Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
File:                     _kTUEsldodkpQxr8aSuUnlnZcFc.mft (raw, json)
Hash identifier:          dhTB3fMykoK1/Q2wWxzqkX/ur0EyohyjXDTddyYA6yc=
Subject key identifier:   EE:4B:09:54:F9:4F:B4:8C:06:C5:D7:72:3F:0B:6B:FF:CF:66:05:40
Authority key identifier: FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57
Certificate issuer:       /CN=fe44d412c95da1d929431afc692b949e59d97057
Certificate serial:       019F951228C562EBB18304D4616F5C17B029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
Manifest number:          6B
Signing time:             Fri 24 Jul 2026 17:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:22 +0000
Files and hashes:         1: TJ6EwuPrr5uIHsY5npEQCjBNFcA.roa (hash: D3hZNlRBwUcocdYaP+buhwXKanIL4lhbGESYtXOauJE=)
                          2: _kTUEsldodkpQxr8aSuUnlnZcFc.crl (hash: omOB/T8P/rq4VrIt01cTdPvWghlnjB37Zi0g9LpiCI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:28:c5:62:eb:b1:83:04:d4:61:6f:5c:17:b0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe44d412c95da1d929431afc692b949e59d97057
        Validity
            Not Before: Jul 24 17:00:22 2026 GMT
            Not After : Jul 25 17:00:22 2026 GMT
        Subject: CN=ee4b0954f94fb48c06c5d7723f0b6bffcf660540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:31:d6:4a:c0:19:f7:c7:a4:fc:eb:91:c3:
                    b4:47:46:35:aa:22:b9:3d:15:f2:7c:f3:eb:f6:07:
                    ac:3d:f1:bf:01:64:0e:66:70:6e:0d:70:a8:d9:14:
                    4f:b3:f5:f1:81:52:dc:89:91:b6:5c:04:c6:39:9a:
                    0b:01:be:11:d2:ab:5d:38:5b:80:ad:8c:a2:49:3b:
                    43:be:90:b6:c5:85:ea:3e:e9:f9:1e:39:bc:0a:3c:
                    8a:a6:ea:2f:bd:00:23:fd:67:7e:a7:18:d8:22:b1:
                    12:f8:63:f4:f2:fe:a4:94:ec:91:a4:a1:4f:f8:4c:
                    17:7b:59:00:13:80:e7:7b:04:94:68:b3:0c:83:bd:
                    31:af:bd:4a:15:91:c9:c2:6c:be:d2:b6:10:8e:b6:
                    7f:15:eb:ac:56:1b:12:54:24:e8:67:b7:6e:44:d1:
                    6d:3c:90:16:98:fe:a8:df:20:2a:0a:b9:e4:8e:60:
                    41:04:c7:6b:93:30:14:5d:c6:7a:d5:f1:43:24:5a:
                    3b:65:61:d2:00:ea:2f:0f:27:90:de:ce:7c:24:dc:
                    8b:00:00:43:3b:9d:2d:80:d6:ca:95:a6:ea:55:8f:
                    7d:7e:e8:74:2d:65:e8:54:e5:3c:f5:c1:98:84:bd:
                    5d:7a:c9:c2:e4:eb:f6:68:f5:45:6c:0a:66:12:85:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4B:09:54:F9:4F:B4:8C:06:C5:D7:72:3F:0B:6B:FF:CF:66:05:40
            X509v3 Authority Key Identifier:
                keyid:FE:44:D4:12:C9:5D:A1:D9:29:43:1A:FC:69:2B:94:9E:59:D9:70:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kTUEsldodkpQxr8aSuUnlnZcFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/5e0875-7a75-4830-a42b-cfde434baea7/1/_kTUEsldodkpQxr8aSuUnlnZcFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a7:be:42:b4:76:01:6a:b2:d5:0c:b7:f4:ef:a9:f9:ee:fb:
         25:17:88:45:22:7a:63:54:72:54:c4:6d:60:41:ed:e6:a1:1b:
         05:b3:eb:47:65:e8:39:a6:5f:2f:60:5e:02:2e:28:1c:e8:20:
         0c:03:21:21:31:b8:3c:82:03:d4:a7:16:73:05:ab:3b:7c:41:
         b9:23:bf:f1:66:99:4c:46:d3:b6:b0:cc:b8:a2:ab:2d:d4:fb:
         a7:7a:23:bb:39:3c:64:16:ce:25:d0:8b:32:22:96:08:1a:c9:
         66:3b:5f:62:82:1d:8a:e9:a0:c6:03:f3:ec:a9:35:56:9d:77:
         a4:62:3f:92:00:8d:b0:65:60:b6:9d:cb:27:b3:fa:e5:a4:01:
         4b:fa:ff:cb:5f:bc:eb:57:83:4f:66:21:3f:28:bf:94:15:8c:
         81:d5:f0:3e:35:96:9d:1f:04:9d:22:23:3e:46:74:cf:2a:f8:
         54:5a:53:6b:9b:73:72:7b:42:c8:9f:b0:fd:2b:24:38:d8:a3:
         fb:82:47:19:22:28:4b:ad:c6:b2:74:b0:57:13:30:5e:ea:64:
         76:d8:fa:10:80:13:7f:af:9e:a8:cf:da:7d:07:7e:45:d4:ad:
         bf:3a:28:10:7b:9c:0b:28:f4:a1:e4:6e:94:b7:a8:8c:e8:87:
         79:3f:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:27 2026 by rpki-client