Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          jR8jR19CmQNF6n1sJ4WU42vE1W8Ug5f4719zlH5SqgE=
Subject key identifier:   F9:8D:FB:74:D5:22:85:B8:FB:6B:D9:06:48:15:7C:0A:5A:D9:57:DD
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       019F8F7DD2987D1FE3314F99A20E475417BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 15:00:15 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:15 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:15 +0000
Files and hashes:         1: 5Iruj7Q04-dIh4ZGTzY2lg5RxnQ.roa (hash: x1HpRiyK6tLqJ4m++Ue3xBke0BVmx3kiw0XUNo5+ScQ=)
                          2: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: r5GK8TYzHhkQcthG91EywVl5kb690yQZJ0X9HAzwbLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:d2:98:7d:1f:e3:31:4f:99:a2:0e:47:54:17:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Jul 23 15:00:15 2026 GMT
            Not After : Jul 24 15:00:15 2026 GMT
        Subject: CN=f98dfb74d52285b8fb6bd90648157c0a5ad957dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:65:c7:ff:22:18:e5:87:7b:e5:ff:50:fd:
                    e1:5e:1d:74:04:7c:df:99:c0:a1:28:31:98:8b:41:
                    5f:06:7e:93:7b:41:b2:f8:87:36:46:5c:f7:41:68:
                    a4:e8:98:a2:5f:50:fb:55:d8:6f:a2:ca:ec:31:41:
                    18:17:63:87:22:81:13:67:1f:3d:c4:cd:86:0f:94:
                    8c:78:e4:65:39:43:2e:f8:2c:1e:67:85:d1:28:7d:
                    96:03:fc:70:7c:d3:04:2d:28:0e:3e:1b:6c:97:2c:
                    ef:bc:80:ad:6b:0c:39:35:67:0f:f0:2e:87:57:1a:
                    56:32:c0:3b:51:a9:9d:62:f7:8b:1c:7b:61:c7:b5:
                    48:c9:a5:a3:1c:e3:5d:ad:0d:29:6e:4f:b9:7b:f3:
                    db:4f:0a:05:6f:ee:90:22:0a:27:f9:da:1b:ba:6e:
                    0b:a7:80:08:d6:11:be:09:3f:4d:fd:54:9b:df:4d:
                    15:42:19:f5:0e:ed:82:49:8f:a5:c9:0d:c0:7f:0b:
                    4c:0a:25:1a:03:60:8b:d0:ff:e1:61:5b:c2:ac:af:
                    d9:ba:0e:45:f4:63:3d:99:4d:50:a6:89:8a:88:33:
                    e7:c2:17:f7:fe:2f:76:db:56:80:29:a5:ff:70:9f:
                    25:04:a4:4e:ac:7b:f4:77:e2:16:94:7a:09:25:a2:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8D:FB:74:D5:22:85:B8:FB:6B:D9:06:48:15:7C:0A:5A:D9:57:DD
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:5d:6b:4f:2e:b7:ec:3d:10:8d:83:31:2a:71:7b:a5:fd:
         b0:ad:79:e2:d4:ac:78:d3:71:42:79:92:35:7a:5d:9f:7b:2d:
         e3:4f:5d:87:f2:6c:5c:12:e4:ae:02:75:15:29:96:35:9a:48:
         2d:68:6f:8a:f9:b9:c8:ec:04:b3:d5:cf:82:0d:08:53:48:4e:
         c8:a4:41:11:b2:1b:4f:81:09:f7:2e:ed:2b:68:e9:64:86:6c:
         9c:38:ed:ee:16:84:9e:1e:07:a2:29:22:c8:52:6a:2d:db:b5:
         cc:c0:0d:ed:f9:5c:c6:0c:6c:d1:be:13:3a:f4:0a:d8:78:21:
         8f:bc:e4:2b:3d:9c:58:aa:09:4e:b1:e9:b5:4a:c2:f1:58:32:
         f9:d8:73:06:79:33:54:b4:ba:fe:43:7f:f2:ff:cf:62:cd:80:
         8e:48:d3:56:be:22:e9:ab:8a:94:0a:bb:f7:4a:2c:75:26:80:
         91:73:07:ca:69:12:f9:00:b4:96:a7:f8:3f:c2:f4:e2:6d:a4:
         05:44:88:e7:01:57:59:07:a7:f2:68:de:e8:f8:97:18:48:34:
         07:a5:35:05:51:7f:14:a4:b3:8e:06:50:24:fe:ed:5f:58:27:
         96:98:66:44:71:88:57:14:ee:17:e5:6b:3d:11:ed:50:49:5d:
         c6:9b:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:16 2026 by rpki-client