Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          XANEhPjClhen42Y1bL8ZbITEq6dV2P2NXn56QFzbXAc=
Subject key identifier:   59:2D:2A:14:A8:6C:1C:4B:B2:09:AB:E7:5B:BB:54:15:92:34:61:0A
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       019F916D92DC08E0E9A0C733F9F91A23C4FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          17AB
Signing time:             Fri 24 Jul 2026 00:01:44 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:44 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:44 +0000
Files and hashes:         1: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: fLrBC//j2fvYtyU6o1xLk0Zk1xvE/RAV0zIP4uBKRpc=)
                          2: 7loClnPIcUbtAbx6mGh0lsGW48o.roa (hash: yOcHIjd7oPv+N53vYMQlYvden0DATni198YCMHAm4lo=)
                          3: OdOsnmY7mFWYl3NneL7smCsUfBk.roa (hash: 3ZUW45T9dWsqHLezKT+QoIPnfwMwqZBKXn6daUP8VPY=)
                          4: RpFQVqs6AhWj2RTqUCdH4sWGuGU.roa (hash: j5JWbGxhiLws6+4v7Q+xQtpFTmvjadNSZy3J+QPjD2E=)
                          5: bJ1xftCeyWl4bXChZCw5Xi3s6aY.roa (hash: OVR8awV0iRm5IfM/UmEnkKeqOwpzIAzrZDkyNT/4Rhw=)
                          6: feRgJ8Tgs02CST_94QIydWyNOqI.roa (hash: 6/iSawmzTOEL47ThEXqsqngTOM3QKDo/dxI2Dx6rGEM=)
                          7: gsF1NmgMnu9Ca4ZyyOypgxhgV0g.roa (hash: TJu260zcK4vOdWrtlvkrVASOWCULxHs+p/9+8TiE4mQ=)
                          8: yli3cmEKkG3rbScNRHGblhqAvA8.roa (hash: qAidfk/RnX+PDBXeHtXjoHlHJ126KLvwshcghnEBZqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:92:dc:08:e0:e9:a0:c7:33:f9:f9:1a:23:c4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Jul 24 00:01:44 2026 GMT
            Not After : Jul 25 00:01:44 2026 GMT
        Subject: CN=592d2a14a86c1c4bb209abe75bbb54159234610a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:6e:63:e3:88:e0:19:29:76:b1:47:e3:a1:
                    23:6b:f7:c7:6d:81:fb:6b:ec:b2:84:b4:f7:70:23:
                    a8:8d:64:e8:d3:ee:ca:04:13:3b:e9:7a:e0:e5:fe:
                    fc:5a:ba:2e:70:fb:92:19:86:4d:d2:41:55:3b:e9:
                    e8:7f:9a:70:2b:90:a4:1f:a1:25:f3:da:7f:9f:45:
                    f5:31:78:e5:2c:f6:da:01:e2:c4:bd:56:30:1b:91:
                    78:aa:bd:a5:59:32:77:fa:76:47:69:c8:06:cb:fd:
                    96:57:a9:22:7a:f5:99:99:bd:8d:9f:8f:fe:b0:22:
                    ce:23:82:c6:fd:21:35:a7:49:6f:b1:03:8d:9b:a0:
                    5a:c7:0b:ff:14:c8:bf:58:48:ba:34:84:43:36:e9:
                    76:52:48:36:44:9f:15:19:83:5d:d8:9b:d1:2b:68:
                    54:3e:9c:2b:3e:a3:b0:3e:68:77:d3:b3:3f:9f:84:
                    51:44:91:a9:7c:61:6b:6e:a6:54:d1:c7:55:52:41:
                    4a:47:b1:e7:5d:b7:c7:e2:71:61:c2:46:71:f2:54:
                    77:a8:08:28:00:16:31:11:26:f1:c4:3e:f6:1c:79:
                    de:1c:76:21:08:72:10:66:f9:0e:64:96:ab:b9:39:
                    b8:47:84:68:1d:77:25:7b:8c:e9:02:e1:47:81:92:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2D:2A:14:A8:6C:1C:4B:B2:09:AB:E7:5B:BB:54:15:92:34:61:0A
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:dd:f8:f2:92:e3:d7:e1:d9:c8:87:b4:66:70:40:1e:b0:ed:
         f9:d4:34:d3:f2:59:26:a9:04:a9:42:fc:da:d7:86:0a:91:93:
         cd:1b:db:a0:62:e3:20:53:66:d5:a6:c8:db:5c:d2:aa:37:ea:
         90:7a:3a:83:8e:a3:b2:8a:d3:be:b2:e4:6c:30:d7:e9:0e:6a:
         b9:49:d9:ca:4f:92:5b:85:c9:2c:23:fe:1e:72:8a:a7:65:97:
         05:41:b5:2c:0b:5e:aa:36:27:b3:ac:df:45:54:07:c0:6f:42:
         f7:6d:8d:e2:e2:af:4f:10:c3:97:96:61:86:05:8c:f3:14:57:
         10:04:8c:45:da:c5:6f:38:6f:39:cf:2e:d9:35:e0:fd:d1:9a:
         58:66:aa:0e:37:21:00:1c:cd:30:2d:64:26:23:62:70:de:57:
         78:92:ef:83:46:b2:27:12:ae:b7:96:c8:71:e1:8e:9d:db:8a:
         ee:08:61:91:d8:41:c7:ad:ed:be:28:b9:2d:aa:8c:d5:34:d3:
         ff:71:b0:29:b0:72:e4:f2:ec:3c:45:e4:73:31:44:ce:dc:0f:
         77:d5:e6:38:80:42:09:09:15:45:e5:3a:72:ab:2e:44:fb:57:
         29:fb:45:d4:da:c4:ed:c1:eb:df:da:47:13:85:00:22:f4:d2:
         c5:64:cb:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbZLcCODpoMcz+fkaI8T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzU0NjRlODk4MTZlZjAwYjAzNjk1MDIwMThhN2U1OWNl
MmQzNmMwHhcNMjYwNzI0MDAwMTQ0WhcNMjYwNzI1MDAwMTQ0WjAzMTEwLwYDVQQD
Eyg1OTJkMmExNGE4NmMxYzRiYjIwOWFiZTc1YmJiNTQxNTkyMzQ2MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5JuY+OI4BkpdrFH46Eja/fHbYH7
a+yyhLT3cCOojWTo0+7KBBM76Xrg5f78WroucPuSGYZN0kFVO+nof5pwK5CkH6El
89p/n0X1MXjlLPbaAeLEvVYwG5F4qr2lWTJ3+nZHacgGy/2WV6kievWZmb2Nn4/+
sCLOI4LG/SE1p0lvsQONm6Baxwv/FMi/WEi6NIRDNul2Ukg2RJ8VGYNd2JvRK2hU
PpwrPqOwPmh307M/n4RRRJGpfGFrbqZU0cdVUkFKR7HnXbfH4nFhwkZx8lR3qAgo
ABYxESbxxD72HHneHHYhCHIQZvkOZJaruTm4R4RoHXcle4zpAuFHgZKrWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFktKhSobBxLsgmr51u7VBWSNGEKMB8GA1UdIwQY
MBaAFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMt
MzFkMTk3ZjEzOWQ4LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMtMzFkMTk3ZjEzOWQ4
LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgd348pLj
1+HZyIe0ZnBAHrDt+dQ00/JZJqkEqUL82teGCpGTzRvboGLjIFNm1abI21zSqjfq
kHo6g46jsorTvrLkbDDX6Q5quUnZyk+SW4XJLCP+HnKKp2WXBUG1LAteqjYns6zf
RVQHwG9C922N4uKvTxDDl5ZhhgWM8xRXEASMRdrFbzhvOc8u2TXg/dGaWGaqDjch
ABzNMC1kJiNicN5XeJLvg0ayJxKut5bIceGOnduK7ghhkdhBx63tvii5LaqM1TTT
/3GwKbBy5PLsPEXkczFEztwPd9XmOIBCCQkVReU6cqsuRPtXKftF1NrE7cHr39pH
E4UAIvTSxWTLBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:23 2026 by rpki-client