Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          Kei73N76jdvF3Ou3DaD6OGLDB+KOOltwwNaTAkIzd8k=
Subject key identifier:   B2:CE:AA:E4:23:96:0A:F0:7C:34:A9:BC:CD:72:6A:18:DC:4C:B5:0E
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       019FA606066FAF57E2D2EE566296D29E1B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 00:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 00:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 00:00:40 +0000
Files and hashes:         1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
                          2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: Ycnj3xLLkh9UqlNlPhcmKmHpMCe9h78BG8IYPF/cS3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a6:06:06:6f:af:57:e2:d2:ee:56:62:96:d2:9e:1b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Jul 28 00:00:40 2026 GMT
            Not After : Jul 29 00:00:40 2026 GMT
        Subject: CN=b2ceaae423960af07c34a9bccd726a18dc4cb50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:5d:b5:35:8b:98:2c:76:fc:02:de:e8:fe:
                    29:53:fc:6c:2a:b5:82:51:ae:af:bd:ca:da:c7:59:
                    ca:e9:8d:13:be:1e:44:e8:00:72:02:9c:ff:8d:88:
                    de:6c:91:27:e7:66:c3:79:13:9b:f5:7d:2d:64:04:
                    8d:c2:95:f7:6c:e5:30:09:53:f4:c2:67:f2:a4:b2:
                    c6:9e:a3:ac:86:47:39:d1:bd:02:fe:07:27:54:59:
                    25:42:26:4b:7b:d2:55:24:dd:f0:de:82:97:97:a2:
                    4e:9b:8b:98:7c:f7:7a:1b:c8:6f:42:17:83:2f:50:
                    1b:8a:b0:11:30:c4:6d:37:86:77:b1:a7:b8:e0:6d:
                    2a:a5:7c:97:c3:9b:76:aa:93:9a:73:28:a3:bc:96:
                    22:73:d9:48:e0:d9:4b:9c:34:45:53:d7:aa:b1:8c:
                    49:18:f8:77:0d:70:39:a0:c6:de:19:31:de:02:8f:
                    68:0d:4b:10:f7:8c:4f:af:cb:7e:5c:1b:da:e8:a7:
                    70:de:f3:4f:5f:ba:52:96:60:95:dc:ed:fb:73:50:
                    fd:77:59:a2:61:0b:5b:8b:ad:a2:ff:d3:f8:7c:e7:
                    d6:c9:de:40:27:06:c9:2b:3f:8a:c3:5d:52:9d:34:
                    86:e4:09:66:39:c1:0e:3d:92:3b:48:f8:40:f0:b5:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CE:AA:E4:23:96:0A:F0:7C:34:A9:BC:CD:72:6A:18:DC:4C:B5:0E
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:15:42:f4:7f:e9:93:4e:62:85:ff:57:10:c1:47:f4:9f:
         e3:16:d9:64:32:be:46:7e:9e:24:e9:a1:05:21:7c:72:5a:a4:
         ca:20:40:72:ca:e1:4d:73:fe:20:ea:4f:64:c0:51:11:80:cb:
         d2:cf:96:7c:1f:5f:61:4d:8f:06:32:be:0a:50:95:55:04:b0:
         c4:26:35:94:87:fc:e2:11:72:8e:df:6d:35:03:ee:67:b7:1f:
         ca:a9:26:85:9d:5a:ea:f1:3c:7e:68:21:f2:54:f2:99:85:11:
         fa:d3:22:98:a4:ab:f8:e2:28:0d:0c:96:7c:e4:39:00:e7:5e:
         85:cd:c9:89:9e:92:c4:2e:ea:11:1e:a5:e7:3f:84:b8:00:87:
         8d:c4:74:54:18:66:28:73:54:25:0f:66:7e:26:ea:b8:74:98:
         aa:04:ca:d2:79:ca:2d:c2:22:b6:3e:b5:10:6a:4b:1f:d5:d7:
         f9:50:8b:3b:ac:16:af:fd:a6:b3:e7:7a:32:fb:7f:9a:32:05:
         35:16:06:0a:ce:82:0f:42:df:07:8a:34:c4:2b:17:7f:33:0b:
         9c:53:7d:92:57:d0:04:32:68:a6:9d:dd:47:65:bd:08:66:6f:
         53:3c:bd:52:04:19:41:b8:b4:75:ed:1b:7f:b9:d4:f6:b6:e9:
         ea:56:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 09:55:01 2026 by rpki-client