Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
File:                     S6P83Yf0VkMMzLLYY45hSM06Euw.mft (raw, json)
Hash identifier:          HB4Il8uOfAJuV2jBAjIGFZfxY1paYCYo0RvGMM8wloU=
Subject key identifier:   C2:26:8F:26:C0:8B:1B:04:E2:31:54:EB:7B:BE:0A:3F:AF:C7:69:1E
Authority key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Certificate issuer:       /CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Certificate serial:       019F9247F4C5BE7F7E014FF3E65AF1DE20BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
Manifest number:          15AE
Signing time:             Fri 24 Jul 2026 04:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:16 +0000
Files and hashes:         1: S6P83Yf0VkMMzLLYY45hSM06Euw.crl (hash: EvIOUfx236et438eLe/O/tfHiMYtKqwMtjBmbbLalA0=)
                          2: e00t2uQN2x6AALR6Zv-pMtX9Uso.roa (hash: 2VUUHmJNv7sW4c7eLdBTCaF2NFHtBH7birXANxXDVxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:47:f4:c5:be:7f:7e:01:4f:f3:e6:5a:f1:de:20:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
        Validity
            Not Before: Jul 24 04:00:16 2026 GMT
            Not After : Jul 25 04:00:16 2026 GMT
        Subject: CN=c2268f26c08b1b04e23154eb7bbe0a3fafc7691e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:10:fc:cc:d1:8a:df:00:de:52:01:ac:b3:
                    96:6e:3a:bd:85:96:8c:5b:06:11:7b:18:c6:f9:b1:
                    92:9a:56:45:6e:e2:aa:ea:0c:08:c8:09:8a:c2:b7:
                    e1:96:f2:c0:26:9d:44:98:ed:c5:aa:a9:b3:8d:4b:
                    8f:c1:5c:94:11:4c:85:4f:dc:a9:90:ef:c1:73:d5:
                    5d:05:b0:34:48:11:c4:96:4d:8f:61:6a:b3:b9:93:
                    44:c5:b2:58:79:6b:1f:46:c1:a9:36:4a:22:c3:aa:
                    bf:d4:14:26:5c:a2:0c:b2:65:ae:9b:7f:7e:21:f9:
                    2a:c9:8d:4d:ce:f8:f2:f8:d8:7b:f4:a1:3f:6b:58:
                    15:2e:dd:d1:68:2e:43:a1:63:fd:db:e1:55:8d:cf:
                    ed:cb:d5:81:d0:60:38:c7:80:92:c9:62:29:a3:0e:
                    99:d2:25:32:ac:54:62:1b:56:b3:aa:3a:e6:4f:6a:
                    c5:c8:6e:67:33:c4:5a:ae:6e:b1:d8:62:d6:3c:45:
                    56:ce:4f:61:60:ac:de:30:c7:ac:05:80:40:da:6a:
                    9b:ae:4f:13:78:21:81:f8:60:7d:18:c5:59:8d:99:
                    06:9b:0c:ff:82:88:4b:a9:9a:7a:4e:70:b6:22:c3:
                    c7:0e:e5:1f:d2:0c:a2:42:ba:34:14:b3:c6:7c:c6:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:26:8F:26:C0:8B:1B:04:E2:31:54:EB:7B:BE:0A:3F:AF:C7:69:1E
            X509v3 Authority Key Identifier:
                keyid:4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:a9:68:fe:b2:f1:8b:81:cd:27:4c:bc:73:eb:c6:3e:7a:
         07:4e:2f:52:22:68:75:08:41:d6:7c:fe:7b:fd:c4:e1:ad:f6:
         e6:82:40:17:f3:8a:c1:15:0f:43:ba:d7:d1:e0:5a:60:44:50:
         67:b2:7c:dd:5b:66:ec:02:85:8c:0b:7f:1d:5b:0e:06:5e:98:
         5c:ea:bf:8f:18:c0:f1:0c:e5:a4:22:80:8f:82:be:8c:52:5b:
         5b:4d:08:a2:4b:0c:73:ef:31:e5:73:0a:58:61:fd:b7:c6:2a:
         e7:72:17:ec:e9:51:d8:77:aa:35:aa:44:98:0e:72:c1:26:3d:
         43:47:84:20:6e:5f:10:26:09:5c:97:52:d0:95:3f:ba:36:9b:
         3b:00:06:78:ae:b3:32:fc:36:1a:cf:f6:70:2f:c5:ff:22:7c:
         9d:41:19:e9:e2:44:c2:ec:9b:ca:f4:ae:45:f7:78:63:97:36:
         78:07:a5:39:b6:49:f8:f2:2a:81:88:24:c8:1c:95:0a:3b:a2:
         f0:e6:2f:58:21:29:b3:cd:ac:4e:75:81:59:24:8e:81:ee:d8:
         8d:77:d9:59:f7:e0:ce:5d:5b:58:c2:ca:cb:0d:62:2f:ea:23:
         69:38:bb:65:d6:c6:7a:5e:16:98:2f:fe:c0:d1:0a:17:f7:96:
         32:4b:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:11 2026 by rpki-client