Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
File:                     6suWQTrI8sFrlHlWiRdNenIgHvU.mft (raw, json)
Hash identifier:          mdAGVvoUelBo7u7Vk0Wkbs5Erbwzqn1TcbGyhxFviFY=
Subject key identifier:   8C:0E:6D:E6:88:CC:C6:F1:35:8C:AA:8C:32:4C:EB:6D:C8:DE:F5:6E
Authority key identifier: EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
Certificate issuer:       /CN=eacb96413ac8f2c16b94795689174d7a72201ef5
Certificate serial:       019F9059CB9D437BDE58E93CD66BE9288FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 19:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:31 +0000
Files and hashes:         1: 6suWQTrI8sFrlHlWiRdNenIgHvU.crl (hash: m4n+ENPvM1W3ODgCIRC1bVGSdRFFQ0llj0i2gR/99WU=)
                          2: FwjQJ3o4_f5_kIRJPL1fhc8wPs0.roa (hash: b+lMbH7aGqXO1dA4OC3I2proSJvRuAwpdIs6UIwXrBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:cb:9d:43:7b:de:58:e9:3c:d6:6b:e9:28:8f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacb96413ac8f2c16b94795689174d7a72201ef5
        Validity
            Not Before: Jul 23 19:00:31 2026 GMT
            Not After : Jul 24 19:00:31 2026 GMT
        Subject: CN=8c0e6de688ccc6f1358caa8c324ceb6dc8def56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:bc:5a:a9:fb:89:2f:4d:9f:35:9b:29:13:
                    1d:1d:a7:e9:fb:73:94:12:da:ed:1d:4b:2c:07:0d:
                    4b:4c:6a:22:77:52:5a:ad:e6:69:3b:0f:d7:e5:70:
                    e9:cc:5f:89:50:34:77:19:63:3d:d7:30:32:53:e3:
                    a5:2e:ef:91:39:97:f1:52:21:b6:f7:d3:d7:7f:59:
                    9a:1a:cb:d2:82:46:f2:d2:0f:c6:3b:21:6a:f7:24:
                    e7:82:6a:d6:34:b5:c7:d6:cb:ae:a8:8d:c3:2e:d8:
                    fe:24:fc:c5:34:bd:2a:94:f5:2b:2b:ac:d2:77:43:
                    5a:4e:12:57:55:92:ab:05:36:9c:fd:a0:6f:7a:f7:
                    84:c5:9c:40:96:95:8a:8e:7d:ef:ca:d9:c9:01:90:
                    93:b7:74:5d:c6:90:e6:71:c5:13:dd:10:c8:57:e0:
                    e1:db:36:d6:46:59:f1:23:4b:ba:f7:97:ac:3b:86:
                    3c:3c:e4:fe:73:5b:dd:36:9b:76:81:16:15:f0:9c:
                    ae:a9:0d:d2:a9:bf:e8:bb:7e:b0:65:5a:03:35:8f:
                    eb:0d:81:0a:08:3f:11:8f:79:77:63:01:eb:02:5b:
                    2c:84:8f:52:80:dd:fd:a0:72:82:21:b1:a8:5f:18:
                    42:d4:fa:8a:fc:1b:9f:2c:6d:ef:dc:bc:96:dc:c5:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0E:6D:E6:88:CC:C6:F1:35:8C:AA:8C:32:4C:EB:6D:C8:DE:F5:6E
            X509v3 Authority Key Identifier:
                keyid:EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:fc:b1:47:15:bc:0a:a1:7e:61:10:cf:6d:28:88:79:e5:b4:
         0b:a9:73:76:fe:47:0f:dd:fe:0a:2a:bc:1c:86:a7:73:8a:0b:
         34:a5:db:56:15:26:95:3d:03:9b:07:86:be:88:6c:16:40:a8:
         48:b1:af:5b:16:af:58:39:4d:22:42:aa:82:e9:f1:ca:b1:e2:
         b6:db:a8:6a:11:5e:38:60:21:fa:7d:5f:ec:d5:7f:a5:97:e2:
         ab:cd:35:7b:fa:95:18:3a:a0:0c:45:9e:2b:ee:41:a2:67:10:
         1e:6e:01:a2:ed:70:c4:65:2a:cf:44:a2:23:8a:d9:e5:25:40:
         9c:aa:32:6f:ff:94:a6:f4:ab:07:4b:6b:51:15:87:e2:14:0b:
         96:1e:66:6c:a3:8c:5f:2d:fc:2f:b6:f2:00:26:98:8e:b8:81:
         2e:c2:45:00:6d:6d:7e:27:f3:9a:2e:84:5b:e7:25:7b:58:44:
         5a:ef:3b:ca:7e:07:81:4c:4c:9c:eb:e4:50:aa:d6:49:f6:87:
         17:b5:53:c2:5e:f5:2a:d9:66:25:98:75:b9:67:7e:13:81:3f:
         e5:be:1e:c0:5d:f2:75:f3:54:08:35:d8:9b:10:52:03:89:31:
         3e:21:5f:0b:d4:bc:4b:16:33:7c:e3:f5:a1:b4:4a:e9:73:3f:
         aa:d2:60:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWcudQ3veWOk81mvpKI+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhY2I5NjQxM2FjOGYyYzE2Yjk0Nzk1Njg5MTc0ZDdhNzIy
MDFlZjUwHhcNMjYwNzIzMTkwMDMxWhcNMjYwNzI0MTkwMDMxWjAzMTEwLwYDVQQD
Eyg4YzBlNmRlNjg4Y2NjNmYxMzU4Y2FhOGMzMjRjZWI2ZGM4ZGVmNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl568Wqn7iS9NnzWbKRMdHafp+3OU
EtrtHUssBw1LTGoid1JareZpOw/X5XDpzF+JUDR3GWM91zAyU+OlLu+ROZfxUiG2
99PXf1maGsvSgkby0g/GOyFq9yTngmrWNLXH1suuqI3DLtj+JPzFNL0qlPUrK6zS
d0NaThJXVZKrBTac/aBveveExZxAlpWKjn3vytnJAZCTt3RdxpDmccUT3RDIV+Dh
2zbWRlnxI0u695esO4Y8POT+c1vdNpt2gRYV8JyuqQ3Sqb/ou36wZVoDNY/rDYEK
CD8Rj3l3YwHrAlsshI9SgN39oHKCIbGoXxhC1PqK/BufLG3v3LyW3MWu9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwObeaIzMbxNYyqjDJM623I3vVuMB8GA1UdIwQY
MBaAFOrLlkE6yPLBa5R5VokXTXpyIB71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kNDFkZjctOTQxZC00N2FlLWIxNWMt
MzdmZTZiNjVmNjhmLzEvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kNDFkZjctOTQxZC00N2FlLWIxNWMtMzdmZTZiNjVmNjhm
LzEvNnN1V1FUckk4c0ZybEhsV2lSZE5lbklnSHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvyxRxW8
CqF+YRDPbSiIeeW0C6lzdv5HD93+Ciq8HIanc4oLNKXbVhUmlT0DmweGvohsFkCo
SLGvWxavWDlNIkKqgunxyrHittuoahFeOGAh+n1f7NV/pZfiq801e/qVGDqgDEWe
K+5BomcQHm4Bou1wxGUqz0SiI4rZ5SVAnKoyb/+UpvSrB0trURWH4hQLlh5mbKOM
Xy38L7byACaYjriBLsJFAG1tfifzmi6EW+cle1hEWu87yn4HgUxMnOvkUKrWSfaH
F7VTwl71KtlmJZh1uWd+E4E/5b4ewF3ydfNUCDXYmxBSA4kxPiFfC9S8SxYzfOP1
obRK6XM/qtJgJA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:35 2026 by rpki-client