Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File:                     6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier:          7FD+g2wCCPbmgOOgDT+ABp3Yeq8M+KlFRb5k+haOFwk=
Subject key identifier:   B4:19:F3:99:85:33:F2:E4:9E:BF:6B:77:E0:F0:AC:8A:97:4E:24:CD
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer:       /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial:       019F129C0336575EE6871E46E3B73A4210E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number:          074D
Signing time:             Mon 29 Jun 2026 09:00:41 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:41 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:41 +0000
Files and hashes:         1: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: 31NmnLQLoanJFXtt6bipBjTp69jjElrjL5v6LnOksM4=)
                          2: IiDxsemJXJ9syn7DVcgqBSOdwiU.roa (hash: Mg74FQv3qsWZUHALx/g3ZFqZVMyPoPwX8V5c9fFl5ko=)
                          3: NN0QHkAo8YjbrqzfVegC-uPDydo.roa (hash: LNKR2uGp+5Bgg5S1vn+NiLyxeC2w80ohFJfAfQHeysY=)
                          4: X-_TS1I4t-DVqUxoc-khUSm_viU.roa (hash: ODLd3VbptYoQMKlYYBjJpRqUDy9+T6ytXSUAIjxuWLg=)
                          5: jfDD09NObibNSCqsuP6YEF4AHQw.asa (hash: z9lStU54maQh1nylnfpkGX/TJ5sM/hZvxITIIcS0yK0=)
                          6: k4uRfVLkiFx02imsmzFdIo0Ou9I.roa (hash: 9rPMDuoX5kSVG70I/Za6IhaLgJW41gakMpsQjx7kJlA=)
                          7: rIDOAUoKFwKwGINXnPmMsHQWi5c.roa (hash: NW5RLPV2D9akEYqeNDha9BvwB/AzK2kgHaHsg+BPsU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:03:36:57:5e:e6:87:1e:46:e3:b7:3a:42:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
        Validity
            Not Before: Jun 29 09:00:41 2026 GMT
            Not After : Jun 30 09:00:41 2026 GMT
        Subject: CN=b419f3998533f2e49ebf6b77e0f0ac8a974e24cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:be:82:24:da:d7:8d:c2:90:44:78:c8:a7:
                    ec:1b:15:47:c8:26:6d:14:fb:ed:15:3e:15:ac:75:
                    00:8f:c0:b0:91:70:47:88:86:81:07:78:77:d6:80:
                    41:d1:fc:ee:eb:c9:4a:25:10:c8:db:6d:7e:11:be:
                    b5:32:88:5c:c0:a6:00:af:15:b9:31:57:b6:37:a7:
                    8c:53:ae:db:9f:18:2d:d4:98:e3:9f:06:88:40:d7:
                    d9:93:a8:0f:97:1e:1f:b1:8b:82:4d:10:81:0f:9a:
                    82:83:b3:47:af:6c:14:93:62:af:e0:53:8b:99:2a:
                    dd:9e:b1:d4:f6:c5:30:63:86:f9:dd:32:31:4f:2c:
                    d4:f6:01:c5:67:01:e6:6a:4c:1f:ab:20:d8:a1:fb:
                    00:1b:6a:fc:33:c1:dd:19:76:ba:3a:42:55:7d:98:
                    b8:81:9f:3b:13:9c:91:6f:c3:b0:e2:8c:7f:d6:27:
                    3d:0b:23:0a:94:01:72:96:67:9f:5d:65:70:8c:23:
                    a7:87:4a:75:63:62:b8:eb:bb:76:f4:67:05:e7:10:
                    2f:44:86:b3:70:55:77:e1:fa:97:bc:12:64:75:d6:
                    6c:fa:7c:98:eb:28:21:4b:bc:51:91:3f:1c:38:c1:
                    72:df:33:b2:47:7a:15:dd:a6:29:52:0f:9d:81:c2:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:19:F3:99:85:33:F2:E4:9E:BF:6B:77:E0:F0:AC:8A:97:4E:24:CD
            X509v3 Authority Key Identifier:
                keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:61:98:be:95:7e:6a:e2:48:0b:b4:b2:54:0a:3f:68:d8:
         38:53:b2:7e:68:90:34:20:44:e0:a6:69:c3:63:0f:2c:b1:1d:
         05:01:f8:26:3c:4f:99:ed:67:70:fc:7f:76:53:20:f9:7e:dd:
         f2:0a:0a:e3:01:b7:af:1e:cc:75:6c:de:5e:2b:7c:0d:51:7a:
         fb:dc:c1:e0:d7:bc:ad:91:0f:0d:25:23:4f:e3:c0:fd:9c:cf:
         cf:b6:ad:4a:50:b5:04:0c:db:b0:48:76:7d:5d:e2:d2:31:15:
         78:b6:86:98:91:7a:60:a2:e4:d7:46:1d:d4:c8:50:e0:50:ec:
         ca:82:4c:9f:43:08:7f:de:b5:6f:16:0e:7b:71:73:f7:7e:18:
         3b:31:6b:27:bd:d1:0b:09:f0:54:d6:7b:ee:e6:cd:22:d9:61:
         00:b2:58:8f:68:b5:2f:c0:bc:4a:b6:2d:8b:0d:0f:8d:5e:8a:
         7c:0e:73:9f:fc:7f:18:ee:72:05:27:6b:0c:9b:78:2e:ef:8c:
         3d:93:c9:40:55:01:b8:b1:da:b9:80:5f:3b:6f:30:8a:9e:7d:
         e6:c7:8f:48:1c:b5:84:de:97:b7:7e:55:9f:d4:2a:f3:7f:0a:
         76:6c:ad:49:a5:8a:7f:a8:ee:be:e4:c0:01:c6:2f:ae:e6:39:
         41:86:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:08 2026 by rpki-client