Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          Dlk/lfz52PqF37ZtH0Hxc2L5hfZgCmKWpdzOBdEidvM=
Subject key identifier:   C1:5B:F3:15:63:54:5D:DB:23:46:5B:B8:E6:27:0E:6E:6C:20:99:6C
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       019F90C7AAF8922ECE702450B76FD79A91A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          1958
Signing time:             Thu 23 Jul 2026 21:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:32 +0000
Files and hashes:         1: 576FY0htuOTihVV_Xfh8Gk5YhvE.roa (hash: /NelqJKw0NPqbnl6n4O2sPZR3e1Zlcz8g4NWhOK8/FA=)
                          2: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: IkvpNhCdKNSbSlhP83FP7B7JUERiaaiAOkYPWQnQ4qE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:aa:f8:92:2e:ce:70:24:50:b7:6f:d7:9a:91:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Jul 23 21:00:32 2026 GMT
            Not After : Jul 24 21:00:32 2026 GMT
        Subject: CN=c15bf31563545ddb23465bb8e6270e6e6c20996c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:f2:a4:2c:aa:5f:d0:6b:ca:bf:49:cc:3e:
                    bd:05:f1:82:ca:d7:f7:15:23:91:20:33:b5:c2:d5:
                    ad:6f:af:66:ea:d2:cd:aa:14:b2:c4:88:53:7a:a7:
                    f2:47:d1:2c:ab:ce:72:ec:05:f1:98:0d:4d:7d:76:
                    81:2d:66:34:cf:b3:56:d9:e9:6f:65:9a:e8:b8:ad:
                    35:a2:6a:29:4d:a8:24:c1:52:94:ce:d7:d5:1f:13:
                    52:d9:77:dd:f3:c7:84:e9:5e:ed:79:09:1d:41:4c:
                    18:1d:37:06:5d:a8:58:7c:02:7c:52:b7:e9:bb:06:
                    4b:86:74:2d:d4:3a:c0:b9:50:0f:68:dc:77:61:cb:
                    e1:04:4a:85:50:a7:3c:e2:f0:ed:94:f4:7b:e9:5b:
                    eb:db:05:63:90:5f:7c:24:a0:66:47:c8:75:86:53:
                    a4:87:60:a3:d7:68:91:f4:d6:a8:77:a3:b9:0b:55:
                    13:c5:2c:84:b2:1a:46:c7:24:9b:94:9b:9f:53:03:
                    65:b3:c9:66:72:48:82:79:74:16:e1:d6:f1:17:5c:
                    bd:88:5f:42:eb:1b:44:5a:2b:2e:d6:9a:5a:8a:24:
                    8b:86:26:07:b1:f5:fd:5b:22:40:7c:b8:ef:72:44:
                    c3:2a:d0:44:00:9a:c5:93:d8:05:d3:c9:8e:5d:70:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5B:F3:15:63:54:5D:DB:23:46:5B:B8:E6:27:0E:6E:6C:20:99:6C
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:79:e1:97:ae:71:63:d9:5b:a2:9b:68:e2:7b:5e:7a:dd:81:
         8e:a7:95:45:2f:89:1c:22:5a:d3:d6:32:cc:9c:b8:ad:f4:8d:
         89:f6:8b:80:15:e0:fb:4f:79:1a:1c:58:b9:5b:65:d0:a6:35:
         c4:6e:e8:2f:3d:fc:db:d6:40:4f:f5:d7:a1:78:5c:96:8c:ac:
         91:7c:62:75:4d:f1:8a:88:dd:c2:b6:93:9e:12:ce:8a:04:b5:
         50:ab:28:95:6d:99:34:54:82:c2:6b:55:80:e2:bd:02:16:8e:
         a4:78:88:9f:c1:e6:0f:b8:65:34:b7:4b:c5:cb:81:de:23:36:
         68:e1:7d:ad:c6:58:3b:35:74:f5:59:01:2a:95:73:88:23:99:
         d3:ce:c5:02:76:70:ed:18:e4:94:4b:05:1a:ad:83:11:66:96:
         40:a0:ee:37:3c:c4:b6:a3:82:9c:c6:72:8c:02:86:15:3c:14:
         14:41:ff:3e:9c:4a:7f:0b:69:da:d7:37:11:83:1f:1a:00:45:
         1c:ae:93:44:d0:fa:a2:0e:6d:3a:a1:54:c1:aa:e4:0a:23:5c:
         88:ed:b7:77:cc:70:1d:a0:2f:15:47:9c:14:33:09:f2:4e:05:
         ca:cf:14:c4:52:88:49:1a:7a:a1:04:70:82:b5:e5:89:1c:21:
         22:4a:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:46 2026 by rpki-client