Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File:                     6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier:          rYvFTVwj5YYWuthSSLNYaw+TU0J3eWI7P7AcF226JJ0=
Subject key identifier:   A8:D2:32:D7:53:69:27:DC:37:6D:CC:A4:A9:05:C7:8B:04:A1:97:77
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer:       /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial:       01A000CA2B9CE24DCF910F69E0AE0AC86F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number:          1A0F
Signing time:             Fri 14 Aug 2026 15:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:44 +0000
Files and hashes:         1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: vD8OZBgHr//Qxc5X4JgTepTbky8LPe9COwfEdb7KUKU=)
                          2: h49K85L4UEyeEFjotSv0qoO9c5E.roa (hash: Om6LbPxllmjNlvNuigobtMNJ+3VA5Oexf50hnPEjfBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:2b:9c:e2:4d:cf:91:0f:69:e0:ae:0a:c8:6f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
        Validity
            Not Before: Aug 14 15:00:44 2026 GMT
            Not After : Aug 15 15:00:44 2026 GMT
        Subject: CN=a8d232d7536927dc376dcca4a905c78b04a19777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:6c:43:a9:97:8b:05:5c:f7:69:ec:c4:ca:
                    a8:23:e9:95:52:38:49:6f:71:cd:6f:d0:72:ef:99:
                    67:b6:b0:4d:8f:88:b4:17:cd:eb:e9:a6:35:23:63:
                    0c:42:ac:a3:69:93:b2:09:c3:c8:13:2a:95:f0:28:
                    e5:4c:ec:8b:a1:79:97:3b:e7:16:d4:da:c1:2b:e4:
                    ec:0e:2e:c1:ef:48:60:67:77:57:09:71:11:4d:49:
                    e2:bc:6d:20:e1:ce:74:6f:3e:e1:d5:e9:51:83:3b:
                    15:e4:16:47:08:e6:1d:d4:1a:13:9f:94:91:8b:f0:
                    dd:f4:3e:9b:a0:e6:a9:c6:c3:d1:8b:2d:6e:70:7d:
                    95:79:7e:bf:a6:51:74:b5:c4:7e:9a:9b:c1:53:17:
                    b0:b2:09:0f:f3:5e:cf:a3:7c:36:86:73:1f:f1:54:
                    a2:7e:be:2c:25:e0:56:4c:a2:35:22:4f:5f:e6:88:
                    09:f2:98:10:2c:c3:26:d4:b1:d6:81:a8:a5:0c:6e:
                    94:5b:ed:1b:3e:e6:4d:3b:ee:94:d5:fe:ff:a1:5f:
                    69:79:82:da:96:f5:1f:a4:5e:53:79:94:54:2c:25:
                    a9:1f:07:0d:73:11:6e:d5:fb:dc:20:49:79:7a:67:
                    f3:d6:e1:5d:6d:6b:8b:61:bb:fc:e5:3d:68:c9:45:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:32:D7:53:69:27:DC:37:6D:CC:A4:A9:05:C7:8B:04:A1:97:77
            X509v3 Authority Key Identifier:
                keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:63:19:3d:0a:16:de:10:1c:b4:df:86:8f:b1:e0:4e:78:
         a3:1a:26:ec:6c:e2:d6:a5:16:01:ea:da:8c:2e:a9:4d:35:f2:
         92:48:18:c9:58:e7:62:2a:f2:19:85:fa:57:20:f3:f8:94:5e:
         ea:21:20:4a:51:b8:a4:2a:e1:a0:08:08:9f:79:51:14:22:d4:
         5f:19:71:54:3c:7e:29:d3:ec:99:99:47:63:6b:88:93:d2:ec:
         61:b4:19:ef:8d:b4:a5:2e:01:3a:d8:3c:6b:db:65:98:4a:bb:
         a7:e6:a1:3c:58:90:c8:f5:27:9d:34:85:61:3f:d6:f3:96:a9:
         71:0c:7c:ee:e5:f9:41:e3:25:23:34:89:2f:c6:b6:17:11:7e:
         f3:50:3b:38:68:fe:68:1b:1a:ed:7e:8e:d6:c6:43:fa:da:26:
         70:4f:ff:72:e5:dd:82:91:a0:d1:a7:be:86:4a:3f:16:ce:3e:
         d5:19:89:64:f3:f9:9e:41:fa:e9:e9:04:47:3d:b1:b9:55:47:
         ac:3b:91:c9:55:1d:24:57:47:60:95:9c:9c:b7:fe:3e:67:6d:
         dd:eb:3e:a1:e6:7e:34:5e:28:51:2c:90:82:7e:c8:0d:84:53:
         86:15:7c:11:eb:67:9d:44:c3:c5:b1:8b:4b:56:bb:a6:cc:45:
         80:83:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:43 2026 by rpki-client