Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          9VqPpYtfn+UiuMGfWtDKNLDCwsPTZDUzZUcLc1c9YyE=
Subject key identifier:   2A:88:50:B6:19:3F:10:DD:86:BD:72:32:09:91:C4:A8:F4:E0:D9:5A
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       019F867B14F40C6D0D253744FB0910E5393F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          1654
Signing time:             Tue 21 Jul 2026 21:00:40 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:40 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:40 +0000
Files and hashes:         1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: jyQcdfv7W7+d+P6MPr1XlE5mT/wo18CFpmcNbo0ENUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:14:f4:0c:6d:0d:25:37:44:fb:09:10:e5:39:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: Jul 21 21:00:40 2026 GMT
            Not After : Jul 22 21:00:40 2026 GMT
        Subject: CN=2a8850b6193f10dd86bd72320991c4a8f4e0d95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:60:03:a0:e1:40:ac:96:b5:0e:3d:30:34:
                    32:d1:d1:d4:30:fb:6a:16:cf:5d:e2:91:37:b5:cc:
                    0a:cb:5b:0e:ef:3d:c5:46:ff:01:fe:86:42:6f:b0:
                    31:e9:65:91:60:86:84:ae:3c:56:85:68:bf:ea:77:
                    fe:7c:aa:d4:79:e1:00:f7:0e:db:f8:54:28:02:3b:
                    0c:dc:a4:1e:01:4e:76:74:2a:dc:a2:05:91:c9:06:
                    16:fc:8b:fb:50:2e:a7:c2:85:13:a0:ff:18:d4:d4:
                    0b:c0:b9:d9:0b:21:3e:b7:e8:cc:92:8c:d9:76:b5:
                    09:e1:02:9e:b3:6a:e4:ca:5b:c8:b2:44:29:41:ab:
                    a9:d9:30:42:ed:56:3a:c3:cf:79:ea:3d:55:66:77:
                    b0:f8:0e:f6:07:f8:95:cd:70:2a:13:d9:63:fb:68:
                    54:e4:03:49:91:38:02:cd:21:67:5d:48:4d:71:2a:
                    7f:8b:da:bc:d2:24:dc:6a:a4:c7:f0:d6:d5:47:25:
                    8a:29:e1:01:f4:18:49:b5:f6:f8:55:62:aa:9f:ce:
                    8a:20:34:5d:cf:74:6a:d7:9b:df:7b:d0:25:18:31:
                    ec:2b:16:a1:a5:1b:3e:21:9f:97:74:7b:f1:3a:4e:
                    e8:01:c7:74:ee:49:a8:3d:2a:a6:8a:73:29:d3:60:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:88:50:B6:19:3F:10:DD:86:BD:72:32:09:91:C4:A8:F4:E0:D9:5A
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:84:6b:8c:88:0f:7b:4e:21:85:92:b8:2a:31:8a:ca:08:f0:
         57:bd:16:f7:b2:c2:34:e3:cb:4b:43:c1:98:33:02:a9:42:32:
         5c:83:d4:cc:cf:a2:38:15:08:ba:89:b3:21:f3:8e:55:00:9c:
         84:69:b8:3c:2a:f8:06:e7:3d:b9:d4:61:71:12:f0:ae:8e:f7:
         24:0d:a0:fb:23:27:f1:9f:60:3c:31:2c:bb:ac:75:73:90:2b:
         7a:b9:a1:af:2b:3a:a2:61:4b:e7:3d:9b:a4:56:de:e9:5c:b7:
         f2:63:09:1f:e3:c1:ff:db:00:48:8f:a1:a0:0b:0e:d6:f7:0d:
         e7:9f:22:6c:e6:85:f0:c7:44:b0:73:90:ec:c4:78:b7:f3:32:
         2c:c7:4d:f6:8f:84:04:c6:79:c1:1e:2f:bf:15:2c:3c:3b:62:
         63:8c:37:29:65:e7:6c:c3:1f:9d:9d:d3:c6:80:c6:70:11:6b:
         e1:3a:26:45:ab:e2:c2:20:b1:63:04:fa:8e:96:7e:5c:1c:26:
         98:36:4a:fc:b5:16:12:ec:b3:ab:4a:92:d1:ad:4b:94:4d:6d:
         e5:1e:96:f5:7b:e2:3d:80:ba:ce:1c:36:db:4e:97:d2:dd:ff:
         33:5a:49:8e:e3:a8:46:57:fc:d6:94:ec:5e:71:05:87:10:9b:
         a1:12:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:47 2026 by rpki-client