Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File:                     6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier:          CA3v7GGIq03MLwlHPoHj9SqQS+2Pd1fwPRUBwS8Qc2E=
Subject key identifier:   54:4A:A2:7D:FF:92:AD:AF:A9:92:BD:B8:F8:12:79:B1:93:22:AD:C3
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer:       /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial:       019F8FB4D62C1C57930E1835183061AAC105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number:          0769
Signing time:             Thu 23 Jul 2026 16:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:20 +0000
Files and hashes:         1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: thmTbdKddyBAOUepjV3YpZzDlQXyYQ3AjXr30WAotdg=)
                          2: XXpcSIWvTG-ujhC6WFKAP7xbCew.roa (hash: 8DYns3VAIMoO5AUluTPjCUWoA3CUpaSLrzipyJ93fJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:d6:2c:1c:57:93:0e:18:35:18:30:61:aa:c1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
        Validity
            Not Before: Jul 23 16:00:20 2026 GMT
            Not After : Jul 24 16:00:20 2026 GMT
        Subject: CN=544aa27dff92adafa992bdb8f81279b19322adc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:1f:8b:44:a0:59:1c:2c:39:4c:ca:25:7a:
                    57:88:3b:f2:3a:f9:34:b7:e1:13:ad:cb:d9:4b:7b:
                    b3:7a:f0:13:8a:61:1e:40:29:57:16:21:7c:6f:28:
                    6b:d7:d0:25:f4:ae:e0:cf:fd:30:7b:34:a4:f5:d3:
                    7c:09:28:be:1f:ce:ad:35:97:f1:55:a5:e7:57:07:
                    48:79:db:6e:a6:d3:ba:87:a8:44:7f:37:e9:c2:bd:
                    73:39:60:dc:cb:0b:4f:d8:4a:40:17:85:a4:0c:1a:
                    3b:c1:02:9b:b1:83:67:d9:2a:28:a2:d6:c3:a7:00:
                    aa:2a:35:fd:3f:f7:f2:18:34:25:41:11:71:1e:a9:
                    a8:2c:28:b8:d8:bb:4c:4b:da:ea:1b:de:59:4d:10:
                    6e:8e:d4:43:30:b4:90:c3:85:26:52:a7:a9:2f:be:
                    a0:91:38:ef:01:8e:a7:87:72:a9:b4:22:b1:7f:19:
                    ef:bf:d2:1b:a3:a5:4c:ba:8e:3f:3b:bd:be:d0:f2:
                    1d:58:22:07:c2:64:9d:39:2f:10:4e:58:94:56:ba:
                    d6:53:9c:08:21:dd:1a:48:80:88:ca:22:ea:4b:e5:
                    04:8d:e0:98:81:cc:c3:52:1f:84:3d:81:0b:fe:9a:
                    5c:1c:96:53:3e:00:e4:d3:62:a9:3d:44:5e:47:4b:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:A2:7D:FF:92:AD:AF:A9:92:BD:B8:F8:12:79:B1:93:22:AD:C3
            X509v3 Authority Key Identifier:
                keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:20:50:94:19:6e:36:c1:09:76:a7:1d:07:84:42:8d:72:ae:
         50:2e:37:9e:20:88:a8:59:67:e0:39:50:e5:6b:bf:dc:88:9c:
         43:a4:01:b2:8a:da:8c:ab:af:09:eb:28:c3:7d:bc:cc:6f:da:
         bc:89:cb:b7:63:b3:0e:6d:91:28:a1:b7:98:0b:f0:9e:2b:64:
         e3:d6:e8:e2:c7:35:6d:87:24:64:60:58:b1:9f:85:30:c5:5b:
         fe:2d:ef:c7:01:d2:9c:cd:19:e0:94:fd:e2:5f:ab:dd:cc:5e:
         e9:fd:cc:8c:fa:09:3f:01:1e:7a:48:f1:42:35:ed:d4:cb:a8:
         4a:5b:63:98:05:ad:c8:2a:e0:d0:e7:15:b5:1a:09:78:a4:ee:
         92:93:ea:b3:da:42:b2:c1:30:db:8d:33:bc:32:2d:9f:03:82:
         e1:aa:64:d7:d7:fa:55:ae:a0:fd:63:83:74:a1:4d:c7:0b:bf:
         16:e1:3c:51:dc:c4:41:e9:a4:9a:32:ef:38:a7:6c:21:4f:1d:
         58:04:36:0e:65:87:09:20:f4:c6:f0:78:63:45:b0:a1:1b:36:
         58:d1:b0:9a:5b:e1:83:b3:2d:0b:1b:94:20:10:92:02:6d:60:
         25:cf:3a:f4:13:b9:92:33:26:80:76:5d:3d:e7:9f:b3:a4:f6:
         ef:0d:1c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtNYsHFeTDhg1GDBhqsEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZjk2ZGYzMWIzZjQwNGRmNWI3N2UzOTljZTc5MzcxYjRm
NDQ0NDMwHhcNMjYwNzIzMTYwMDIwWhcNMjYwNzI0MTYwMDIwWjAzMTEwLwYDVQQD
Eyg1NDRhYTI3ZGZmOTJhZGFmYTk5MmJkYjhmODEyNzliMTkzMjJhZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv74fi0SgWRwsOUzKJXpXiDvyOvk0
t+ETrcvZS3uzevATimEeQClXFiF8byhr19Al9K7gz/0wezSk9dN8CSi+H86tNZfx
VaXnVwdIedtuptO6h6hEfzfpwr1zOWDcywtP2EpAF4WkDBo7wQKbsYNn2SoootbD
pwCqKjX9P/fyGDQlQRFxHqmoLCi42LtMS9rqG95ZTRBujtRDMLSQw4UmUqepL76g
kTjvAY6nh3KptCKxfxnvv9Ibo6VMuo4/O72+0PIdWCIHwmSdOS8QTliUVrrWU5wI
Id0aSICIyiLqS+UEjeCYgczDUh+EPYEL/ppcHJZTPgDk02KpPUReR0vJKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRKon3/kq2vqZK9uPgSebGTIq3DMB8GA1UdIwQY
MBaAFOr5bfMbP0BN9bd+OZznk3G09ERDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2Qt
OTY0YjYxYmMzMTliLzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZTAzOWEtYmU5Ni00MWZjLWFiY2QtOTY0YjYxYmMzMTli
LzEvNnZsdDh4c19RRTMxdDM0NW5PZVRjYlQwUkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCBQlBlu
NsEJdqcdB4RCjXKuUC43niCIqFln4DlQ5Wu/3IicQ6QBsorajKuvCesow328zG/a
vInLt2OzDm2RKKG3mAvwnitk49bo4sc1bYckZGBYsZ+FMMVb/i3vxwHSnM0Z4JT9
4l+r3cxe6f3MjPoJPwEeekjxQjXt1MuoSltjmAWtyCrg0OcVtRoJeKTukpPqs9pC
ssEw240zvDItnwOC4apk19f6Va6g/WODdKFNxwu/FuE8UdzEQemkmjLvOKdsIU8d
WAQ2DmWHCSD0xvB4Y0WwoRs2WNGwmlvhg7MtCxuUIBCSAm1gJc869BO5kjMmgHZd
Peefs6T27w0crg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:54 2026 by rpki-client