Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          vd+aUPVswPlbN7VCfH5Q8ZbT+qfiWf4kehVCJ2x4Lu0=
Subject key identifier:   5D:D6:32:58:03:2D:53:FB:64:49:27:DF:A8:D1:06:7D:7D:26:E9:8C
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       019F91A3C3E838623A4158F8EF40D5624750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          19A6
Signing time:             Fri 24 Jul 2026 01:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:56 +0000
Files and hashes:         1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
                          2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: Ub8iLhgYL3/lcczYz1c3O5Dc6bn59Q6s/BirBwiOZvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:c3:e8:38:62:3a:41:58:f8:ef:40:d5:62:47:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Jul 24 01:00:56 2026 GMT
            Not After : Jul 25 01:00:56 2026 GMT
        Subject: CN=5dd63258032d53fb644927dfa8d1067d7d26e98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:01:81:42:9e:d3:de:31:6e:15:c0:c6:0e:62:
                    26:9b:41:f8:5f:57:6f:d3:43:1b:3d:0e:27:cd:5d:
                    2f:5e:cf:70:a3:f6:51:51:8b:9a:7f:de:5b:af:5a:
                    b5:b6:37:fa:ce:57:7c:b1:c6:77:db:97:94:96:25:
                    56:bc:f8:2e:cd:6f:6e:9f:d7:d4:0e:2e:c3:b9:d0:
                    8a:81:22:b1:86:40:8d:29:e8:8b:a9:55:b9:a7:dd:
                    ec:d3:ba:88:60:33:e3:09:3f:1e:d0:bc:3a:cf:a3:
                    b9:b0:03:90:54:17:ea:4e:67:5c:c4:79:62:91:ee:
                    b3:c5:f8:9c:dd:95:8f:16:ee:3e:00:c2:1c:30:bf:
                    1f:c6:b5:4e:84:53:ee:f6:ff:de:0c:d9:e8:34:2c:
                    84:be:05:c2:d3:06:5c:d8:b2:da:b0:84:d2:f4:46:
                    0f:e4:52:1e:4d:77:cd:8f:b7:0c:75:b2:bc:8f:6f:
                    3e:19:9c:6c:2a:fd:d5:07:81:41:58:68:ab:97:44:
                    d0:2a:b0:d8:f4:97:70:82:6b:50:19:ed:21:4d:89:
                    95:45:42:d6:eb:af:38:39:3c:96:91:9b:09:46:08:
                    6e:78:7b:4d:e6:19:12:ca:8e:7c:9f:b9:25:9f:b3:
                    7a:83:7b:fd:35:b9:22:be:1a:96:93:1e:47:40:02:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D6:32:58:03:2D:53:FB:64:49:27:DF:A8:D1:06:7D:7D:26:E9:8C
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b5:73:df:a8:df:3e:31:48:59:89:e0:9b:39:9c:0b:ee:bb:
         c5:64:b1:db:20:cd:59:ef:5b:a7:c3:be:8c:cf:83:06:7c:78:
         62:19:e1:b9:41:64:66:ce:f9:f9:68:3a:b7:2d:c5:f8:9d:84:
         81:36:60:7c:a4:b9:8e:c4:bb:42:d2:ab:87:88:bb:4f:87:9c:
         78:ef:b8:42:b0:1c:36:fa:39:1e:2e:72:d3:b7:95:b9:79:ec:
         0a:7e:72:ee:83:d1:b9:07:ec:a1:35:be:3d:68:e4:4c:fa:07:
         82:2d:6d:c7:df:79:67:ec:9c:f8:e4:f5:a2:4a:2b:29:f9:be:
         33:c9:7e:4e:02:83:74:51:2b:69:32:ab:1c:e3:2d:37:3e:26:
         dd:b4:09:6f:db:9b:18:b1:cc:f5:5c:75:97:08:14:ab:63:44:
         06:04:86:7c:52:a3:14:36:f3:c8:07:09:f2:e9:24:9e:ca:fd:
         f6:d2:83:67:b5:af:e2:a6:08:f8:01:e5:ef:3a:8a:e0:7f:fb:
         1f:13:b0:46:62:bc:7b:bf:9d:38:c8:01:00:d2:fa:4d:ef:a5:
         de:94:6f:5f:ac:c4:57:75:d1:f1:42:b5:32:40:24:d3:00:3f:
         15:7d:f1:e6:c2:21:bd:a0:00:4b:c7:d8:22:e3:b0:c9:f1:65:
         6d:e3:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:09 2026 by rpki-client