Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File:                     p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier:          eoPRek8OUmyKzHupx0MXAE8GHCLb9MsViNz+3Mk+CdQ=
Subject key identifier:   5E:22:55:C5:42:C5:64:69:20:A8:65:E1:73:6B:44:B3:3F:B5:EE:05
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer:       /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial:       019F94A4EDDFBEB9E2395B1A01EB9177C72C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number:          1608
Signing time:             Fri 24 Jul 2026 15:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 15:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 15:01:04 +0000
Files and hashes:         1: BIbEENkk1VYHKgEjraLUKclwiTY.roa (hash: Xt3A7RQYaDzUTGNw8VMdtqurMB1YlizmqkVXb08fVNk=)
                          2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: 4Y1QU6AGwtA5Nw2bXxuFr7jdAfPcmlxNdmXj3cyNRUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:ed:df:be:b9:e2:39:5b:1a:01:eb:91:77:c7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
        Validity
            Not Before: Jul 24 15:01:04 2026 GMT
            Not After : Jul 25 15:01:04 2026 GMT
        Subject: CN=5e2255c542c5646920a865e1736b44b33fb5ee05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:03:bd:6e:2c:b9:fd:7b:75:4d:ca:ae:4f:
                    21:76:70:89:cf:ff:c9:66:4e:65:ce:5e:45:03:1e:
                    af:65:7d:1a:86:05:9d:7e:6e:98:3c:50:fa:63:41:
                    3e:e0:53:61:d1:3d:02:96:9f:86:1c:51:55:ff:16:
                    c0:2f:bd:66:22:79:f5:47:8c:5a:2e:a9:95:14:0f:
                    30:59:d0:5c:00:7b:f6:cf:90:41:99:fb:83:9c:b6:
                    a7:14:75:79:b0:3d:52:3c:4b:6d:e8:ce:3b:76:61:
                    e6:eb:36:d9:7f:89:78:6b:ae:0c:9b:1d:b8:72:18:
                    43:14:41:ee:57:af:df:29:83:fd:26:6a:b8:9a:ce:
                    b8:09:e4:f9:7a:6b:2c:d4:2a:e8:4c:cc:8f:20:e4:
                    93:6b:1e:95:a4:f1:64:80:f8:ca:d5:e5:76:d5:90:
                    d7:f8:6b:3e:b4:ce:83:af:81:f8:ad:98:66:3b:f0:
                    13:36:f7:a9:1d:f5:b5:97:bc:c0:1a:a5:32:a6:91:
                    76:96:bc:88:d7:b7:b0:39:ef:7e:4d:93:97:e1:3b:
                    00:d9:db:c2:fb:91:9c:c1:0b:12:74:c7:e0:cd:8e:
                    46:97:e5:84:c4:cc:57:d0:3d:b0:f6:2a:1c:9c:fc:
                    7c:f8:24:40:37:eb:cc:d6:aa:85:62:9e:09:bb:45:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:22:55:C5:42:C5:64:69:20:A8:65:E1:73:6B:44:B3:3F:B5:EE:05
            X509v3 Authority Key Identifier:
                keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:95:7e:cc:c3:14:32:1d:c0:a6:f9:ab:2e:12:76:02:1a:95:
         5b:db:70:7e:9d:b9:e1:7f:b4:3d:a3:1d:8f:f2:a4:e4:34:06:
         aa:a9:38:00:ea:85:7b:a5:2d:0a:4d:98:57:b3:97:41:5c:9b:
         df:ed:48:15:44:39:5b:41:91:93:42:c0:ba:50:73:6b:13:4a:
         81:ea:a6:f6:0b:df:14:09:ca:96:bc:fa:4d:d9:1e:f2:fb:00:
         e2:84:78:72:62:69:7f:fb:4f:99:3d:90:57:ee:e1:c2:38:a2:
         1f:13:8a:77:3c:90:5a:bf:6a:be:55:03:f0:39:03:26:6c:80:
         74:92:fc:d5:e0:08:b9:9a:d0:12:b8:66:54:ee:58:e6:80:f5:
         ee:b6:a6:26:63:12:e9:53:eb:1f:22:7a:8e:a9:1e:a0:b0:8d:
         d7:25:94:a4:62:6d:2f:f0:0b:05:cb:d4:26:93:0a:f2:70:ae:
         8b:e9:0f:a5:11:f6:21:db:58:32:34:c9:e1:fa:91:45:79:59:
         bd:c0:e9:da:08:54:bb:8e:8b:b1:6a:8c:55:c2:d9:db:27:a6:
         54:bc:27:27:1a:2c:e9:be:50:31:e2:d4:de:d4:9c:6a:15:49:
         d7:f2:b6:59:58:a6:1d:43:9a:5c:5a:71:0a:b7:76:2c:49:4e:
         b0:ba:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:46 2026 by rpki-client