Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
File:                     6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft (raw, json)
Hash identifier:          LSnYXKfyTcA+n7ILSU7RAgsmRSMLQIC1chnuseAsXco=
Subject key identifier:   21:71:93:DA:DD:AD:F8:4B:41:DB:A7:F9:DB:37:AB:1F:47:8C:40:9E
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Certificate issuer:       /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial:       019F91DB32BC9982EBF413B320F0A0E29792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 02:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:29 +0000
Files and hashes:         1: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl (hash: kyojp+CdhHkaIdmvZ5py4CJnzCL9sYPNbyPKLcUkh6s=)
                          2: L1cSbjjQGctZbYceguMaYMQAPvU.roa (hash: peUd7meGLOIIhj/OSy9KzfxP7xwU4LdriyeCXz9sbec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:32:bc:99:82:eb:f4:13:b3:20:f0:a0:e2:97:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
        Validity
            Not Before: Jul 24 02:01:29 2026 GMT
            Not After : Jul 25 02:01:29 2026 GMT
        Subject: CN=217193daddadf84b41dba7f9db37ab1f478c409e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:50:73:f8:ef:ed:a3:de:d0:c0:93:70:c2:
                    48:c9:e4:67:f8:9e:a4:89:4d:59:e3:c5:99:19:99:
                    13:9d:c9:a1:ce:71:22:af:e9:dd:85:22:25:db:b5:
                    07:a4:ff:9d:d7:94:3a:3b:b8:8a:a6:24:9a:5d:86:
                    27:b6:3f:fb:80:4c:62:a6:c6:91:3b:2d:86:80:af:
                    ef:3b:5a:dc:15:c2:a7:92:70:75:91:c8:c2:b0:e2:
                    2f:ab:49:a0:a1:a2:8e:8d:ce:60:86:35:b8:e9:3b:
                    0e:e5:ec:61:f8:c9:01:9b:a9:ba:5d:62:21:3f:ef:
                    62:2d:63:2c:bf:b0:35:86:0c:3e:7f:65:72:0a:90:
                    f8:59:7f:e7:18:17:09:c9:e3:38:76:55:3f:1e:ba:
                    88:22:17:44:dd:f6:61:20:bf:6e:99:01:60:0b:1b:
                    2c:18:c4:bf:83:13:78:68:e4:56:a3:6b:4b:77:9f:
                    ae:34:a8:af:24:1d:ab:a0:6d:5f:36:3d:62:92:54:
                    c4:46:ca:a4:56:ff:a8:7a:36:9a:bb:c1:46:13:12:
                    b4:e4:ea:7f:0f:d3:b1:46:93:d4:4e:c0:d9:77:0b:
                    10:ec:7e:97:d5:8f:22:1b:ee:aa:53:3c:d9:0c:36:
                    68:e6:db:f5:0a:44:b2:9a:2f:41:0b:c9:5a:67:d0:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:71:93:DA:DD:AD:F8:4B:41:DB:A7:F9:DB:37:AB:1F:47:8C:40:9E
            X509v3 Authority Key Identifier:
                keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:00:a3:e6:27:fb:56:41:20:c6:b2:6b:51:75:ee:f5:2c:0b:
         1a:ff:97:85:d1:a5:3a:b3:d6:f4:ff:20:a6:64:cc:03:2e:c0:
         f8:47:7b:fa:8f:6c:ac:b8:d5:d5:b1:5d:b2:0f:d9:e4:94:89:
         8c:0b:44:08:2a:f6:0c:c7:fd:e5:a7:d8:a3:1b:77:00:69:c6:
         5b:4e:8d:7e:67:10:f4:e0:ce:c4:2d:dc:05:df:20:a9:d1:34:
         60:e7:93:bc:59:ec:62:8a:95:e2:dc:3e:4e:cf:a5:eb:70:0d:
         38:8b:3e:c8:43:0a:cf:1d:63:47:28:5f:92:07:2d:7d:ba:1f:
         1b:a1:51:b4:73:6a:95:81:86:48:a6:fe:8d:73:46:32:3c:25:
         bc:61:70:6a:26:25:67:83:22:f1:ee:79:73:df:74:2e:af:1b:
         ce:c5:1f:ad:07:6b:62:86:8f:f9:39:1f:ba:dc:40:fc:e2:26:
         0c:98:81:66:75:99:ea:71:a5:e4:92:2f:e3:4d:c1:ab:dd:a9:
         0a:8d:e5:3a:05:0e:ab:32:50:fa:5e:f7:71:0c:5d:77:63:8d:
         9e:81:b6:5f:2d:5d:25:40:2b:ed:00:b8:27:56:e5:a8:c2:4d:
         bd:61:09:e4:e2:4b:56:69:40:4e:35:58:6b:73:83:26:cd:7a:
         78:1c:d0:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2zK8mYLr9BOzIPCg4peSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OWYyMjg1NzdmYTkxYjI3MDllNzBiODE5ZmY0NjljNGNj
MmVhOTEwHhcNMjYwNzI0MDIwMTI5WhcNMjYwNzI1MDIwMTI5WjAzMTEwLwYDVQQD
EygyMTcxOTNkYWRkYWRmODRiNDFkYmE3ZjlkYjM3YWIxZjQ3OGM0MDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRNQc/jv7aPe0MCTcMJIyeRn+J6k
iU1Z48WZGZkTncmhznEir+ndhSIl27UHpP+d15Q6O7iKpiSaXYYntj/7gExipsaR
Oy2GgK/vO1rcFcKnknB1kcjCsOIvq0mgoaKOjc5ghjW46TsO5exh+MkBm6m6XWIh
P+9iLWMsv7A1hgw+f2VyCpD4WX/nGBcJyeM4dlU/HrqIIhdE3fZhIL9umQFgCxss
GMS/gxN4aORWo2tLd5+uNKivJB2roG1fNj1iklTERsqkVv+oejaau8FGExK05Op/
D9OxRpPUTsDZdwsQ7H6X1Y8iG+6qUzzZDDZo5tv1CkSymi9BC8laZ9DoIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFxk9rdrfhLQdun+ds3qx9HjECeMB8GA1UdIwQY
MBaAFOifIoV3+pGycJ5wuBn/RpxMwuqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNko4aWhYZjZrYkp3bm5DNEdmOUduRXpDNnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85ZTUyNTktM2QzMS00MDJkLWIzOTAt
NGM4ZmFlNTI5OTM2LzEvNko4aWhYZjZrYkp3bm5DNEdmOUduRXpDNnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85ZTUyNTktM2QzMS00MDJkLWIzOTAtNGM4ZmFlNTI5OTM2
LzEvNko4aWhYZjZrYkp3bm5DNEdmOUduRXpDNnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfACj5if7
VkEgxrJrUXXu9SwLGv+XhdGlOrPW9P8gpmTMAy7A+Ed7+o9srLjV1bFdsg/Z5JSJ
jAtECCr2DMf95afYoxt3AGnGW06NfmcQ9ODOxC3cBd8gqdE0YOeTvFnsYoqV4tw+
Ts+l63ANOIs+yEMKzx1jRyhfkgctfbofG6FRtHNqlYGGSKb+jXNGMjwlvGFwaiYl
Z4Mi8e55c990Lq8bzsUfrQdrYoaP+TkfutxA/OImDJiBZnWZ6nGl5JIv403Bq92p
Co3lOgUOqzJQ+l73cQxdd2ONnoG2Xy1dJUAr7QC4J1blqMJNvWEJ5OJLVmlATjVY
a3ODJs16eBzQrw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:21 2026 by rpki-client