Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File:                     1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier:          tTZJy+w+r1EqD3HK73hDnsfjkK2/rKrIcEmG5xKiFKk=
Subject key identifier:   EB:61:99:C2:03:35:33:8A:C2:49:57:DA:E8:FB:C6:B0:F7:54:4B:F0
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer:       /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial:       019F84C3FC1B8131B5977A7DE37539F17C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number:          0504
Signing time:             Tue 21 Jul 2026 13:01:04 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:04 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:04 +0000
Files and hashes:         1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: X/dML0AhBNsdv3r8V1CYExelMBgJ2liEMOWJdEMh2LE=)
                          2: HORWGw6AaqSSM12H6ipwx55-oWY.roa (hash: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:fc:1b:81:31:b5:97:7a:7d:e3:75:39:f1:7c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
        Validity
            Not Before: Jul 21 13:01:04 2026 GMT
            Not After : Jul 22 13:01:04 2026 GMT
        Subject: CN=eb6199c20335338ac24957dae8fbc6b0f7544bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:8a:2f:ed:48:94:ae:2d:e6:88:bf:97:27:
                    37:f9:80:58:ab:9b:ef:57:f3:50:80:4e:fe:26:cc:
                    b2:57:4b:69:77:61:cf:03:b6:5e:3a:9a:5a:7c:d8:
                    b6:37:f9:9d:24:2c:cf:0f:71:f2:31:bc:bc:d8:56:
                    6e:41:6f:57:1b:be:41:97:f1:08:12:26:4c:c0:88:
                    d9:91:0f:30:40:89:4e:b0:dd:33:be:80:ee:97:1f:
                    39:05:08:f7:84:74:95:df:16:1a:18:87:2a:a6:ac:
                    71:78:9c:c2:bb:28:1a:20:50:17:e5:74:88:78:57:
                    75:54:f5:dc:d4:d8:f6:a4:25:cb:ac:0b:9c:f2:4f:
                    2b:1c:8e:30:0b:12:30:3f:75:78:51:14:a3:a9:1f:
                    31:42:47:5d:f6:0a:09:58:47:be:88:52:1f:ac:cb:
                    ec:5d:fc:5a:ea:e2:c5:28:a2:38:a6:2e:c4:c0:c8:
                    c0:54:6c:0f:be:9f:b4:79:3a:bf:24:50:88:f5:00:
                    ca:8b:c8:7f:21:4a:c2:d7:fe:f5:57:c2:e4:ef:ef:
                    1a:f2:90:a6:7d:99:cd:92:c0:4b:5b:b6:96:e0:26:
                    d5:e1:92:05:94:2a:c3:d6:8e:8e:5c:6f:f1:07:33:
                    5a:c2:84:84:6e:39:29:92:e9:3c:33:8f:aa:f4:3a:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:99:C2:03:35:33:8A:C2:49:57:DA:E8:FB:C6:B0:F7:54:4B:F0
            X509v3 Authority Key Identifier:
                keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4b:e5:ef:ff:a2:61:8e:ec:de:7e:4d:76:f1:7c:49:3e:1b:
         f7:c8:32:73:2b:61:8e:da:d1:09:55:3b:01:22:38:fc:98:08:
         7d:2e:cd:30:ac:9c:ab:a1:97:a9:5b:4f:36:8e:fe:7b:93:a4:
         53:ea:a1:bd:97:c2:79:7c:36:35:e9:0f:3c:03:5d:20:c5:31:
         f0:66:90:c0:a8:eb:3a:95:d6:23:55:8f:8c:62:00:a9:97:35:
         93:e2:8f:5a:d0:7e:eb:29:72:5d:7d:9a:3f:ff:c0:a5:7b:80:
         fe:9e:a7:83:9e:da:9c:0d:0f:b5:ff:dd:71:0a:a7:9c:a4:59:
         49:33:78:c9:11:7f:14:ed:8a:6d:14:a7:cc:a4:ff:66:44:98:
         cc:63:c3:f5:9e:16:1a:96:53:8c:ea:78:e3:59:ee:61:7e:33:
         f6:63:29:6a:eb:87:f2:be:a9:3b:ec:db:e0:f7:23:d3:5a:70:
         7e:55:29:8b:db:9c:96:e8:af:2d:b3:88:3a:43:ba:5e:be:c0:
         c2:10:f2:b0:ed:54:72:25:c3:e5:19:d7:77:86:d4:d1:ea:ed:
         37:bc:32:d8:86:4b:a5:2f:71:a1:93:c7:4c:75:b9:41:91:a9:
         d9:57:7c:e4:48:78:68:6b:7c:e6:30:e1:48:0b:6d:b5:fb:a3:
         75:d3:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:01:24 2026 by rpki-client