Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
File:                     6GrbI8qN8eRywln14Jz-ia4lARI.mft (raw, json)
Hash identifier:          LA+idBYPSjvNYIJl/q6fv9pvcm3GjFrZcRdSVozdgeA=
Subject key identifier:   CF:35:A6:20:59:95:86:84:A1:1E:8C:77:BE:A9:93:64:66:BF:CD:B9
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Certificate issuer:       /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial:       019F9090C6EC62059D1955801005E4E67CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
Manifest number:          0EAA
Signing time:             Thu 23 Jul 2026 20:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:34 +0000
Files and hashes:         1: 6GrbI8qN8eRywln14Jz-ia4lARI.crl (hash: j3FL29DqmqRajKLlvBDS84ZTho97ndv8KNEom03ZiTE=)
                          2: jalRR1qf4gkRSHcE337u9bWw_gA.roa (hash: wlzbEgEP0/Wpmn8I5QNTgk6aKSZpv2Z3WVVZUuK0r98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:c6:ec:62:05:9d:19:55:80:10:05:e4:e6:7c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
        Validity
            Not Before: Jul 23 20:00:34 2026 GMT
            Not After : Jul 24 20:00:34 2026 GMT
        Subject: CN=cf35a62059958684a11e8c77bea9936466bfcdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:7c:16:c2:e9:75:37:16:60:18:a0:8c:e1:
                    d2:29:6a:39:b3:c9:da:39:90:a0:6b:3c:cb:44:5f:
                    bb:f7:64:a6:0e:87:5a:05:0d:0c:dc:9a:3d:b9:3f:
                    6b:60:eb:b0:90:b5:52:47:c3:02:6d:69:92:f5:6f:
                    bb:3c:3e:b5:5f:d1:40:63:98:c4:67:9f:fb:cf:f5:
                    d1:a3:82:49:89:44:34:a6:2c:1f:a0:b8:d4:bf:d5:
                    bd:be:8c:13:0f:b9:81:07:c2:1e:ed:c2:8f:9b:19:
                    f9:fe:c0:f9:e4:31:0d:25:46:18:c3:27:f3:54:3e:
                    bf:f0:39:21:b2:2b:74:8b:dd:79:68:39:3b:26:a5:
                    22:85:f7:60:1f:af:f3:4f:30:3a:52:cf:f4:11:9a:
                    f0:01:48:a8:3c:0a:99:9e:85:ea:45:02:85:c7:89:
                    17:9e:09:59:1c:48:32:63:d5:58:fd:e9:44:bf:2e:
                    69:8d:78:ba:75:0f:90:51:cc:b5:43:36:4e:ae:86:
                    3e:8d:24:38:93:c1:ee:75:d2:18:2f:fa:23:7e:1b:
                    a4:99:53:74:12:21:bf:c0:5a:81:82:d8:03:c5:0d:
                    66:d2:bc:bb:26:a8:f4:18:c9:38:91:b1:4b:76:5a:
                    18:56:8a:4e:f3:52:ad:14:3a:a6:fa:dc:4f:5d:b9:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:35:A6:20:59:95:86:84:A1:1E:8C:77:BE:A9:93:64:66:BF:CD:B9
            X509v3 Authority Key Identifier:
                keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2e:a1:71:ca:df:e1:9f:60:a4:ce:96:18:7a:01:98:cd:40:
         7d:ba:7e:f3:30:ed:6a:59:81:86:0e:b9:9f:e3:c9:31:d4:0e:
         33:ac:58:ae:c3:ec:d2:93:8a:1e:4f:34:ca:30:d3:d7:e4:d0:
         87:12:a7:6c:6b:f2:03:4f:04:bb:a3:c7:a9:24:88:b2:ba:79:
         42:a6:6c:e5:b6:99:7c:d1:cf:fa:a1:c8:36:f6:fc:d0:8d:6a:
         cf:22:5a:47:57:0f:75:94:c1:a9:f9:c6:c7:e1:ce:d0:ab:7d:
         0f:46:48:60:f6:5c:10:55:7b:0f:69:13:6c:76:01:fb:f3:6b:
         cf:10:f2:72:c2:97:c4:37:07:9d:f9:bf:13:20:c5:d6:d4:45:
         92:b3:65:e2:e5:6c:f7:fe:f2:ec:c7:f5:de:10:27:05:b0:64:
         d9:00:2e:0a:27:80:1c:71:f9:c2:fe:f8:86:db:a9:1d:1e:96:
         43:b5:e1:09:0a:da:e4:c9:9e:c9:8b:00:8b:38:bf:e3:09:ae:
         33:39:ee:17:63:68:d9:bf:f8:7d:b7:48:28:69:23:fd:8c:3b:
         a5:e4:1f:58:5d:b7:db:ea:f1:d2:88:ee:a9:aa:d4:3d:28:1f:
         79:e5:57:18:45:da:82:4f:60:f7:94:2f:49:a4:e2:40:14:ca:
         a6:e6:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:29 2026 by rpki-client