Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
File:                     6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json)
Hash identifier:          1oj6+qYA9XAqP3Zgjow/2uX0xQt2eKI+O7Xdz8OFCE8=
Subject key identifier:   8C:B7:27:7B:F0:A0:5B:50:58:85:CE:30:25:A1:10:D6:8C:61:14:01
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Certificate issuer:       /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial:       019F8ED9ADC2D4B226F447CC7FF15CD97CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
Manifest number:          1126
Signing time:             Thu 23 Jul 2026 12:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:58 +0000
Files and hashes:         1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: t4FLXuedtjgY3gIlzYThhv9+EkRr8/QNLG5WnKSDP2c=)
                          2: YBuaRwSll46Pl6eX__IyqTruYDE.roa (hash: 3qHFKbwgdhCywjWZRMFAC3Gdxw/Mz4QK6oo9Kv5v/9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:ad:c2:d4:b2:26:f4:47:cc:7f:f1:5c:d9:7c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
        Validity
            Not Before: Jul 23 12:00:58 2026 GMT
            Not After : Jul 24 12:00:58 2026 GMT
        Subject: CN=8cb7277bf0a05b505885ce3025a110d68c611401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:ae:fb:99:d1:44:ae:2b:ee:0c:32:5c:fb:
                    3b:29:03:2a:7d:66:72:a2:23:5e:56:bd:8e:b9:77:
                    88:5a:62:2a:b7:76:39:4d:d9:f0:d7:74:9e:00:0c:
                    c1:a5:95:0f:9c:ce:b5:10:2f:75:e4:1b:80:50:50:
                    44:7d:32:3a:b9:ba:17:10:1b:15:b1:f8:49:e2:49:
                    c3:b6:ec:6e:22:e5:f5:df:f5:2f:b0:c1:0c:ca:43:
                    ee:a2:88:ef:64:5a:24:7f:fd:ce:0e:ba:e2:a5:60:
                    c9:8e:47:45:8c:f3:39:67:14:e2:00:09:88:41:dd:
                    27:e3:a8:10:47:05:8b:4b:7e:2f:b1:d5:1d:a0:a2:
                    5d:43:76:47:cb:e2:7c:da:9c:c1:b7:87:e6:f9:03:
                    f7:da:f2:bb:04:76:5f:22:0b:d6:c8:88:08:23:8a:
                    d5:fe:77:34:0d:0f:95:54:b3:63:b6:5e:69:d9:34:
                    55:41:81:31:07:68:63:14:de:38:a5:32:0e:f0:bb:
                    1a:75:85:c2:00:ab:fb:af:5f:c5:56:a0:13:ba:7a:
                    6d:90:5c:a6:1c:c9:14:33:99:8b:b9:06:8a:0b:18:
                    63:f2:bf:3e:9d:77:96:aa:b5:61:44:f6:74:d3:99:
                    45:f4:60:98:c0:c0:25:b2:96:27:e1:eb:64:f7:3e:
                    ef:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B7:27:7B:F0:A0:5B:50:58:85:CE:30:25:A1:10:D6:8C:61:14:01
            X509v3 Authority Key Identifier:
                keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:01:f0:e4:4c:38:d0:e1:fe:77:96:5b:c9:b4:1f:67:3b:c1:
         03:99:52:f0:0f:31:c2:25:98:88:f0:88:18:78:ea:93:e0:bf:
         30:fd:0b:e8:fb:01:dc:e4:6e:24:0e:b6:ac:ff:cb:0e:37:8a:
         00:6c:3d:48:1a:cf:14:6c:07:73:06:a1:04:8e:04:50:dc:4b:
         fc:a1:a0:38:28:36:e2:a7:7f:ca:fa:7c:f9:79:42:81:1a:b8:
         a2:e1:5d:3f:68:87:01:33:3b:22:55:a2:38:f9:08:96:f5:af:
         37:12:38:9d:0e:9c:a6:39:23:63:e7:cf:c1:ab:df:f4:48:e6:
         e7:e4:4c:7b:0b:c8:b1:d2:ee:4c:b2:55:21:61:0e:38:13:44:
         2c:88:40:0d:1f:98:93:26:e1:9b:71:06:c3:e5:03:8c:3b:33:
         83:d7:86:8d:2f:c0:6d:14:51:ba:50:84:43:12:f1:4e:f9:6c:
         cc:c1:ec:7d:01:7a:c0:73:ec:f3:ac:05:69:5a:b4:34:0d:2e:
         a6:c4:5e:c5:4b:bb:7a:d2:e6:9f:30:6f:f9:03:b1:fb:7c:3c:
         75:76:5e:33:1e:47:16:2e:59:dd:17:aa:66:d8:f1:ee:2c:ea:
         3f:c9:0d:73:69:50:d0:94:af:bc:10:a6:2d:b6:07:4a:27:75:
         d4:e8:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:09:52 2026 by rpki-client