Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File:                     aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier:          gemY4McKd8lu77fgdBe2i1j4N2utuy17dMWYLGknAZM=
Subject key identifier:   DE:A0:AC:B0:C0:A5:92:3B:B3:75:1F:97:D9:DA:15:AD:38:7E:D2:1A
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer:       /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial:       019F935C1D5929C6DE985609B0078A4F663B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number:          06EE
Signing time:             Fri 24 Jul 2026 09:01:55 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:55 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:55 +0000
Files and hashes:         1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: KSNIkq9nFkebX2YOu1Cc82O1YBv8pAnZ4w90g8WHH/4=)
                          2: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (hash: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:1d:59:29:c6:de:98:56:09:b0:07:8a:4f:66:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
        Validity
            Not Before: Jul 24 09:01:55 2026 GMT
            Not After : Jul 25 09:01:55 2026 GMT
        Subject: CN=dea0acb0c0a5923bb3751f97d9da15ad387ed21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:c9:b7:f5:3a:02:97:65:b9:e6:2a:8d:c7:
                    b2:c8:21:be:a0:3f:e1:cd:f7:2d:d6:06:6c:2e:03:
                    82:ec:46:d6:5a:22:8c:d0:a2:14:cb:e9:80:1e:4c:
                    d5:6b:3b:8c:a3:c0:72:8e:13:2f:12:fa:18:ba:f3:
                    18:bb:5c:9c:e1:54:ae:a1:93:d4:0f:e1:50:47:92:
                    b4:50:70:13:3a:ea:10:df:e8:8e:ae:37:79:0d:66:
                    ea:f0:85:f1:b4:7f:4a:5f:5c:8d:07:57:9c:01:31:
                    e6:a4:dc:02:6b:65:b6:b9:5b:79:12:a5:59:db:6a:
                    0a:7e:f1:04:29:c1:55:8b:e2:fe:44:12:bc:db:c8:
                    59:54:e7:ed:25:6c:81:5d:c0:5e:f6:95:81:da:a3:
                    ff:69:98:7c:c7:2a:af:93:1f:ea:c3:84:77:c4:42:
                    6f:ef:2e:c1:2d:3a:10:3b:9b:b2:71:b6:04:2c:3e:
                    ad:d4:32:63:5f:65:4f:df:24:e5:1c:80:2e:af:3a:
                    78:78:de:28:98:1b:e6:65:3d:c1:a1:40:d1:c5:7b:
                    54:fb:c0:7c:ae:0c:90:7c:e3:ef:61:95:24:cf:f1:
                    62:5f:92:86:29:64:df:06:e6:45:ba:ea:b9:22:e4:
                    15:bf:ed:df:4d:b6:a2:82:f2:d0:5a:04:90:73:d0:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A0:AC:B0:C0:A5:92:3B:B3:75:1F:97:D9:DA:15:AD:38:7E:D2:1A
            X509v3 Authority Key Identifier:
                keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:33:9e:e6:5c:ed:ea:31:2a:ed:3d:44:a9:3d:a3:e9:ae:
         4b:6e:64:19:cb:0d:b9:a5:9f:7f:62:b7:27:2a:db:7a:11:2e:
         e8:e3:fc:62:4f:94:bd:cf:20:04:37:2f:71:5e:58:55:7e:82:
         bc:ea:8d:e5:cf:12:6b:d3:5a:37:17:8b:af:31:f2:3a:e9:91:
         d4:33:81:b8:78:7f:74:9c:f9:b8:6d:c1:ec:ca:a7:67:b3:bb:
         93:73:a0:da:af:a0:9d:f7:97:b0:a6:46:52:e9:22:41:9e:77:
         ef:28:db:b7:67:5d:be:66:01:7d:1c:e5:47:ff:5b:e0:37:26:
         b3:a7:ff:bd:3d:05:d8:92:d7:99:5d:36:d3:b5:e7:c0:74:32:
         b6:47:f4:8a:84:b9:ec:07:42:2c:8e:54:b9:5a:4c:0e:8e:c2:
         b3:b5:a7:10:39:45:ed:70:a8:0b:67:37:79:74:a9:be:5b:6b:
         51:95:1a:b5:f8:dc:01:ce:cd:8e:f3:69:68:f5:7f:74:f6:90:
         7c:e7:41:05:e4:a3:ab:2c:2e:99:9c:7e:f4:a5:81:76:e2:b6:
         8d:41:fb:bc:39:8b:34:e6:f5:c3:a4:2e:4e:aa:7b:e0:83:db:
         91:12:01:5e:71:3a:a4:ca:5f:b9:66:4f:6b:0d:d0:db:2c:d4:
         32:e3:fa:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXB1ZKcbemFYJsAeKT2Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTJkMDRhYjBjMzdhNDczYjFmYzgxYTM2OWZjOWFkNWQ5
ZmZkNDQwHhcNMjYwNzI0MDkwMTU1WhcNMjYwNzI1MDkwMTU1WjAzMTEwLwYDVQQD
EyhkZWEwYWNiMGMwYTU5MjNiYjM3NTFmOTdkOWRhMTVhZDM4N2VkMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1grJt/U6ApdlueYqjceyyCG+oD/h
zfct1gZsLgOC7EbWWiKM0KIUy+mAHkzVazuMo8ByjhMvEvoYuvMYu1yc4VSuoZPU
D+FQR5K0UHATOuoQ3+iOrjd5DWbq8IXxtH9KX1yNB1ecATHmpNwCa2W2uVt5EqVZ
22oKfvEEKcFVi+L+RBK828hZVOftJWyBXcBe9pWB2qP/aZh8xyqvkx/qw4R3xEJv
7y7BLToQO5uycbYELD6t1DJjX2VP3yTlHIAurzp4eN4omBvmZT3BoUDRxXtU+8B8
rgyQfOPvYZUkz/FiX5KGKWTfBuZFuuq5IuQVv+3fTbaigvLQWgSQc9D0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6grLDApZI7s3Ufl9naFa04ftIaMB8GA1UdIwQY
MBaAFGkS0Eqww3pHOx/IGjafya1dn/1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQt
ZjIxYjRmMTFmYWYwLzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQtZjIxYjRmMTFmYWYw
LzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXesznuZc
7eoxKu09RKk9o+muS25kGcsNuaWff2K3JyrbehEu6OP8Yk+Uvc8gBDcvcV5YVX6C
vOqN5c8Sa9NaNxeLrzHyOumR1DOBuHh/dJz5uG3B7MqnZ7O7k3Og2q+gnfeXsKZG
UukiQZ537yjbt2ddvmYBfRzlR/9b4Dcms6f/vT0F2JLXmV0207XnwHQytkf0ioS5
7AdCLI5UuVpMDo7Cs7WnEDlF7XCoC2c3eXSpvltrUZUatfjcAc7NjvNpaPV/dPaQ
fOdBBeSjqywumZx+9KWBduK2jUH7vDmLNOb1w6QuTqp74IPbkRIBXnE6pMpfuWZP
aw3Q2yzUMuP6Sw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:01 2026 by rpki-client