5c:64:ff:
                    1b:41:6d:80:12:bb:85:b4:02:6a:26:52:09:4c:a2:
                    9a:b6:59:e5:69:e2:87:92:cc:8b:2d:80:18:eb:e0:
                    61:2b:aa:f3:6b:cc:57:6f:29:75:63:ef:f6:32:0d:
                    70:a9:b1:de:44:6e:4e:16:37:62:e8:7b:17:05:ed:
                    05:1e:a8:01:a0:4c:38:35:6e:c7:db:93:9e:09:51:
                    02:fe:b8:40:7b:0d:9f:b1:54:75:89:e4:6d:65:6d:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DD:CC:5F:EF:ED:76:66:5A:3C:98:92:D8:4D:70:13:4E:71:C5:5D
            X509v3 Authority Key Identifier:
                keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:78:10:ec:32:f4:95:f1:a8:e9:5c:ea:87:fb:c7:df:e0:99:
         07:ab:02:f0:c6:58:28:b8:bc:c0:02:c4:89:eb:f0:b3:95:74:
         78:dc:39:e5:45:4b:22:ef:f4:f1:5d:4f:cb:a6:46:95:04:c3:
         65:6e:53:ed:7f:b8:1f:d1:5c:bd:33:32:ac:c9:63:ea:9f:ee:
         36:76:50:92:fd:11:6b:3c:46:47:85:fb:ec:45:07:ba:d6:d7:
         c6:c1:7c:03:f1:9a:e3:c2:a2:8a:51:5d:a9:6a:12:3f:9c:8a:
         9d:9e:78:2b:e0:9b:1f:aa:7a:81:b7:ae:c0:78:7e:35:17:e4:
         74:09:71:95:9e:11:37:90:1f:47:77:7e:6d:60:90:a0:e9:83:
         bf:3f:e4:a9:88:41:5e:70:fa:1f:24:bb:8e:91:ec:6d:3d:19:
         60:84:0c:ca:d6:3f:9b:ce:4a:88:5e:8c:2c:9a:38:98:f9:51:
         2b:0d:a2:24:db:d5:19:75:ba:fe:dc:27:b3:29:12:79:86:3d:
         a1:e7:44:ca:41:cd:84:0a:30:f8:06:81:9d:d4:a8:69:1f:42:
         66:dc:81:86:0f:1a:8a:6a:4b:8d:43:8e:d6:e5:45:f4:0d:0d:
         0b:39:83:01:3b:de:98:b6:cc:a0:c2:2a:9e:91:78:2c:92:22:
         23:71:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:54 2026 by rpki-client