Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
File:                     6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft (raw, json)
Hash identifier:          6sBvZ16ejHJg7GJ3AqRxtMCp+BydwciMSFtTKKYRTmc=
Subject key identifier:   64:76:B9:0E:2B:8D:5B:B6:E5:4E:36:FD:D0:2F:DA:22:90:96:73:F0
Authority key identifier: E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44
Certificate issuer:       /CN=e9fd01e250b4230276b31e0b8328d87e6974e644
Certificate serial:       019F91DABD367FE1B16489115B5DEA8C4E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
Manifest number:          19C3
Signing time:             Fri 24 Jul 2026 02:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:59 +0000
Files and hashes:         1: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl (hash: /1Pz9/iNNz1ViT/m5AK3ZLSo6v9Bg1mbZxltHKmbMgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:bd:36:7f:e1:b1:64:89:11:5b:5d:ea:8c:4e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fd01e250b4230276b31e0b8328d87e6974e644
        Validity
            Not Before: Jul 24 02:00:59 2026 GMT
            Not After : Jul 25 02:00:59 2026 GMT
        Subject: CN=6476b90e2b8d5bb6e54e36fdd02fda22909673f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:74:85:c0:82:9b:1b:27:df:53:06:36:f6:
                    5c:55:7c:57:8d:e2:1f:66:52:8d:7f:fa:89:c6:87:
                    ab:88:11:39:27:d6:a4:95:81:19:ca:2b:da:97:7b:
                    4b:d3:3a:ba:0e:14:cf:4d:37:72:e5:e0:85:13:e3:
                    05:33:ce:31:17:0e:1b:3b:21:67:d8:55:7a:2b:25:
                    15:e3:41:62:0c:1f:a2:72:55:68:c4:90:db:6a:37:
                    e6:a4:46:7f:90:ac:1b:54:c0:7e:fd:4c:8e:c8:55:
                    a3:07:15:89:db:ee:89:83:fb:be:07:6a:91:42:d2:
                    ff:90:8b:39:b2:81:e6:00:c8:c8:54:f3:58:00:e7:
                    34:ae:28:3f:a5:6b:07:ed:5f:07:8b:f9:09:e8:24:
                    e3:8f:42:79:ad:d0:f0:fa:8d:a4:4e:43:cc:f1:c3:
                    a1:ec:e7:3d:3e:f4:8e:22:4b:c3:d9:32:46:00:5c:
                    47:b2:a7:ea:17:83:e0:98:e2:8c:e4:1c:ed:e6:94:
                    74:95:f1:ee:18:a8:c3:c1:42:08:fb:db:98:75:10:
                    2c:84:7c:f0:86:d3:87:56:fa:e5:48:1f:cc:df:e2:
                    4b:d1:a0:b9:50:fd:16:8e:a7:1c:c5:bf:32:db:ab:
                    7c:18:79:9c:70:22:a3:79:cb:18:c0:97:fe:58:05:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:B9:0E:2B:8D:5B:B6:E5:4E:36:FD:D0:2F:DA:22:90:96:73:F0
            X509v3 Authority Key Identifier:
                keyid:E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:70:72:40:92:9f:0d:61:f6:d5:e7:34:29:43:29:75:d5:ea:
         21:c2:91:27:0a:ad:e8:ac:94:2b:20:78:38:ee:3b:3a:21:e5:
         16:df:0f:fd:31:1c:29:ee:aa:b7:ce:73:6c:2c:aa:3a:18:d2:
         dc:f8:60:75:20:e0:c6:40:5b:f5:a3:0e:c3:7d:20:ff:b9:79:
         07:f6:79:bc:e3:c7:80:14:09:15:4f:39:83:59:88:c2:f5:17:
         ab:d4:02:ed:2a:7a:c0:ce:23:2d:a5:0c:9f:c3:92:cf:09:50:
         55:11:e6:35:18:f4:bd:52:00:60:bb:50:74:d8:0d:0b:79:35:
         5e:c1:c1:c4:f0:8a:a2:e9:8d:90:7a:f9:f3:60:e2:b3:76:34:
         37:79:44:e9:95:3a:7a:d8:3f:b4:58:c9:61:9c:a4:af:ce:da:
         32:63:e2:8b:a8:e8:37:54:19:f4:c2:1b:22:50:bc:48:14:2e:
         3e:2a:81:4a:ee:51:85:6a:30:34:2a:0a:15:b1:e1:1e:37:51:
         83:12:55:64:5a:ee:4f:4c:58:0d:f7:06:ba:b7:11:e6:5a:cb:
         fc:f2:8f:e5:fa:d5:f0:ca:39:76:58:83:5a:b0:e8:9e:18:fb:
         eb:58:04:d6:ae:27:3e:d9:97:57:64:9d:d2:07:16:35:fb:f8:
         34:5f:d7:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2r02f+GxZIkRW13qjE4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZmQwMWUyNTBiNDIzMDI3NmIzMWUwYjgzMjhkODdlNjk3
NGU2NDQwHhcNMjYwNzI0MDIwMDU5WhcNMjYwNzI1MDIwMDU5WjAzMTEwLwYDVQQD
Eyg2NDc2YjkwZTJiOGQ1YmI2ZTU0ZTM2ZmRkMDJmZGEyMjkwOTY3M2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfN0hcCCmxsn31MGNvZcVXxXjeIf
ZlKNf/qJxoeriBE5J9aklYEZyival3tL0zq6DhTPTTdy5eCFE+MFM84xFw4bOyFn
2FV6KyUV40FiDB+iclVoxJDbajfmpEZ/kKwbVMB+/UyOyFWjBxWJ2+6Jg/u+B2qR
QtL/kIs5soHmAMjIVPNYAOc0rig/pWsH7V8Hi/kJ6CTjj0J5rdDw+o2kTkPM8cOh
7Oc9PvSOIkvD2TJGAFxHsqfqF4PgmOKM5Bzt5pR0lfHuGKjDwUII+9uYdRAshHzw
htOHVvrlSB/M3+JL0aC5UP0Wjqccxb8y26t8GHmccCKjecsYwJf+WAX8fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR2uQ4rjVu25U42/dAv2iKQlnPwMB8GA1UdIwQY
MBaAFOn9AeJQtCMCdrMeC4Mo2H5pdOZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmYwQjRsQzBJd0oyc3g0TGd5allmbWwwNWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zMWZiNTctN2ZmZC00OWY4LTlhNzct
YWI0NzU4MDlkMTQwLzEvNmYwQjRsQzBJd0oyc3g0TGd5allmbWwwNWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zMWZiNTctN2ZmZC00OWY4LTlhNzctYWI0NzU4MDlkMTQw
LzEvNmYwQjRsQzBJd0oyc3g0TGd5allmbWwwNWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXByQJKf
DWH21ec0KUMpddXqIcKRJwqt6KyUKyB4OO47OiHlFt8P/TEcKe6qt85zbCyqOhjS
3PhgdSDgxkBb9aMOw30g/7l5B/Z5vOPHgBQJFU85g1mIwvUXq9QC7Sp6wM4jLaUM
n8OSzwlQVRHmNRj0vVIAYLtQdNgNC3k1XsHBxPCKoumNkHr582Dis3Y0N3lE6ZU6
etg/tFjJYZykr87aMmPii6joN1QZ9MIbIlC8SBQuPiqBSu5RhWowNCoKFbHhHjdR
gxJVZFruT0xYDfcGurcR5lrL/PKP5frV8Mo5dliDWrDonhj761gE1q4nPtmXV2Sd
0gcWNfv4NF/X/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:52:03 2026 by rpki-client