Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File:                     6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier:          rjhPDdl662QoeL9MqdRzf8IvlPm8HlI25FXijYiwcgQ=
Subject key identifier:   83:80:52:CB:2C:04:67:A7:AB:32:84:8B:A4:8A:96:F3:B9:8B:91:8A
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer:       /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial:       019F9022E0DFE0544414564C6E69FCD15DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number:          0688
Signing time:             Thu 23 Jul 2026 18:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:32 +0000
Files and hashes:         1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: u9hhlLZmeq01FOHl6VA6LPccp2i9vLWGiq1uutbXkdg=)
                          2: IPh_6iVNx496xq8P78NbeC5ann4.roa (hash: p/kpws4dnlRTMpuyDTof3NBBpdQNG/GFmv/G6ZFNtHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:e0:df:e0:54:44:14:56:4c:6e:69:fc:d1:5d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
        Validity
            Not Before: Jul 23 18:00:32 2026 GMT
            Not After : Jul 24 18:00:32 2026 GMT
        Subject: CN=838052cb2c0467a7ab32848ba48a96f3b98b918a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:d5:33:2f:dc:78:ee:f2:4c:1c:c1:2e:9d:
                    f1:e3:14:26:2a:a6:fe:1d:79:ae:d4:78:9c:41:fd:
                    52:64:31:4b:27:db:b0:29:cb:ad:31:01:c7:fe:15:
                    bc:81:af:9f:1d:e6:4f:9d:e2:f9:a9:a9:18:9c:2c:
                    c9:06:36:77:8d:61:d8:09:08:01:35:48:6b:22:82:
                    8e:8a:1f:1c:e4:11:f5:7d:fc:83:1d:59:fa:5f:2f:
                    9f:98:57:ef:56:df:ee:dd:9e:b2:59:84:40:36:e0:
                    16:e4:88:cf:87:c4:96:80:50:0e:ed:fd:ec:3c:0f:
                    f9:8d:21:82:a1:f7:da:f7:ac:0b:9b:49:cc:bb:9b:
                    12:50:d9:a6:e7:28:76:71:09:6c:2e:7f:68:61:09:
                    cd:e3:4f:29:39:af:ce:f3:c3:08:b0:f6:71:89:46:
                    a3:29:c4:52:04:1f:e5:65:32:ff:32:38:50:d0:27:
                    08:3e:c1:02:1f:c1:ba:cd:01:26:a9:80:a0:eb:2b:
                    8e:7c:be:b0:da:25:3f:b4:8c:d7:21:ac:2c:a9:a1:
                    3c:6d:02:a2:da:90:b1:a5:15:e3:93:76:1d:3e:27:
                    1e:39:3e:c1:15:92:c3:61:bf:26:11:ba:7a:49:b4:
                    ab:9a:01:cf:a3:f0:56:0f:14:40:d4:dd:49:d9:0f:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:80:52:CB:2C:04:67:A7:AB:32:84:8B:A4:8A:96:F3:B9:8B:91:8A
            X509v3 Authority Key Identifier:
                keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:de:63:e8:e8:2c:fa:e3:17:d1:6b:c9:95:1d:55:bf:98:68:
         f2:51:8c:d9:92:f8:b4:ab:73:0a:2b:dc:c7:dc:ae:ea:8d:44:
         37:01:a3:90:c2:41:2c:f0:69:11:29:b3:ed:90:5f:e1:e9:35:
         61:20:2a:c9:c8:8d:99:0f:4d:28:7e:bb:92:5a:44:e3:26:35:
         e3:8c:5f:e8:1e:be:3f:73:c8:9d:6a:1a:3d:23:1f:f8:30:5c:
         ec:55:f0:50:e1:5d:1f:3b:03:b8:ca:d9:27:ff:e9:24:87:fc:
         8b:e0:4b:b6:23:8d:d9:f1:d8:de:d0:82:db:cc:e4:4a:c0:c5:
         51:1c:b0:31:b1:70:ac:2d:9e:ba:25:18:0a:cc:ac:1e:ca:ec:
         62:95:14:c4:b5:84:e4:59:2f:35:5e:4a:ab:30:a2:e9:10:59:
         74:ad:d7:6a:69:3b:43:32:fd:a3:40:11:53:f5:9d:6d:6a:8d:
         54:29:65:9a:08:7e:77:03:fc:2e:17:20:28:dc:f9:b6:4c:1d:
         07:3d:af:8c:1b:3d:ae:a2:ec:cf:b4:ef:97:7d:94:54:bf:9d:
         ee:e5:7b:02:05:b1:1b:50:e6:c2:4b:9f:83:22:df:f1:f7:00:
         78:f3:5e:4f:a1:8b:35:e5:9d:85:be:7c:35:ac:98:e4:55:67:
         42:92:f1:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIuDf4FREFFZMbmn80V2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOTBlZDY4NDhhOWNhMWVmMjAxMGU2MzRjZTIxYjZjOWFk
ZGViNjIwHhcNMjYwNzIzMTgwMDMyWhcNMjYwNzI0MTgwMDMyWjAzMTEwLwYDVQQD
Eyg4MzgwNTJjYjJjMDQ2N2E3YWIzMjg0OGJhNDhhOTZmM2I5OGI5MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta3VMy/ceO7yTBzBLp3x4xQmKqb+
HXmu1HicQf1SZDFLJ9uwKcutMQHH/hW8ga+fHeZPneL5qakYnCzJBjZ3jWHYCQgB
NUhrIoKOih8c5BH1ffyDHVn6Xy+fmFfvVt/u3Z6yWYRANuAW5IjPh8SWgFAO7f3s
PA/5jSGCoffa96wLm0nMu5sSUNmm5yh2cQlsLn9oYQnN408pOa/O88MIsPZxiUaj
KcRSBB/lZTL/MjhQ0CcIPsECH8G6zQEmqYCg6yuOfL6w2iU/tIzXIawsqaE8bQKi
2pCxpRXjk3YdPiceOT7BFZLDYb8mEbp6SbSrmgHPo/BWDxRA1N1J2Q+pdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOAUsssBGenqzKEi6SKlvO5i5GKMB8GA1UdIwQY
MBaAFOqQ7WhIqcoe8gEOY0ziG2ya3etiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUt
NTg2YjZkMDQ3ODc4LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi85YzFlODMtZTcxNC00YzQ1LTg2ODUtNTg2YjZkMDQ3ODc4
LzEvNnBEdGFFaXB5aDd5QVE1alRPSWJiSnJkNjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcN5j6Ogs
+uMX0WvJlR1Vv5ho8lGM2ZL4tKtzCivcx9yu6o1ENwGjkMJBLPBpESmz7ZBf4ek1
YSAqyciNmQ9NKH67klpE4yY144xf6B6+P3PInWoaPSMf+DBc7FXwUOFdHzsDuMrZ
J//pJIf8i+BLtiON2fHY3tCC28zkSsDFURywMbFwrC2euiUYCsysHsrsYpUUxLWE
5FkvNV5KqzCi6RBZdK3Xamk7QzL9o0ARU/WdbWqNVCllmgh+dwP8LhcgKNz5tkwd
Bz2vjBs9rqLsz7Tvl32UVL+d7uV7AgWxG1DmwkufgyLf8fcAePNeT6GLNeWdhb58
NayY5FVnQpLx/w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:26 2026 by rpki-client