Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File:                     n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier:          gvIFj8y46Ye8X6Qs2btFOBAWBp2gJTfadd8IPVtlT1o=
Subject key identifier:   38:DE:F9:A2:91:24:AF:EB:4F:CD:AC:99:6A:18:CD:ED:7A:FC:7B:E3
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer:       /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial:       019F3ABD20F08DEE3B16949C42168A4D6C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number:          1636
Signing time:             Tue 07 Jul 2026 04:01:40 +0000
Manifest this update:     Tue 07 Jul 2026 04:01:40 +0000
Manifest next update:     Wed 08 Jul 2026 04:01:40 +0000
Files and hashes:         1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=)
                          2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: /dw2vr6JKgTTUkZw2aF6ImgLqO8PCIG1znkoF4v9kyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:bd:20:f0:8d:ee:3b:16:94:9c:42:16:8a:4d:6c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
        Validity
            Not Before: Jul  7 04:01:40 2026 GMT
            Not After : Jul  8 04:01:40 2026 GMT
        Subject: CN=38def9a29124afeb4fcdac996a18cded7afc7be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:0e:17:59:cf:be:40:9a:fe:9a:83:8c:31:
                    df:25:5e:44:ac:05:cc:9d:32:e5:0e:72:81:7c:64:
                    b7:88:59:54:8d:e8:69:ee:cb:09:44:05:7b:5a:64:
                    be:85:c8:e1:24:38:a0:71:96:60:a6:03:b2:cd:bb:
                    8d:ce:fd:4b:3a:74:a4:cd:13:87:b5:93:44:e4:2d:
                    b2:73:74:bc:3a:fc:8a:20:3f:22:5a:6b:cf:16:6f:
                    af:1d:ac:08:1b:21:0f:85:c7:4a:70:53:e7:f7:4e:
                    0e:da:5f:5e:9a:88:19:8f:01:dc:c2:f3:0e:9c:7b:
                    8d:08:f0:d0:56:b3:4f:d1:a4:6e:48:87:ef:2f:00:
                    90:58:d6:e3:ff:cf:72:f3:be:56:f6:c5:c4:55:0c:
                    92:11:9f:c0:74:04:5d:f2:b6:79:26:56:8b:8f:66:
                    28:ad:46:08:4c:30:35:7e:5a:7d:f0:65:f7:88:ae:
                    41:55:69:a0:67:da:94:ed:4d:d4:0b:28:a1:ad:7c:
                    45:67:d4:a0:3d:8a:3a:c1:02:93:4d:9f:29:4d:0f:
                    fb:78:62:bd:0c:ab:dc:ce:c5:bc:af:d1:b3:a5:88:
                    33:dc:66:91:b6:d3:6d:6b:20:2c:d2:d5:b8:90:bb:
                    cc:cb:e3:de:8d:92:ff:9b:ae:30:dc:8f:6b:12:a7:
                    bd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:F9:A2:91:24:AF:EB:4F:CD:AC:99:6A:18:CD:ED:7A:FC:7B:E3
            X509v3 Authority Key Identifier:
                keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:0b:89:ae:18:26:eb:dd:f5:9c:35:da:6a:51:22:30:52:
         dc:4d:b4:a8:9e:0d:e8:64:0b:31:b4:72:b0:83:a0:52:df:3f:
         5b:f3:91:74:61:eb:dc:56:7d:e4:1d:c6:de:86:8a:94:d5:72:
         73:47:6e:d7:2b:61:38:98:60:1f:78:cd:a7:bd:52:6e:b5:ab:
         0f:13:e7:c2:79:07:cf:9c:84:d3:bf:45:45:fd:64:9b:76:38:
         82:b8:93:46:2e:ad:14:ff:d8:61:63:95:b7:5b:a4:cd:b9:f3:
         b7:8a:d5:de:7f:07:62:26:73:bb:80:0a:32:f0:b5:fd:f9:45:
         99:53:82:48:09:4c:b2:81:9e:34:52:d4:ac:e7:ae:2d:b8:67:
         c0:f4:82:fd:d5:f4:ff:26:32:33:75:d5:7e:ad:89:f8:0a:c1:
         e1:98:75:d8:73:cd:f5:5f:d7:68:b2:b1:74:02:97:d1:56:3d:
         6d:90:92:93:19:9e:e7:38:b3:96:a1:59:90:f7:89:b9:14:bc:
         39:ce:7b:40:72:64:89:72:84:9b:d7:90:16:75:0b:73:46:07:
         74:16:46:e2:b9:85:f5:e3:a5:de:94:47:7a:44:d4:1f:f3:45:
         b1:86:6a:83:1b:1d:b6:17:ce:a9:09:fb:df:f4:3a:1a:aa:d0:
         76:e2:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:27 2026 by rpki-client