Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
File:                     6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json)
Hash identifier:          n2j/9AeRJDzFk6mKKg0GM3NFyTa/Roa61Y6XpBw5d8s=
Subject key identifier:   36:47:23:3A:CF:A8:99:7E:7B:93:52:30:AB:2D:13:41:F3:C5:37:9F
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       019F935BA6FABB6E5BDA0B0B0C95679F6894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
Manifest number:          1400
Signing time:             Fri 24 Jul 2026 09:01:24 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:24 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:24 +0000
Files and hashes:         1: 1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa (hash: kxVoHYAy1StJ1GWwbeUY54WsYp9aXThsq2UtgssAUdE=)
                          2: 30AW9KapoFD2PaBz6BWOHx17luY.roa (hash: 0yrdmQ/kBlMmuSwposMdGQNyXgTnapxYEZLV94DbU1Q=)
                          3: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: auwfpazATjHuWtv7HiqNgRGHj2WS8OjUUGaX5OAOO+c=)
                          4: 8suHpidG1fhuELuUk5b3-OweTPg.roa (hash: 1eHJkoJhddFda4qCfEu1aQasvyxw+vlSo8SFBBVgpqU=)
                          5: FUuTK2fFAsqRcCumhRtIZo91RHY.roa (hash: sL7JcIGdywrGzv3v04y8pkGzCLFmkDsGBJu4wKma/MI=)
                          6: LXIlN5E_-7FwagFmPTLTkaa9y5c.roa (hash: 6fdLU7tUE6uJypDCFnhQj74QKiyWE5+++0HOzxZo/Ls=)
                          7: UzApq6EOLSmo_f-FmHtKYMlNkG8.roa (hash: uaHU4qHF04fH5UL/VGo93ZAzSiASc8qoSn8SilcNKx8=)
                          8: dMLf7oZA2glUWPaPF66AFPs0ZGA.roa (hash: vhl1uNOJ5DqCqIxVZTtmK9gZafgqapXEKNDgMZ+kKHE=)
                          9: e-PI40mcmW_4qj2wj51dZytuRJ4.roa (hash: IWJbxQ32owD5Lwd1nR2dmmdsgfysZX9pSs6x+OurREE=)
                          10: rCtSQ7fOIAO3hF-dZmFyOrblm2s.roa (hash: JkQ7BSC0RdZovffT+QwWvb+UrSCXmLKi6BtijI7KA5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:a6:fa:bb:6e:5b:da:0b:0b:0c:95:67:9f:68:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Jul 24 09:01:24 2026 GMT
            Not After : Jul 25 09:01:24 2026 GMT
        Subject: CN=3647233acfa8997e7b935230ab2d1341f3c5379f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:a3:b6:91:45:79:ff:31:67:33:b4:6f:a0:
                    ba:bf:36:db:95:35:97:ac:b4:22:ec:c3:28:b6:a4:
                    02:bc:95:37:03:49:8d:71:fb:a3:a6:bf:ea:4e:f8:
                    0f:3d:f8:29:a8:3c:f4:69:d6:bf:e1:ac:5f:06:6c:
                    46:29:55:4b:91:f6:c9:82:34:d9:5e:99:9e:ca:d9:
                    3e:3b:1c:a0:39:82:ca:3a:3d:c9:1f:82:8e:7e:1c:
                    44:a9:16:10:c6:ee:0d:f5:ee:ee:c1:d3:4b:e4:fc:
                    d5:8b:26:a0:4c:0a:21:1c:3d:90:a4:33:e2:ad:dd:
                    9d:a2:f4:4d:b4:bf:96:2e:1e:15:18:fd:72:ae:cf:
                    5d:7a:52:8d:0e:c8:c3:d9:9f:77:af:7b:fb:36:1b:
                    73:95:be:b4:e2:f4:ec:d9:75:72:51:63:ff:7e:dc:
                    05:32:fb:9b:9a:b8:e7:ec:08:bc:f0:3a:29:f8:2b:
                    7f:03:bc:1f:91:fe:75:26:33:3b:aa:39:d1:40:b8:
                    2e:80:2a:d4:6a:d1:87:fe:af:0f:e9:27:53:33:34:
                    11:ae:ed:a9:ae:ce:bc:ae:8f:ee:5e:1a:63:44:c4:
                    36:61:7a:e7:c6:fb:91:27:42:49:78:0c:73:b0:c3:
                    ff:8e:67:23:13:a9:04:01:3f:b4:27:50:67:93:80:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:23:3A:CF:A8:99:7E:7B:93:52:30:AB:2D:13:41:F3:C5:37:9F
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:39:32:a1:86:9d:ca:e2:29:19:79:42:f9:ce:f4:eb:18:01:
         db:62:45:5b:46:b4:1e:d1:b6:b1:2e:0a:e2:73:a4:04:b7:a7:
         8a:66:e6:83:14:17:73:2d:02:34:a4:37:f9:d8:8f:d8:4f:10:
         e1:28:32:b8:79:76:45:4e:a7:35:ec:da:a3:f3:ab:cd:da:eb:
         b6:a4:c0:0d:4d:be:f8:d9:3b:68:c8:f6:97:d2:63:dd:65:01:
         94:54:c7:6c:1f:c1:24:0e:36:db:17:29:7f:70:c3:d1:4a:b4:
         bf:2a:0e:37:88:68:c0:8c:95:dc:0b:83:dc:40:60:12:57:8e:
         48:e9:52:72:8b:12:75:db:b2:2d:27:1e:05:69:92:0a:54:6b:
         f6:1a:2f:27:05:6c:bb:5a:08:b5:0a:b1:8a:c3:ce:da:9e:7d:
         e7:a3:c4:76:4b:63:78:b1:c3:1d:09:bb:7a:25:ec:45:bd:c2:
         c1:61:7b:ab:f1:5d:d7:d0:ac:22:3e:93:fb:f4:27:8d:c7:7c:
         9b:4c:f3:0e:f2:69:c9:7c:40:86:1c:12:f8:5e:08:d3:bf:f6:
         b0:81:2b:a4:1e:4b:a4:07:3a:a1:39:4f:65:d5:8e:36:08:2a:
         0a:a6:b4:03:97:5a:7c:aa:dc:b0:74:c9:25:dd:8b:6e:10:bf:
         c6:7c:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:27 2026 by rpki-client