Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.mft
File:                     6cm5K7eDOsOTK_1gwFUw929-BLM.mft (raw, json)
Hash identifier:          JQ5P1PlxZtle742ve31/U8v5b57u5R8frdRn/qYqH8c=
Subject key identifier:   75:CE:B5:BA:0E:DC:BD:FB:6E:DB:EC:58:41:3B:AE:89:DF:EB:03:A6
Authority key identifier: E9:C9:B9:2B:B7:83:3A:C3:93:2B:FD:60:C0:55:30:F7:6F:7E:04:B3
Certificate issuer:       /CN=e9c9b92bb7833ac3932bfd60c05530f76f7e04b3
Certificate serial:       019F8F7F8C13C0D68AA9854B68724FF5D6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cm5K7eDOsOTK_1gwFUw929-BLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:02:08 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:08 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:08 +0000
Files and hashes:         1: 6cm5K7eDOsOTK_1gwFUw929-BLM.crl (hash: cMktp9LPLEYw5/s88G/WBXbw6Ajb1Udn1rcs9qUvf9U=)
                          2: Vx2J0bpfWMzyjlL9mfNC2auizWI.roa (hash: cBDKv5xcPQSOxBecnJ9ffWD+3btW0rvxx/deQjtZpC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cm5K7eDOsOTK_1gwFUw929-BLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:8c:13:c0:d6:8a:a9:85:4b:68:72:4f:f5:d6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c9b92bb7833ac3932bfd60c05530f76f7e04b3
        Validity
            Not Before: Jul 23 15:02:08 2026 GMT
            Not After : Jul 24 15:02:08 2026 GMT
        Subject: CN=75ceb5ba0edcbdfb6edbec58413bae89dfeb03a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:0c:9d:d4:4c:14:af:85:62:4f:a7:86:6e:
                    13:d1:63:ab:ba:8e:d8:67:81:4a:a5:2b:85:7b:d1:
                    a3:6f:24:5d:3f:73:bb:39:3f:7e:33:b7:97:b3:b3:
                    a8:c1:7c:2b:43:d0:4b:3f:e9:34:df:c3:97:55:41:
                    60:ca:e5:e9:80:9a:1f:cc:a4:13:f3:8c:17:06:6b:
                    6e:68:6e:83:39:50:8f:ff:ae:b7:a3:0d:de:0f:65:
                    b3:c6:7d:28:fe:36:7d:0d:16:70:80:2e:7f:d4:bc:
                    2e:e5:2a:7d:47:51:5d:8e:ef:91:19:8e:e0:c2:f1:
                    1e:5e:af:92:d1:a0:7e:49:48:96:e0:87:20:87:80:
                    f5:ae:11:76:e5:35:11:ac:ea:37:92:36:a4:fe:a3:
                    b2:f9:b3:92:b7:a4:9d:39:45:6d:f6:84:19:86:a3:
                    cb:a4:01:0a:cb:e8:eb:d6:06:79:7e:e8:5f:08:56:
                    a1:4b:23:67:5e:dd:8a:cb:3a:ce:a3:57:de:e5:35:
                    84:e1:fa:3f:aa:5b:73:7e:89:9b:93:a5:c3:8e:40:
                    ce:05:4f:80:56:66:a6:d2:18:fa:7d:b3:c9:bb:73:
                    4a:58:d7:b7:21:77:d1:13:53:90:02:ba:79:76:15:
                    74:78:74:0f:2e:44:cd:59:22:fa:a8:79:7e:7b:c8:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CE:B5:BA:0E:DC:BD:FB:6E:DB:EC:58:41:3B:AE:89:DF:EB:03:A6
            X509v3 Authority Key Identifier:
                keyid:E9:C9:B9:2B:B7:83:3A:C3:93:2B:FD:60:C0:55:30:F7:6F:7E:04:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cm5K7eDOsOTK_1gwFUw929-BLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7296b9-8dc2-4a7d-883b-54fc81b771b4/1/6cm5K7eDOsOTK_1gwFUw929-BLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:11:12:9f:88:fb:4b:a1:03:57:90:d9:72:0c:99:17:82:ac:
         dd:dc:8c:5e:10:12:8e:0f:b6:7d:2e:e5:52:62:b4:04:5c:1a:
         44:7c:cf:2e:6f:a4:cd:3d:f1:7b:91:b2:00:c5:2f:f8:f2:d8:
         7b:66:56:0e:f5:41:73:c0:1e:51:d5:76:06:1f:09:d1:f7:d9:
         91:22:82:34:18:cc:ea:56:42:e1:9e:e3:79:16:76:66:d8:0b:
         02:fd:69:a5:6f:d4:39:73:08:98:66:14:14:12:8d:ae:27:d1:
         06:3d:4c:79:b8:3b:60:a6:70:b3:3c:42:eb:f0:ea:2c:19:b5:
         5b:cf:e4:4e:96:f8:fa:47:e3:5d:90:7f:4b:27:84:ea:0b:ff:
         91:13:a3:a2:d6:28:84:1d:a9:6d:80:11:85:73:93:4a:ce:16:
         2e:4d:8d:da:01:64:5c:cc:65:60:6f:12:02:97:60:69:54:7f:
         7d:5e:29:8e:d4:2d:af:0e:28:45:45:20:e5:69:3f:b7:ff:bf:
         e6:25:f2:31:a0:6f:28:a3:b4:69:89:3f:97:4f:99:92:02:53:
         67:d6:d5:e2:5d:45:86:11:85:1f:75:c1:ff:04:9e:02:3f:bf:
         33:f1:7c:cd:43:00:34:a0:07:62:6e:8c:c4:a5:56:15:01:95:
         27:86:40:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:47 2026 by rpki-client