Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File:                     4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier:          OTClUvP1rTmBG5Q0IXTZzpmRrmwUiFcsa8pmkzUisiA=
Subject key identifier:   F6:B6:F3:62:97:E6:AA:4B:AD:FC:A0:E4:C6:C6:BE:7D:20:78:AB:A1
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer:       /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial:       019F913586FE6E0515EA50DE02BAE03A446E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number:          016B
Signing time:             Thu 23 Jul 2026 23:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:31 +0000
Files and hashes:         1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: gBAOrtLGNvdKRSoOyazCzrQUyKb67RYxpLSy+b8PWFI=)
                          2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:86:fe:6e:05:15:ea:50:de:02:ba:e0:3a:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
        Validity
            Not Before: Jul 23 23:00:31 2026 GMT
            Not After : Jul 24 23:00:31 2026 GMT
        Subject: CN=f6b6f36297e6aa4badfca0e4c6c6be7d2078aba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:30:c0:91:70:14:7a:b2:ed:2d:8c:ce:67:
                    86:aa:86:88:7e:52:97:89:7b:d4:7c:a1:c9:50:91:
                    55:9e:22:92:24:52:f3:9f:0e:8d:a8:21:06:96:65:
                    1a:49:0c:51:d9:b4:a7:e2:28:98:82:d8:d0:62:70:
                    82:e3:24:67:a2:c0:b6:cc:a7:45:dc:4e:8e:f1:7e:
                    e0:02:e1:30:69:97:f0:6a:87:92:32:78:9a:86:e5:
                    fc:59:3c:b3:cf:56:75:b4:f8:9d:ee:81:36:7b:75:
                    f8:fc:ac:3e:24:47:85:46:8d:79:e9:e4:55:c0:e6:
                    1b:04:83:15:d0:6d:a7:80:fa:b9:d1:2c:50:db:18:
                    d4:f6:ef:0e:6f:f7:35:b2:0c:44:59:12:cd:29:da:
                    1a:03:9d:b1:69:70:b7:44:b3:04:03:4f:d8:55:c2:
                    cc:09:a7:a6:cc:33:6c:2e:e0:e7:8b:8b:81:30:f7:
                    0b:6b:c3:db:02:be:c0:86:d3:93:30:11:71:73:eb:
                    4e:5c:84:64:d2:8a:38:35:b1:a3:32:28:03:4f:5a:
                    de:bf:d8:26:ef:d7:ff:ef:66:03:10:cf:1a:c5:4b:
                    89:26:dd:a6:83:03:c9:45:e7:5e:ed:31:d8:61:62:
                    8b:47:ac:de:5c:da:d1:16:bf:20:8b:60:2e:07:a8:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:F3:62:97:E6:AA:4B:AD:FC:A0:E4:C6:C6:BE:7D:20:78:AB:A1
            X509v3 Authority Key Identifier:
                keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:47:a9:18:c7:23:4a:49:4f:a4:4e:89:a6:db:ea:07:4a:40:
         1b:73:59:aa:dc:be:96:ed:51:01:01:c8:fb:38:3b:ce:fa:cc:
         f3:b1:a4:d2:2b:35:54:d6:fd:f8:a1:6f:33:f7:ee:d4:8e:32:
         3d:b6:59:3e:9b:dc:82:8a:ea:69:8b:f7:97:70:fa:03:47:76:
         53:e6:a0:4b:6e:54:42:0e:b2:2a:49:9a:7b:25:a6:a2:72:97:
         40:5f:e5:31:06:33:cf:82:e8:19:6b:ac:84:b1:5b:14:b3:74:
         02:01:71:50:9f:21:bc:f5:03:2e:67:d7:83:8d:e7:39:6f:04:
         bf:9a:42:f8:04:ac:fd:d3:c3:14:01:c9:a7:3c:a2:d1:15:46:
         bf:e7:6b:de:46:f0:aa:d9:7f:cb:9a:d2:26:8d:7a:82:8e:37:
         fd:7d:8a:bf:fc:91:dd:e3:ff:0e:78:2e:a2:6a:66:c4:7a:b7:
         10:6e:bc:be:24:f7:1f:ea:aa:9c:d0:2e:3a:c8:b0:65:48:6a:
         a2:39:3b:fd:5c:ac:47:07:c4:49:19:72:e8:c2:cf:b2:fc:c9:
         91:e1:b9:74:4c:13:45:33:11:d6:5b:3c:62:59:78:14:95:2c:
         af:6d:53:f5:6d:0c:b8:dc:f9:93:61:d0:7e:5f:32:b3:e3:d6:
         c9:15:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:56:50 2026 by rpki-client