Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
File:                     6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft (raw, json)
Hash identifier:          y3HoPuMdF0V2+X53tY7Sw0YUgcvKcM0Z1d0Z7Y9M6Uo=
Subject key identifier:   E3:5B:3B:DC:94:FD:C6:01:18:0E:83:DE:32:E1:FD:D4:17:0C:66:38
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Certificate issuer:       /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial:       019F927F93DCF253DD7AB50D620B55187A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
Manifest number:          18F8
Signing time:             Fri 24 Jul 2026 05:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:02 +0000
Files and hashes:         1: 6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl (hash: g+DQaBoMCSpqAe+qujuT/ZTXazXNuBoG3pvgGTj3L3s=)
                          2: VJzavZ_Z7--mgTcREVjVIAX6Nvs.roa (hash: LQAHkCMjU4wRtrZzd1Ey5tnv8CysV/CKeEDhwslpiH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:93:dc:f2:53:dd:7a:b5:0d:62:0b:55:18:7a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
        Validity
            Not Before: Jul 24 05:01:02 2026 GMT
            Not After : Jul 25 05:01:02 2026 GMT
        Subject: CN=e35b3bdc94fdc601180e83de32e1fdd4170c6638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:b7:4e:ae:e7:66:47:01:a8:64:1b:0f:8f:
                    0d:7c:49:5b:83:bb:4b:92:50:ea:d0:2a:f8:68:38:
                    56:fc:18:b6:1c:a2:1c:63:30:83:79:71:b8:10:58:
                    be:cb:19:0b:e1:16:d5:bd:52:b8:3f:1f:c0:13:ab:
                    47:17:2c:b6:ec:62:1e:64:ae:3d:50:7d:1f:b9:0b:
                    40:1f:16:29:5f:b2:d7:b9:7b:86:8d:fa:b8:b8:cb:
                    29:ce:2d:41:02:db:a3:10:ff:a7:8a:bc:e4:22:ce:
                    20:c4:31:61:64:eb:f8:48:e9:e2:f2:a0:e9:88:17:
                    8e:a7:77:fc:c8:81:ba:89:6f:8f:c3:2e:fc:00:99:
                    7e:dc:d5:dd:a8:56:38:bd:61:09:01:fa:e9:02:54:
                    f2:d0:ae:73:2a:7f:a8:77:0d:b3:38:e0:0f:5b:24:
                    5a:4d:ac:a0:96:b9:e3:1a:d1:fd:44:0d:ef:31:7a:
                    30:e7:ab:4d:60:c8:09:2f:5a:93:92:f2:32:da:d1:
                    6d:a9:92:a3:31:df:8c:8f:86:eb:33:cc:4b:4b:92:
                    54:a5:0a:10:75:a1:4d:75:6d:24:7a:32:e9:e9:2e:
                    de:66:11:1f:9e:cb:6a:d3:81:ea:d2:2a:79:f8:f8:
                    52:61:50:69:48:a6:f1:f9:5d:2c:cf:bf:bb:64:0b:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:3B:DC:94:FD:C6:01:18:0E:83:DE:32:E1:FD:D4:17:0C:66:38
            X509v3 Authority Key Identifier:
                keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:47:bf:ea:52:c0:2a:5b:35:50:5d:23:b4:02:38:f5:31:
         d7:83:28:35:c6:49:ad:34:a8:ae:e5:6a:ce:0b:6e:3f:f1:1b:
         b1:3a:f1:c0:54:7b:e6:56:bb:be:f3:a4:59:c6:14:b2:ad:6d:
         cf:6e:19:30:de:2a:e9:fc:71:0e:bf:1c:52:24:a6:fa:d7:cd:
         dd:43:07:43:96:0b:a3:f7:6a:be:aa:c0:71:fb:26:a8:77:21:
         bf:64:07:5c:e5:97:bf:f0:b7:34:9f:ee:98:e9:5c:5e:43:e2:
         91:3c:78:aa:4e:b4:fa:03:6c:59:55:d0:bd:78:e0:8b:d6:d3:
         63:e8:d9:a5:81:f3:37:68:f5:9b:0f:0f:32:b4:e5:aa:46:fe:
         9e:c1:eb:cb:97:42:16:e6:f0:a1:8f:c1:05:7c:dc:dc:84:e6:
         35:a9:b6:f0:fa:c6:1a:0b:c3:ba:1b:ec:d7:d5:38:e9:e3:72:
         42:02:c7:d4:41:4f:a3:da:15:e4:20:0a:06:3b:24:65:4d:72:
         d5:9f:ce:d6:22:53:4a:1d:8a:60:dc:47:8e:23:b8:b2:33:d8:
         46:26:5b:2f:7c:0f:be:6e:d6:b3:38:ad:e4:fe:f6:1c:e5:19:
         78:27:7b:a1:96:91:c6:93:32:83:8a:1c:c1:a2:0d:4d:15:3e:
         41:1b:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:15 2026 by rpki-client