Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
File:                     6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json)
Hash identifier:          paJt5QeY410L7kXzR9oXd2o5ThQ2r2lU8oCUdjSWA6Y=
Subject key identifier:   3D:F3:8A:FB:5F:05:7B:88:BC:68:72:E4:CF:AE:FD:81:44:B1:44:11
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Certificate issuer:       /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial:       019F90914C221259B445393B75E041B5664E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 20:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:08 +0000
Files and hashes:         1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: 6kSaJrQctdHzU3iwG3ZzpPuIOt0LIU85P0G3K3G8+ig=)
                          2: WY3x6Nj5UF4V6lDGjNvXztQ1Byo.roa (hash: aBowCUk8GvTX31weJsT2u+VJHO3DLPfjbtv1Dgnekcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:4c:22:12:59:b4:45:39:3b:75:e0:41:b5:66:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
        Validity
            Not Before: Jul 23 20:01:08 2026 GMT
            Not After : Jul 24 20:01:08 2026 GMT
        Subject: CN=3df38afb5f057b88bc6872e4cfaefd8144b14411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:5f:2b:9c:4c:f9:29:6d:c5:75:11:5c:9a:
                    17:cb:f2:8a:00:42:71:76:fd:7e:4a:b1:3a:1b:4f:
                    a3:79:02:5f:5e:8a:9f:85:ca:61:4d:1d:21:3c:7e:
                    ca:b4:56:a2:e6:80:f1:2b:b4:25:52:86:06:aa:5f:
                    2d:0b:ef:b8:cc:a9:5d:de:4b:8c:6b:d6:64:f7:86:
                    7f:bb:44:82:39:e1:39:c3:24:53:d9:5a:87:4e:8d:
                    44:18:2b:17:a6:31:30:33:07:d9:0b:fd:1c:65:9d:
                    01:ff:44:34:49:8a:7e:a8:cc:72:03:4c:d0:2d:f9:
                    30:b6:8b:6a:25:fe:b5:b4:ca:1a:da:75:ae:cf:5a:
                    ec:aa:95:eb:e3:5d:d7:43:64:d8:0e:fb:12:22:91:
                    36:14:b3:47:6c:42:61:a9:a4:4d:c8:ca:16:39:0c:
                    13:f9:80:46:0c:b9:f9:d9:b0:73:f9:d8:88:d2:c9:
                    61:19:3f:f4:82:6f:a7:97:95:46:5a:b8:12:4f:87:
                    a6:cb:0f:1e:fc:97:b1:bd:35:70:cd:09:89:75:a2:
                    5d:03:5a:4e:ed:fd:f1:a4:94:ae:02:62:fe:8c:cc:
                    f0:99:1d:70:47:a7:d8:43:b4:b9:64:33:cc:ee:e4:
                    75:67:e8:eb:9d:ec:96:bc:3a:29:b4:9e:52:db:5b:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F3:8A:FB:5F:05:7B:88:BC:68:72:E4:CF:AE:FD:81:44:B1:44:11
            X509v3 Authority Key Identifier:
                keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:b5:f3:50:28:a1:62:bc:da:56:82:a8:21:cc:6c:d5:6c:
         28:40:73:6b:74:11:95:8c:c5:fa:72:6d:3b:6d:f3:dd:f1:41:
         01:64:40:5a:54:2f:ce:4a:96:19:7a:6f:45:21:69:66:2c:26:
         d1:c6:a6:19:8f:e0:66:fb:7a:b9:b3:90:b9:1c:3d:b6:f4:3c:
         cc:ac:0c:84:bb:62:e2:51:61:e7:bd:6b:46:1e:65:14:61:f1:
         d2:96:12:34:27:75:a3:ac:9f:13:60:4d:52:c6:f7:2a:8a:4b:
         11:7c:89:e5:a5:7e:c3:6e:ec:11:da:c6:75:b2:29:22:e9:ea:
         a2:89:66:0b:c2:e4:cb:4d:04:8b:9f:44:1c:b0:1e:94:0e:f9:
         68:5d:57:23:71:e5:f7:ac:bd:c8:4b:8d:40:33:37:17:a3:3a:
         14:ee:2d:4c:42:d3:c3:5a:f9:87:eb:30:ab:23:04:cb:f1:0e:
         a9:32:5f:b6:02:98:e9:c9:2e:3b:09:38:56:f6:fe:61:ff:36:
         73:e2:05:46:bd:a7:61:68:d5:11:6f:86:39:5b:93:a3:ac:26:
         ea:1e:bd:8c:9d:b5:1f:4e:40:3c:87:b6:66:7f:54:86:01:92:
         70:ba:45:fc:1b:47:c3:5f:31:ab:27:59:27:23:e3:9d:36:1e:
         20:c2:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:00:27 2026 by rpki-client