Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
File:                     6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json)
Hash identifier:          fXJKmEF6kHs14AAwTBmCuTF4veQpEdjvA4Caz0lRouw=
Subject key identifier:   80:86:43:6B:89:B5:56:94:90:DB:B9:9A:DC:8E:F6:2F:C5:B6:4B:85
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Certificate issuer:       /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial:       019F905A161A2D0C468C8148638C59FB0677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
Manifest number:          058E
Signing time:             Thu 23 Jul 2026 19:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:50 +0000
Files and hashes:         1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: 6HYoWAFt1u9GLeBPkULWzOM4r3xkkouk3AqZs/fr6fk=)
                          2: RXuM8IAV9dKlB2EmQJTkf2N4B2Y.roa (hash: WD8pAbNOanv690TfIXURotgNnDP3a1P1ohNJm3tKlWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:16:1a:2d:0c:46:8c:81:48:63:8c:59:fb:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
        Validity
            Not Before: Jul 23 19:00:50 2026 GMT
            Not After : Jul 24 19:00:50 2026 GMT
        Subject: CN=8086436b89b5569490dbb99adc8ef62fc5b64b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:ca:3d:40:12:70:90:b5:75:a4:29:b1:da:
                    6f:72:6a:03:36:32:4d:38:a8:68:08:f0:18:af:46:
                    cb:24:6a:28:c0:04:63:68:cf:b9:18:c5:10:5e:90:
                    59:f3:84:77:41:04:c4:9e:2c:81:e3:23:55:d9:47:
                    89:96:76:e5:99:48:7a:d4:3d:11:b0:d2:05:a6:0c:
                    aa:9d:17:61:cb:91:24:36:d6:65:88:b8:57:d1:a8:
                    94:7d:fb:79:93:78:92:24:4a:fd:08:f0:ff:fd:b2:
                    72:b1:8a:a8:18:6c:09:b2:68:c1:7b:d8:b3:93:24:
                    af:c7:ee:3d:72:89:d8:d1:15:95:71:f6:f2:71:67:
                    8a:55:d6:6a:11:80:8f:67:c0:b3:35:ba:86:d5:c1:
                    e2:63:46:cb:d0:13:a3:d7:40:d0:ba:81:5a:e2:df:
                    be:55:16:6f:05:3f:ba:97:9a:ba:95:0d:ab:34:ae:
                    35:ca:8c:48:bf:37:80:a3:9c:ac:3c:62:77:cc:31:
                    9a:cd:51:52:2f:96:3f:b6:f1:00:89:01:be:b1:72:
                    c7:54:7b:67:90:e2:b6:5a:0d:5a:38:ca:cd:6d:c9:
                    0a:32:fc:a9:36:2e:e2:55:d1:52:2c:9d:31:30:02:
                    1a:c3:96:af:f6:a7:19:14:0a:fa:b0:84:b3:51:be:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:86:43:6B:89:B5:56:94:90:DB:B9:9A:DC:8E:F6:2F:C5:B6:4B:85
            X509v3 Authority Key Identifier:
                keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1b:7e:5d:6e:06:7b:5e:4b:cd:9c:33:65:db:57:82:f1:e5:
         fe:49:87:ee:2c:5e:0d:8d:88:8b:a1:6e:07:5e:4b:07:2c:c8:
         a4:99:d3:ff:e5:a1:54:cb:96:04:2e:1a:b9:bd:3e:fb:d9:67:
         bb:93:54:0f:d7:d4:cd:f1:01:00:ef:c2:de:7c:38:35:5b:ae:
         f7:7b:0a:60:91:0d:71:26:d8:51:29:c7:c8:1b:6b:86:dd:1b:
         92:1d:3f:ab:50:96:55:9d:0c:6f:9b:98:f5:45:4e:1c:51:97:
         2a:16:ea:5e:fe:62:62:2a:61:1a:56:44:43:7b:cd:3c:83:c0:
         eb:64:95:5d:47:7a:4e:72:03:78:41:a7:14:af:bf:c0:ea:1e:
         e9:0b:8b:e2:82:26:d6:48:06:24:a8:80:f7:6b:23:bb:ad:d8:
         26:c5:92:0e:22:5e:cf:07:5f:73:3f:44:2d:14:f2:b2:46:b9:
         bd:d2:e8:84:b8:95:f2:56:c0:42:00:be:f1:b9:6e:c4:61:b0:
         51:6d:1e:da:27:77:25:58:d9:f4:54:a2:b0:8e:08:e7:bb:ab:
         41:32:eb:07:87:91:75:e8:30:98:11:fb:75:f1:6b:d6:d6:55:
         f0:7b:a1:8b:7f:7c:f1:1c:ab:fa:8a:2c:5e:31:68:0c:6a:a5:
         8f:04:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:36 2026 by rpki-client