Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File:                     xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier:          Z3PCmuEeMysRODNwHHHgHj3igWIL43EbqcU2uxX/faI=
Subject key identifier:   DF:04:EB:49:15:F3:2A:AE:0E:B2:CA:B2:91:DE:A1:19:3D:12:B4:03
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer:       /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial:       019FA3056C25732352CC7315C9B310D7B339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number:          1961
Signing time:             Mon 27 Jul 2026 10:01:09 +0000
Manifest this update:     Mon 27 Jul 2026 10:01:09 +0000
Manifest next update:     Tue 28 Jul 2026 10:01:09 +0000
Files and hashes:         1: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (hash: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc=)
                          2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: R5QO1RR8kZJew7jzS8BO20xdK7MRfZmuSYrvItY6NNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:05:6c:25:73:23:52:cc:73:15:c9:b3:10:d7:b3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
        Validity
            Not Before: Jul 27 10:01:09 2026 GMT
            Not After : Jul 28 10:01:09 2026 GMT
        Subject: CN=df04eb4915f32aae0eb2cab291dea1193d12b403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:c5:33:35:1d:e2:f7:cd:80:ef:52:11:cd:
                    44:60:ca:29:49:2c:a6:25:f3:91:c4:53:10:02:cb:
                    59:9b:6f:04:a7:39:c8:01:27:68:ff:41:08:9e:c7:
                    e4:e9:54:ca:91:48:07:ff:4b:ce:ad:ac:5f:b2:f9:
                    35:98:e5:72:07:f6:95:49:64:86:99:83:81:8e:d0:
                    30:36:16:4a:98:a0:f7:c9:5d:4e:ed:48:e6:f2:58:
                    eb:b4:72:f8:36:c1:30:db:06:7f:49:7d:49:93:f0:
                    dc:91:ac:ad:76:ab:45:4d:ac:a6:57:0d:b4:5f:f7:
                    24:00:99:92:e5:25:35:fd:7d:e8:74:2d:f4:47:a1:
                    49:64:f6:39:09:79:27:7b:df:56:1b:8d:8d:a8:d7:
                    d0:c3:70:3f:f9:e4:3c:66:06:2b:a7:27:53:2c:74:
                    f2:d8:2b:0f:20:17:6a:77:fa:9e:72:9c:e1:c7:66:
                    2c:8d:cd:63:64:e2:00:1f:7a:83:49:68:5a:f6:30:
                    32:8d:a3:bd:53:86:f9:1c:2c:2d:60:95:b8:eb:af:
                    5d:8a:53:69:e1:fd:13:8e:91:61:be:34:86:16:5a:
                    b5:16:61:52:fe:e0:98:70:f7:82:5c:4a:94:ef:fa:
                    e7:52:7c:9c:a9:48:e6:13:29:9d:8b:f8:35:b3:20:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:04:EB:49:15:F3:2A:AE:0E:B2:CA:B2:91:DE:A1:19:3D:12:B4:03
            X509v3 Authority Key Identifier:
                keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:62:84:6a:f7:f4:92:86:cf:dd:11:e1:4e:d6:b3:95:fb:
         f9:04:74:1d:45:7a:79:81:18:f2:6f:98:6e:98:ca:63:a7:70:
         94:c8:87:3a:b2:c5:97:ea:6e:94:24:69:03:cd:8e:a5:16:9d:
         9f:98:ef:b4:cc:f7:55:07:da:2f:ce:c4:e0:cd:8e:76:4f:9d:
         47:94:bc:1d:e8:88:de:13:b7:0c:da:9e:20:bb:0c:5f:84:de:
         c4:4f:22:fd:63:59:d3:a6:1c:83:da:81:f4:cb:a3:08:fe:79:
         b6:43:5d:5f:b1:cf:b8:15:4f:0b:3b:54:fc:37:05:61:5a:e8:
         27:56:22:09:ba:61:e9:3c:19:7c:cb:9c:3b:2c:95:70:8b:2b:
         7a:2d:79:95:20:da:d0:d8:27:39:43:ab:69:3d:a3:dc:dc:26:
         81:20:98:aa:45:b3:dc:4a:14:02:28:79:2c:7a:2f:dc:4b:b7:
         1f:0b:c2:3e:21:ac:53:65:cc:bc:80:ed:96:f3:52:e9:9a:33:
         68:7a:12:ea:ba:40:3e:34:51:33:94:9c:b7:7a:b3:02:65:8c:
         36:3e:28:c2:91:0e:e9:da:cf:70:2a:9f:ad:23:6c:9d:d0:fa:
         da:61:b6:cc:74:88:e1:22:81:6b:31:c7:28:5b:05:1d:9e:f7:
         ef:56:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:38:34 2026 by rpki-client