Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
File:                     1peKb6yHM4CG9TacW0AhsIBhHlc.mft (raw, json)
Hash identifier:          FLbO6VNpYdLs3jnUJVz5fBFYV4wy5aqqqZQ6JlyF0yw=
Subject key identifier:   6A:81:9D:EE:B3:8B:13:22:CC:78:55:5F:04:A8:49:8F:47:54:9B:E2
Authority key identifier: D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57
Certificate issuer:       /CN=d6978a6fac87338086f5369c5b4021b080611e57
Certificate serial:       019F91A41E1611C08B5FB99561FA6680DB67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
Manifest number:          05FE
Signing time:             Fri 24 Jul 2026 01:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:19 +0000
Files and hashes:         1: 1peKb6yHM4CG9TacW0AhsIBhHlc.crl (hash: GoeeU8ZVD1JS1OOpSbb33jmwaYX8OW4jOgmDXoiIiEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:1e:16:11:c0:8b:5f:b9:95:61:fa:66:80:db:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6978a6fac87338086f5369c5b4021b080611e57
        Validity
            Not Before: Jul 24 01:01:19 2026 GMT
            Not After : Jul 25 01:01:19 2026 GMT
        Subject: CN=6a819deeb38b1322cc78555f04a8498f47549be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:32:02:f1:e8:ed:29:fa:49:eb:2a:b9:02:
                    2e:4c:9b:58:b7:9e:f3:df:60:8e:3a:71:c4:43:19:
                    54:70:b9:3c:dc:ca:a9:7c:8f:3d:53:26:a9:f5:57:
                    53:12:ba:48:42:be:62:73:80:98:f6:a4:cd:05:6c:
                    82:2a:19:23:03:cb:3e:10:26:ce:a3:af:a5:ef:0b:
                    ae:67:1c:91:6b:d8:29:75:c2:89:9a:ca:9d:3d:2f:
                    9e:31:b0:7b:ad:c2:4c:75:41:68:c2:24:22:cc:a3:
                    8d:5b:ce:c6:f0:94:7e:96:e6:5e:0a:aa:1a:e2:4d:
                    0d:fd:03:ad:8d:1b:af:a0:1f:b1:24:b3:66:46:4e:
                    39:bc:55:ff:c1:1b:9d:5a:9f:c9:14:03:fe:c1:40:
                    c5:ae:d8:2d:3f:60:25:f6:bf:66:f0:9b:78:18:b5:
                    53:fd:9d:7f:e4:25:93:dc:c7:5a:7c:50:ea:23:d1:
                    fb:87:66:b9:0d:08:ab:a0:19:13:c5:b0:f6:c8:46:
                    ad:36:74:72:d0:60:1c:89:2b:a5:a3:2e:92:c5:03:
                    bb:14:df:9a:e0:27:16:a5:de:f0:1d:eb:cc:e3:ab:
                    28:77:ad:00:ee:1e:77:13:84:af:c6:08:20:42:5c:
                    ea:ce:10:ec:7b:97:73:80:5c:2c:ea:7e:cc:b4:3b:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:81:9D:EE:B3:8B:13:22:CC:78:55:5F:04:A8:49:8F:47:54:9B:E2
            X509v3 Authority Key Identifier:
                keyid:D6:97:8A:6F:AC:87:33:80:86:F5:36:9C:5B:40:21:B0:80:61:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1peKb6yHM4CG9TacW0AhsIBhHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/870596-98ad-47b9-a788-43e70977a70e/1/1peKb6yHM4CG9TacW0AhsIBhHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2b:dd:f1:e6:91:76:02:73:53:ef:8c:ac:bd:fc:20:e0:9e:
         80:22:93:52:a3:16:76:d2:09:7a:02:be:c0:06:2a:9c:ff:21:
         71:b5:60:1c:52:1f:63:7f:31:d3:8c:d1:96:0f:5f:65:02:42:
         2a:26:0d:e8:5a:17:93:16:69:df:cd:2a:c2:8a:98:3f:ea:66:
         98:4c:c6:7a:cb:53:d2:c8:18:02:37:1e:f1:8a:a1:b2:0e:70:
         c3:76:8d:b9:1f:c5:f6:1a:8b:9e:54:47:53:b9:92:9b:2f:58:
         83:96:ab:31:3c:9f:02:db:ae:75:85:2a:fe:c1:68:f5:03:17:
         a8:45:b9:bc:8e:8a:f2:cf:ce:0d:e9:bb:17:bb:c8:8c:11:3f:
         12:0b:a5:3d:a6:66:90:ef:fc:52:85:80:d1:b8:ef:0e:df:21:
         8d:12:d1:07:2f:e0:43:3c:9c:18:d0:1a:07:3e:ca:e2:8a:db:
         0a:ad:cb:fb:11:08:d4:6e:1e:0d:05:6c:7b:9e:9d:27:c9:b2:
         87:c0:69:20:3d:2c:df:3d:16:bc:47:9d:85:70:72:13:e2:35:
         40:9b:6c:3d:bd:3a:31:23:fc:ba:0c:ec:ec:4c:20:6e:d3:8b:
         2c:c3:e7:d2:7f:a2:53:ba:81:b1:a3:63:75:23:f3:ca:49:89:
         98:99:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:45 2026 by rpki-client