Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File:                     RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier:          R+VlbwKa9SVjvWucHau9RqOoKvJJrHDksIT21LTt2us=
Subject key identifier:   66:5A:6A:72:8F:2B:41:52:30:55:AD:0A:9F:F2:71:FB:B0:42:1B:5F
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer:       /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial:       019F91A45BB2E4A4CD22C25B59EB1498D511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number:          0AAE
Signing time:             Fri 24 Jul 2026 01:01:35 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:35 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:35 +0000
Files and hashes:         1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: 1oaI4L45lKsPJsEtkZKBgUPkt8gC/08AnrQysyq1cIE=)
                          2: nfM87_cNIFSFao4mBuo9ap5n_Ds.roa (hash: clZcRSa2WjMsc93x5iPKZEXkrsa/Ap2DM4NOqed4YYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:5b:b2:e4:a4:cd:22:c2:5b:59:eb:14:98:d5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
        Validity
            Not Before: Jul 24 01:01:35 2026 GMT
            Not After : Jul 25 01:01:35 2026 GMT
        Subject: CN=665a6a728f2b41523055ad0a9ff271fbb0421b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:10:28:43:89:d6:1f:30:78:d9:65:02:27:
                    08:96:8c:5c:47:38:e1:f3:34:f3:00:48:26:5f:61:
                    82:05:e2:af:a5:df:9b:36:03:f3:30:e8:b4:3e:e0:
                    f2:95:06:0d:f1:5c:9e:90:d5:47:d5:b8:d7:99:ff:
                    85:a5:e0:32:17:e4:96:4b:87:99:d4:a9:e1:72:c6:
                    04:3b:65:3f:b4:3c:da:a1:c7:14:53:00:ac:b7:af:
                    ec:b8:52:78:03:9d:34:62:71:18:26:a0:01:77:6c:
                    6d:c2:e2:2d:b4:d1:ce:9d:aa:3b:77:38:b6:04:2b:
                    b9:97:9a:e5:c0:20:43:ca:b7:cc:0c:1d:9d:38:83:
                    77:e0:d1:02:27:2b:0c:f3:db:e0:6d:ae:34:63:9c:
                    0f:03:87:c7:99:51:46:7a:46:37:c9:25:de:ed:89:
                    f7:9b:d6:b7:1c:9f:f7:4f:75:e4:21:98:c8:05:64:
                    67:c0:6b:c8:ec:72:a6:7e:17:a1:64:c5:ee:1d:8b:
                    78:16:e1:3b:d6:31:37:73:cd:ef:dd:45:dc:a4:e1:
                    38:4d:05:51:ef:f7:18:b4:5f:8a:b8:21:aa:59:29:
                    e2:a1:8c:ab:84:ed:64:fc:11:6c:81:74:ea:94:1e:
                    45:a3:18:b3:55:cd:5b:ed:36:75:89:2b:ec:2c:65:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5A:6A:72:8F:2B:41:52:30:55:AD:0A:9F:F2:71:FB:B0:42:1B:5F
            X509v3 Authority Key Identifier:
                keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4c:73:a7:e9:c6:56:47:39:16:33:08:94:52:6c:ec:19:3a:
         e4:57:f1:8f:42:ac:37:f6:d9:4a:1e:6f:58:82:9a:b6:4b:6f:
         8c:16:5c:4e:aa:ea:75:12:25:93:8a:2b:17:35:33:c0:5f:f1:
         52:56:3a:42:d2:63:88:49:4d:5d:33:51:0f:a9:6f:0e:c9:a2:
         49:9a:27:e1:ea:21:76:34:13:21:fb:17:07:56:c7:56:80:6d:
         32:c1:52:23:6c:f6:da:86:20:d4:92:71:46:a8:af:20:06:c6:
         97:2c:b5:40:ea:73:66:8d:55:13:37:fe:78:9e:2d:31:5c:27:
         08:46:d1:40:fb:fe:36:8c:c4:96:84:21:58:b6:cc:6e:29:af:
         2b:32:99:50:15:e9:9a:89:3a:63:1c:4d:fa:08:3f:a6:3b:ed:
         8b:25:df:70:17:7a:f4:8a:27:f7:5a:33:62:57:4e:cf:1d:fe:
         00:15:2e:9f:68:31:ab:0d:9c:1e:4c:4b:42:95:f6:04:17:54:
         ee:7b:ad:de:d5:5b:09:f9:b2:91:ad:05:5c:6c:6d:fa:1f:c7:
         db:8f:6b:e2:a5:5e:3a:d5:e3:c5:a0:eb:17:ef:7c:11:d6:06:
         53:83:47:3a:33:36:62:3c:a0:05:ab:02:75:8f:0f:5f:20:32:
         eb:e2:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:44:59 2026 by rpki-client