Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File:                     6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier:          z5f5yClKKD1xIQ8EK926jDmEroQxEeWsHQnRx7625Po=
Subject key identifier:   20:21:22:E6:D3:C2:3F:F7:2B:0F:AE:AB:87:AF:E5:18:C9:92:77:95
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer:       /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial:       019F8FB4F9BCFFA424329BF8649C4EF71492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number:          089D
Signing time:             Thu 23 Jul 2026 16:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:29 +0000
Files and hashes:         1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: P3c2xOyDEiXjmTdnoXQ4nBX+8LUo2tb7ezoK4xARwzM=)
                          2: Bo61RTRTOhfwB50Bqs5zl4FzjGE.asa (hash: fR/GqKb8wiw/0kJKnHBnbPsaaq7HXPxVfPXam3jXJ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:f9:bc:ff:a4:24:32:9b:f8:64:9c:4e:f7:14:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
        Validity
            Not Before: Jul 23 16:00:29 2026 GMT
            Not After : Jul 24 16:00:29 2026 GMT
        Subject: CN=202122e6d3c23ff72b0faeab87afe518c9927795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:74:6c:f0:ee:ce:a6:aa:7c:89:d0:5d:bd:
                    07:cc:0b:65:20:9c:a5:b6:cc:b7:fd:29:7c:0d:e2:
                    5a:19:2e:7f:93:81:f8:93:f7:b8:7f:75:23:41:e0:
                    0e:eb:b8:af:30:c4:a5:8c:f2:4b:21:be:d4:db:e3:
                    14:b5:a5:d1:a8:6f:ef:30:79:cf:4e:83:87:d6:14:
                    c4:15:3e:04:94:6d:d1:7f:6f:f0:47:17:52:9d:1d:
                    73:18:29:3d:e7:1a:c1:df:da:2a:44:e3:b0:ff:b1:
                    1f:57:01:6a:47:c6:12:5e:d5:fa:8f:94:a9:9f:53:
                    a6:fd:66:ae:c4:f8:80:d6:dd:3a:5c:25:16:1d:f5:
                    b6:e5:44:5d:ea:4c:19:22:4d:f5:f8:f1:f5:48:03:
                    aa:f1:0b:f6:c6:d2:55:00:82:04:7c:5a:c2:4e:c3:
                    22:5d:b9:4e:c8:64:48:21:40:5e:58:2a:63:81:4e:
                    83:d4:ef:5c:39:5e:5f:37:a8:f2:0a:9d:f2:7b:c9:
                    48:de:01:53:b4:9c:2e:00:7d:3c:e7:d5:67:2d:6f:
                    c0:e5:d0:0e:95:15:a6:7f:c3:ee:54:21:6e:04:ef:
                    49:a0:d0:99:85:9b:9f:ee:de:a7:d1:6b:d1:fa:c3:
                    b9:a0:45:40:a9:21:83:7d:7d:1e:d7:6d:a1:97:b3:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:22:E6:D3:C2:3F:F7:2B:0F:AE:AB:87:AF:E5:18:C9:92:77:95
            X509v3 Authority Key Identifier:
                keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9b:0a:9b:e5:92:40:b5:4e:57:bf:a7:77:2f:d3:f9:6c:84:
         8c:27:f1:3d:6b:69:84:da:d3:d1:a3:81:5b:d3:c2:04:f0:84:
         98:5c:b7:40:b7:07:4e:76:ee:a5:7f:4e:e7:24:40:7c:20:3b:
         54:cb:ab:cf:0f:f0:60:4e:56:bc:b3:d9:5c:5c:fb:0c:c5:90:
         f1:16:91:9b:5b:64:6a:e3:d2:b8:98:96:d0:f3:e0:84:e5:2a:
         12:ea:70:21:3d:6c:53:10:36:86:63:9b:ac:6c:61:04:0a:b1:
         ed:ab:ac:3d:7b:1f:09:6e:34:a1:1e:50:ab:d2:9e:04:58:3e:
         a0:04:d6:78:da:c3:f8:e5:97:e9:ef:9b:f1:a6:5a:25:2c:0e:
         80:63:f7:18:e0:78:8f:ae:63:12:00:85:20:82:b6:11:16:77:
         58:d3:cb:4b:5e:7e:ab:a1:5e:13:a6:4e:01:8a:16:a5:7f:0f:
         1b:ca:1b:bf:0d:7e:ca:ce:a1:1e:5e:20:2d:cf:11:3a:12:92:
         5e:49:a0:2b:46:b1:3c:cd:53:f8:84:df:5f:92:83:5b:e9:74:
         7c:58:5d:47:88:3c:42:4f:e9:fd:9c:a9:a6:6f:7e:d8:5e:61:
         b4:f8:bf:95:2e:1f:68:fb:a2:58:03:69:10:8e:68:71:05:84:
         81:81:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:15 2026 by rpki-client