Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File:                     X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier:          81CaER4O3ok2MiwKQm9DWVvdetpZbjTNHlTYX7IsiX0=
Subject key identifier:   6F:21:F0:3A:AE:34:2C:E3:43:30:28:72:56:7C:4A:49:FA:8A:C0:C6
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer:       /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial:       019F957FF8149E3CAB8D29DBE0531E532AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number:          0DEF
Signing time:             Fri 24 Jul 2026 19:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:19 +0000
Files and hashes:         1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: pkB9eu0L1ZWzcNBYZfNMQ6EiF34KpUOuaZ2EW+IAHYY=)
                          2: zX6QTKu5bdfzDlEKlxRngpN7jFg.roa (hash: Es/vRwC7rF9QD60Cujq+vg2mRaTno8Hpf1rSpL/09/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:7f:f8:14:9e:3c:ab:8d:29:db:e0:53:1e:53:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
        Validity
            Not Before: Jul 24 19:00:19 2026 GMT
            Not After : Jul 25 19:00:19 2026 GMT
        Subject: CN=6f21f03aae342ce343302872567c4a49fa8ac0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:05:7d:13:43:7c:dc:98:64:bf:56:9d:08:
                    02:93:b7:7f:10:35:83:31:9d:e8:8f:9f:a9:be:94:
                    ca:0e:18:69:19:48:6c:9d:da:39:67:25:9e:e2:c5:
                    50:2c:b5:7d:cd:0c:ed:3d:df:5d:ea:58:23:67:50:
                    cc:fa:d5:80:a0:f7:73:2a:de:2b:e7:f8:d0:c7:47:
                    c5:b9:dc:4d:3f:ef:5b:6a:66:27:7e:ad:b8:ad:68:
                    13:11:35:eb:c3:d1:23:64:44:03:5b:d7:cc:7d:c1:
                    b1:5f:c7:28:31:f4:57:6e:44:fe:97:5a:06:3b:14:
                    04:95:10:48:a6:79:fe:6c:71:80:ad:dd:93:de:ad:
                    93:1a:62:95:35:22:9c:fa:7b:6f:c0:43:02:a4:2f:
                    71:c7:43:02:24:84:e0:9a:fb:03:f3:1a:19:f1:1b:
                    8c:1c:83:75:50:f7:d8:1e:68:5d:f2:88:dd:30:9b:
                    92:fe:9d:1d:81:bd:0a:bf:dc:60:cf:b7:32:0b:77:
                    35:0d:31:b2:a9:5e:52:91:92:4b:22:04:62:d9:9b:
                    4d:41:54:46:ce:27:3e:43:73:25:8e:7e:19:32:2f:
                    bd:b2:80:0c:06:96:7e:95:e8:85:49:81:27:69:98:
                    b5:bf:dd:77:de:a6:e7:5e:2f:a7:c2:15:ff:98:2a:
                    5b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:21:F0:3A:AE:34:2C:E3:43:30:28:72:56:7C:4A:49:FA:8A:C0:C6
            X509v3 Authority Key Identifier:
                keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:05:a2:60:81:47:80:4b:4b:1f:b5:0b:3a:1f:83:de:8b:
         7d:58:64:55:96:4d:07:92:86:e0:e8:1b:11:f3:bb:dd:6d:11:
         f9:be:b7:0d:68:e5:fd:28:7b:21:09:04:03:bb:b3:17:2b:eb:
         ce:7f:2b:2d:1b:8e:65:55:cd:db:86:d3:ba:53:12:84:76:29:
         e8:ad:ee:f7:20:99:9d:df:56:04:c4:8d:ff:c2:bc:bd:30:09:
         7d:ae:c8:ee:7f:21:62:ca:4d:5c:35:7f:c0:f0:70:be:bc:d3:
         66:69:77:a5:87:c2:f8:6a:b1:ea:43:7b:f6:04:40:6e:d0:87:
         b3:0d:52:a9:3f:28:da:d1:4d:03:ce:24:21:99:b9:f6:7a:22:
         1c:a9:c5:12:b7:2b:27:c6:b9:35:e4:b4:e2:84:9c:6a:5f:5a:
         da:be:32:dd:b4:07:80:72:0a:81:24:03:51:7c:58:f7:5a:88:
         ef:a4:6a:45:29:72:6a:8d:37:3c:5c:1f:f3:b8:3a:50:9b:47:
         a2:24:81:98:d4:db:c4:6d:b4:d7:2f:7f:e1:f0:67:8d:94:95:
         22:cc:27:14:3d:51:d3:83:29:5c:71:3e:8d:8e:be:30:b4:0e:
         5a:2d:c4:8c:d1:e9:eb:d1:60:e7:24:e8:a3:f5:ba:5b:bc:b1:
         ec:ba:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:55 2026 by rpki-client