Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File:                     6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier:          CGx8FkQnwc83vSmwZokW5JHM5kHqWKiJOc2Y6MbuLCU=
Subject key identifier:   20:C0:B1:7E:6F:8F:82:A2:E7:40:9D:F4:42:82:09:D9:C1:B5:F4:F5
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer:       /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial:       019FA1F295FBBA729E62BD7A6DFE98D8DE25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 05:00:57 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:57 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:57 +0000
Files and hashes:         1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: IOqnxoBobaRL6RliSbsT/dNeDaTAgr6+N8pHnIouC9k=)
                          2: PMopp0pb43IV-3YVKympni_YLmU.roa (hash: mnvZQ9iKDyXCLi1UgHfqzHGFq14R47gSAsxmQmT/bNc=)
                          3: dLk4w45q8Owa8GDVR2RUTXOe0Co.asa (hash: nBWLBlLdoR8D7y1wJlZ6nlGbY1sTEjeLaxtL/KKtDcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:95:fb:ba:72:9e:62:bd:7a:6d:fe:98:d8:de:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
        Validity
            Not Before: Jul 27 05:00:57 2026 GMT
            Not After : Jul 28 05:00:57 2026 GMT
        Subject: CN=20c0b17e6f8f82a2e7409df4428209d9c1b5f4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:50:69:34:1c:9a:13:52:fb:b7:03:b1:6a:
                    9d:4a:bd:d7:36:a6:fc:9b:8a:76:41:ac:0c:7f:46:
                    c9:99:ca:a5:8b:02:45:28:8d:53:42:e9:6b:c5:7c:
                    06:c4:65:89:64:99:88:45:4e:64:dc:07:ed:0b:f2:
                    58:33:4b:59:c7:a8:f6:87:ce:0b:33:36:4b:29:d2:
                    e0:7f:fb:08:93:63:03:97:c0:14:c2:64:35:9e:fd:
                    ed:eb:c4:5d:51:fb:68:92:df:d1:97:9c:7f:c9:b5:
                    38:0a:7c:ac:de:0d:f5:e3:f1:10:ad:3e:91:6e:c2:
                    3c:f9:4a:32:1a:22:50:cb:b1:ea:24:4d:f6:d3:9d:
                    5e:7f:7a:25:89:56:c3:37:ed:7c:fb:fc:80:8e:f7:
                    fe:0c:83:34:be:ce:1e:01:2a:9a:59:a5:fb:3d:60:
                    68:72:45:91:42:af:7d:c5:10:27:9d:39:ca:c3:37:
                    c9:d0:79:d6:5c:be:ba:d4:2d:14:d4:ca:aa:b8:af:
                    f4:4d:e9:57:84:13:dd:99:f2:65:9d:d2:e6:b6:bd:
                    a4:d1:32:7a:a4:ca:d0:06:9b:7e:06:0b:47:d4:8a:
                    af:f2:37:46:37:e4:41:22:1a:b2:b2:e1:b5:33:98:
                    60:aa:ac:c1:e1:12:50:94:52:e7:50:16:77:2f:9a:
                    1c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:B1:7E:6F:8F:82:A2:E7:40:9D:F4:42:82:09:D9:C1:B5:F4:F5
            X509v3 Authority Key Identifier:
                keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:38:e7:53:96:75:8c:1f:34:59:fc:d2:69:c1:1f:c3:f0:
         43:00:af:73:57:b5:bf:70:98:e8:31:eb:85:4c:e6:70:e7:17:
         77:ff:c5:18:94:a2:02:c4:26:e6:e1:2c:dc:d2:96:32:55:59:
         5b:c1:fe:9f:33:d4:88:56:5d:b5:72:5f:69:ea:ee:39:63:51:
         45:dd:89:93:7a:7e:b6:af:9d:d8:1e:ba:3e:39:19:1d:97:3d:
         5e:c2:c3:79:5a:cd:fb:2d:cb:5d:20:17:1c:c2:e9:4e:5a:81:
         7b:a0:5f:34:47:76:12:c3:c7:fb:39:a8:a3:62:87:e9:69:80:
         b8:75:27:4d:83:c6:f8:88:2a:6a:6f:69:66:39:88:5b:e4:0f:
         0d:a2:5d:55:f4:60:f7:48:dc:15:5a:2a:f2:6c:51:56:79:bf:
         de:7d:8f:17:71:27:3e:81:a8:65:74:a6:57:8f:3b:5d:83:4c:
         7b:66:64:99:52:0a:e6:c6:c8:79:f3:52:3b:99:28:14:95:4b:
         c3:d6:e7:1e:ef:e9:a8:2e:ee:2e:19:b6:ee:19:cd:c5:53:4d:
         fc:bd:24:67:80:52:25:7f:ad:2a:36:d7:ce:13:06:57:0a:2d:
         b6:c4:ea:ed:36:33:6b:7a:8f:14:41:2e:42:db:e2:25:b4:77:
         0d:32:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:42 2026 by rpki-client