Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          GFE8RAcsx9RJYUWfPriQt6L2+kN+7volmriBYW+Zgos=
Subject key identifier:   2A:C3:8C:5B:1A:B5:FB:6C:23:E1:63:8D:B7:95:3D:BC:91:A1:04:8E
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       019F8FEBDD08C09DE9C5C3B306B1D1FC4C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          194D
Signing time:             Thu 23 Jul 2026 17:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:27 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: oxtf6O2wuCRyGKPuKqJZTf2Zv6cA20nYzFJjRQbvrK4=)
                          2: dqmaHvknKqQBSGx8vkJB5GIkMu8.roa (hash: eq7/0vS6xbSn3q6IVW/vVMX2uGZHddMDolDzXZEf0pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:dd:08:c0:9d:e9:c5:c3:b3:06:b1:d1:fc:4c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Jul 23 17:00:27 2026 GMT
            Not After : Jul 24 17:00:27 2026 GMT
        Subject: CN=2ac38c5b1ab5fb6c23e1638db7953dbc91a1048e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:bf:46:ff:08:b3:0f:c5:5b:1d:dc:92:44:
                    3d:32:63:fd:9e:99:41:17:2e:24:94:a0:31:99:63:
                    e0:bb:76:95:db:39:8d:96:39:99:14:71:a0:11:a1:
                    be:8d:f7:43:64:ab:10:8b:d2:6f:b1:99:10:8c:39:
                    f7:8b:92:ba:08:64:13:99:10:bf:88:0b:0d:fc:03:
                    54:98:4f:2e:9e:5b:74:a0:ae:4c:06:43:05:fd:89:
                    37:28:4f:67:19:f1:bf:1b:8d:fb:61:7c:0c:7a:77:
                    77:72:72:e7:a1:50:08:d0:e7:c7:a1:b6:8e:0b:d9:
                    74:2a:52:c7:5b:45:2c:51:d0:89:46:18:31:fb:b6:
                    ad:36:16:35:cc:19:8d:5a:a0:28:9e:52:f0:d1:34:
                    e7:58:b5:24:6c:c3:45:76:da:2a:88:ef:6e:4d:49:
                    9e:88:3b:28:12:52:21:4d:d7:51:98:58:ea:f9:69:
                    18:54:b9:1f:b4:a1:88:d6:b0:58:29:fa:86:df:ca:
                    93:93:a1:be:ca:ae:b7:5f:ae:59:45:ee:2b:97:c4:
                    be:13:a0:4d:c2:76:40:a8:2b:6b:e7:14:f9:aa:0c:
                    3a:a2:f8:10:2c:30:6c:7a:d8:90:0e:cd:4d:aa:43:
                    fd:aa:aa:38:05:4a:61:ed:82:04:6a:b6:95:7f:55:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C3:8C:5B:1A:B5:FB:6C:23:E1:63:8D:B7:95:3D:BC:91:A1:04:8E
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4b:f2:12:a3:ff:6c:2b:92:2a:9f:7d:9e:b2:95:51:22:5f:
         cd:4c:e6:60:34:04:0b:a2:6d:af:f5:b7:38:b2:60:cf:11:d7:
         52:eb:a3:9d:a7:10:e8:72:92:35:91:8e:16:60:65:b6:01:ef:
         b0:bc:78:b2:a6:b3:c1:c1:ef:40:03:77:1f:49:38:2b:b7:dd:
         63:38:12:96:88:30:28:ea:97:c7:11:c5:b2:ac:31:6b:90:87:
         65:df:34:a2:28:e7:03:c2:0c:5d:b0:59:cb:ed:e8:cd:cc:fd:
         ef:22:3c:38:62:b5:cb:65:42:8e:7d:70:3e:37:b9:fb:13:d5:
         df:76:d3:77:25:fe:af:ef:1a:b3:3b:c4:2e:eb:b0:de:e6:d2:
         a7:37:eb:a8:c2:16:2b:66:2e:ce:2e:9d:6d:8b:ac:d1:e4:1e:
         32:fa:2f:62:33:27:0d:2b:fb:ab:f8:7f:b1:9b:67:ae:e3:6e:
         65:72:fd:6e:aa:21:5e:24:50:91:9b:b3:59:68:de:95:30:88:
         27:4f:1e:0a:9e:ec:23:17:39:2e:8e:c4:3b:e1:55:dd:2f:5c:
         99:c8:3a:74:0f:fb:e5:46:7d:8e:28:ee:06:95:fd:44:12:cc:
         8f:7a:f4:d2:29:06:61:3f:18:47:be:a4:27:42:48:7a:7e:5e:
         0d:2d:9d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P690IwJ3pxcOzBrHR/EyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZWQ2MDJmZDBkNDZkMzhjZGUxZTczMmM2NTJlYTk5NThl
OTc2OTEwHhcNMjYwNzIzMTcwMDI3WhcNMjYwNzI0MTcwMDI3WjAzMTEwLwYDVQQD
EygyYWMzOGM1YjFhYjVmYjZjMjNlMTYzOGRiNzk1M2RiYzkxYTEwNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gi/Rv8Isw/FWx3ckkQ9MmP9nplB
Fy4klKAxmWPgu3aV2zmNljmZFHGgEaG+jfdDZKsQi9JvsZkQjDn3i5K6CGQTmRC/
iAsN/ANUmE8unlt0oK5MBkMF/Yk3KE9nGfG/G437YXwMend3cnLnoVAI0OfHobaO
C9l0KlLHW0UsUdCJRhgx+7atNhY1zBmNWqAonlLw0TTnWLUkbMNFdtoqiO9uTUme
iDsoElIhTddRmFjq+WkYVLkftKGI1rBYKfqG38qTk6G+yq63X65ZRe4rl8S+E6BN
wnZAqCtr5xT5qgw6ovgQLDBsetiQDs1NqkP9qqo4BUph7YIEaraVf1U6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrDjFsatftsI+FjjbeVPbyRoQSOMB8GA1UdIwQY
MBaAFOjtYC/Q1G04zeHnMsZS6plY6XaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjIt
OTRmOGZiMzAwOWYyLzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iNjQwOWItMTYzOC00YzdhLTgxZjItOTRmOGZiMzAwOWYy
LzEvNk8xZ0w5RFViVGpONGVjeXhsTHFtVmpwZHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0vyEqP/
bCuSKp99nrKVUSJfzUzmYDQEC6Jtr/W3OLJgzxHXUuujnacQ6HKSNZGOFmBltgHv
sLx4sqazwcHvQAN3H0k4K7fdYzgSlogwKOqXxxHFsqwxa5CHZd80oijnA8IMXbBZ
y+3ozcz97yI8OGK1y2VCjn1wPje5+xPV33bTdyX+r+8aszvELuuw3ubSpzfrqMIW
K2Yuzi6dbYus0eQeMvovYjMnDSv7q/h/sZtnruNuZXL9bqohXiRQkZuzWWjelTCI
J08eCp7sIxc5Lo7EO+FV3S9cmcg6dA/75UZ9jijuBpX9RBLMj3r00ikGYT8YR76k
J0JIen5eDS2dQw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:29 2026 by rpki-client