Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          TXkg65oFRT+58W7HFAOy2YPAZuDDIEtdROOCgMEIpH8=
Subject key identifier:   0B:9C:F0:2B:D1:24:DB:19:81:B4:D2:EB:5A:93:DD:53:A2:69:6A:5C
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       019F90FEC3055B9A078E56EE8224AE5286D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          10AD
Signing time:             Thu 23 Jul 2026 22:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:42 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: zI0WtEppIIFaF6Hb82aocLyH3PFnc4IUnXdHa/PQjco=)
                          2: BHtYTKXAhvuK5qQH2dMZrKgOMHg.roa (hash: x0aDgSbM0k6Qn4DXz0HQEQO8d3rc25aCpgfGk0kEatY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:c3:05:5b:9a:07:8e:56:ee:82:24:ae:52:86:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Jul 23 22:00:42 2026 GMT
            Not After : Jul 24 22:00:42 2026 GMT
        Subject: CN=0b9cf02bd124db1981b4d2eb5a93dd53a2696a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:8d:e1:44:cf:87:bd:4b:53:70:de:22:8f:
                    a3:e8:e5:e4:a6:d1:91:cc:c5:30:be:fc:14:81:e9:
                    96:d4:f6:33:8b:4a:69:17:43:45:9a:9e:80:72:4c:
                    1d:de:c3:dc:a0:a2:b1:5b:1c:ab:4e:99:28:de:99:
                    7a:ae:33:3f:17:2c:51:71:c0:e2:61:86:77:b3:49:
                    e2:e4:42:09:11:ba:49:6b:bc:67:14:ff:f8:e6:45:
                    8b:ed:1c:62:8e:4c:b8:84:df:3a:93:6b:0a:cd:14:
                    58:fb:f4:53:b7:48:88:bd:5e:c1:ed:f7:5c:d9:7e:
                    4e:27:3a:68:d3:59:aa:49:02:11:cc:02:f0:e9:54:
                    0e:0e:35:53:94:76:6d:99:4c:a1:1b:b8:8e:d2:0f:
                    fb:a5:36:8c:fa:e2:42:8f:c6:f0:fe:c7:6f:ca:bc:
                    19:64:a5:8a:6e:43:ed:76:94:75:ee:93:32:43:a6:
                    73:79:ce:cd:af:ab:4f:01:10:85:83:f5:07:f5:f3:
                    71:79:e3:b5:db:ef:40:b9:04:74:d8:e5:b0:86:7d:
                    45:3d:96:df:37:b3:63:90:c9:0a:a1:5c:31:9d:2a:
                    11:d0:e7:81:19:e1:68:1c:86:33:36:ee:7a:5b:e4:
                    ed:2d:6e:47:6c:b9:41:e8:89:22:41:31:57:7e:d2:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9C:F0:2B:D1:24:DB:19:81:B4:D2:EB:5A:93:DD:53:A2:69:6A:5C
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:78:11:8d:0c:11:7a:d5:87:bc:66:a8:30:6b:ac:8f:a8:a6:
         93:6a:82:56:f7:4d:1b:08:79:07:63:9c:5b:e9:4b:28:1d:ba:
         29:83:13:f1:cf:51:3a:dc:1a:e9:31:c5:be:11:36:3f:df:3f:
         17:be:5d:75:a3:ee:f0:3a:59:97:e8:24:fb:98:ad:5f:0c:34:
         a3:8a:c9:58:9f:ac:7b:97:9b:3f:a8:62:1d:26:f9:9f:f3:df:
         3f:bd:46:4a:b6:ca:79:69:33:6d:cd:47:a6:07:58:9d:df:a2:
         d8:9e:94:ca:95:a0:97:f0:01:74:8a:60:ad:0b:e3:d0:2f:58:
         3e:38:63:97:44:86:b7:79:3b:f7:37:38:11:12:c5:27:62:72:
         9d:7a:fc:25:97:68:9b:c2:f5:b2:f2:61:df:4e:2f:6d:9d:5e:
         82:6b:93:1a:7b:34:1f:f0:58:0c:c6:4f:80:d0:a2:39:5e:f0:
         af:4c:c9:5e:f2:cd:70:15:d9:89:13:60:5c:49:64:2d:0c:9a:
         83:89:eb:8e:ec:e0:55:e3:89:a0:e5:b7:d0:e6:26:69:e8:b1:
         7e:76:33:03:7e:a5:fa:74:a9:20:84:0e:7e:82:87:ec:f3:a9:
         6c:1d:b1:2b:8e:2f:b1:4a:ed:fc:77:08:42:2b:81:20:05:5e:
         31:60:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:34 2026 by rpki-client