Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File:                     6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier:          D++RyLRjilw/y/Pwz551PhVBPDZV2jHwN1L3pVqXdlE=
Subject key identifier:   7F:E0:D2:2C:E2:42:74:B0:E8:C9:38:E7:B0:65:4E:14:07:AF:62:73
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer:       /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial:       019F8EA2A19082B265DD2649C3F30BB5F61B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number:          0257
Signing time:             Thu 23 Jul 2026 11:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:50 +0000
Files and hashes:         1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: 2mhv+EoAnSaGBJ7mbrqWVMgBVqvxOq65iqds9SQj7M0=)
                          2: H34_SM699ZKERT6hxcJhZ4iWFhA.asa (hash: LcP5vILTWhpM9U0pUBj8DZKaMz5evKsVfP9lC5BGBCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:a1:90:82:b2:65:dd:26:49:c3:f3:0b:b5:f6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
        Validity
            Not Before: Jul 23 11:00:50 2026 GMT
            Not After : Jul 24 11:00:50 2026 GMT
        Subject: CN=7fe0d22ce24274b0e8c938e7b0654e1407af6273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:6c:19:91:21:c9:76:9f:36:e0:d6:db:9b:
                    b7:99:71:fe:de:57:e8:cf:3e:74:cf:0f:47:91:21:
                    0e:54:ab:6e:74:e6:b8:a3:97:23:7b:07:45:a3:20:
                    cb:6e:85:60:dc:0c:b5:bf:69:e1:55:f2:b7:f4:04:
                    03:7f:9f:a4:b2:f6:6b:e5:c8:63:a7:98:db:f2:d5:
                    cc:70:a0:6d:77:66:82:0c:84:4e:07:fd:46:f0:47:
                    1b:84:ec:1c:40:8e:f4:2d:53:b6:ef:6b:39:ff:68:
                    b0:65:5a:d5:c8:6c:ac:f1:92:ec:be:8e:9d:10:53:
                    83:84:94:bb:2b:80:e5:0c:59:de:52:b9:6e:21:50:
                    13:21:07:08:05:2a:a8:98:39:e9:e9:50:b5:50:fe:
                    94:bb:8c:3d:51:b6:5d:e0:61:7e:4c:42:7d:7a:c2:
                    9a:60:6d:a7:c4:3a:c8:5e:af:ac:85:b2:59:e0:71:
                    b3:59:6b:8b:3e:89:d3:9b:f5:cb:72:1e:d5:78:64:
                    27:77:1c:28:6a:6f:34:d9:38:78:d9:1d:15:40:44:
                    55:31:76:c9:52:44:ec:cd:ef:ce:00:4d:06:d6:0b:
                    9d:03:22:c3:f2:fa:ab:9e:4f:87:ae:77:94:71:22:
                    c5:e4:6a:da:a7:19:14:97:d2:4a:0f:6b:0c:be:ee:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E0:D2:2C:E2:42:74:B0:E8:C9:38:E7:B0:65:4E:14:07:AF:62:73
            X509v3 Authority Key Identifier:
                keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:4e:91:5e:c7:ec:28:78:44:6a:00:fc:24:1b:e6:e1:5a:80:
         81:e3:07:3c:cb:62:a8:09:cf:7f:60:88:4c:b2:bc:22:59:c1:
         11:8c:77:31:75:91:80:75:bc:8d:13:17:f5:24:02:85:cb:79:
         ac:a3:8f:10:fb:9a:e0:5a:30:3b:d4:45:6f:1c:6e:82:21:60:
         17:96:8e:8d:dc:89:a6:f3:5f:5a:36:83:4e:8a:20:46:3b:74:
         0e:a3:08:33:5d:f2:43:8c:6f:9c:bf:0b:43:b8:6d:38:25:38:
         15:dc:17:c6:67:24:25:87:22:e1:bf:3b:33:a0:c7:17:1e:62:
         2d:8e:a8:41:69:5a:a8:a7:cf:76:f8:7b:7f:80:45:48:a0:47:
         af:7d:93:b3:3f:a3:44:cc:39:e7:d7:24:8d:e7:81:06:2c:ee:
         68:4d:39:3d:c1:3a:b0:35:a1:75:ba:c9:64:35:a0:ff:b8:5a:
         55:88:da:b8:87:98:78:42:94:b1:07:a7:44:eb:69:1a:a9:46:
         1c:74:dd:6e:1d:1e:a2:be:5e:c8:a7:bb:53:a4:cc:c9:41:0e:
         35:39:10:f8:5c:f2:ad:92:67:f3:df:fb:96:ab:f0:24:d1:c5:
         cf:32:8b:60:8b:69:b5:84:03:ff:88:da:27:41:91:42:8b:d9:
         46:9b:a0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:10 2026 by rpki-client