Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          OudIO50kDVaqQ8ljLULMiB9PHSJFWSueiM9sYCAN1OQ=
Subject key identifier:   91:28:64:6A:A5:37:E0:FC:D2:23:D6:FA:83:6B:E3:77:75:C5:31:0B
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       01A02469119C9AEB5381E975E20118F84532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          1730
Signing time:             Fri 21 Aug 2026 13:01:00 +0000
Manifest this update:     Fri 21 Aug 2026 13:01:00 +0000
Manifest next update:     Sat 22 Aug 2026 13:01:00 +0000
Files and hashes:         1: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: nzIDbRgcRU8zZJbEnhH536h+bGfpDc0dyBe2OtN5+KQ=)
                          2: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (hash: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:24:69:11:9c:9a:eb:53:81:e9:75:e2:01:18:f8:45:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Aug 21 13:01:00 2026 GMT
            Not After : Aug 22 13:01:00 2026 GMT
        Subject: CN=9128646aa537e0fcd223d6fa836be37775c5310b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:4f:f3:50:7a:9f:79:04:3a:6a:99:64:e9:
                    d2:af:0d:50:96:33:4e:ff:42:dd:c0:83:c9:f9:82:
                    cc:e2:bc:75:08:b6:c1:65:ea:9c:e8:4a:f2:c4:c4:
                    ce:a3:d6:70:b3:e7:8b:56:8d:87:ad:f7:c1:ef:bd:
                    34:43:53:2f:0b:ef:f4:01:79:fa:11:99:e2:9b:a3:
                    d3:1d:be:70:5f:25:65:b8:a1:a8:ca:bf:86:5f:b5:
                    e7:d4:58:a6:3b:a3:05:2c:1b:54:5b:a6:88:74:18:
                    3b:c0:6b:e6:74:0e:b4:1f:d7:3a:3d:17:65:49:e1:
                    07:f2:ad:41:39:b9:46:b4:f3:f6:63:0e:26:c8:62:
                    d5:cb:20:41:b8:9f:d1:55:85:82:d6:2e:64:ff:f7:
                    83:cd:24:5e:0e:7b:94:72:fb:1f:9b:9c:7f:71:60:
                    8a:83:45:dd:c2:a8:14:7d:77:a5:de:61:26:8c:19:
                    b4:0d:4a:cc:d2:d1:55:49:a0:d7:0d:e5:1a:45:64:
                    a5:73:a1:0b:16:a0:6e:21:df:5c:08:77:97:6a:9d:
                    00:5c:72:c3:1c:9b:d1:38:9b:c4:67:6f:b2:01:4c:
                    46:c3:71:97:34:d4:27:ac:fb:2b:29:6e:1d:1c:5c:
                    f8:bb:ca:be:f9:83:87:3d:06:0b:cb:25:7e:1c:92:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:28:64:6A:A5:37:E0:FC:D2:23:D6:FA:83:6B:E3:77:75:C5:31:0B
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:96:a5:62:99:05:c3:24:94:8f:26:5d:f3:da:7c:3b:4a:cb:
         e9:77:4f:97:fa:cf:c3:35:27:61:26:1e:f3:78:be:7d:2f:63:
         da:c9:27:4d:0e:32:bb:f8:d5:35:06:b1:8a:1d:10:07:53:78:
         ce:1c:c7:78:37:37:a5:ea:bc:7b:36:08:91:d9:47:5b:6b:af:
         ec:2e:92:83:7b:2c:1d:97:46:07:ae:7c:6f:17:87:5b:4c:40:
         10:6f:13:38:07:01:96:62:50:b4:5a:b4:8d:be:32:2f:d6:39:
         02:14:5b:1f:e4:f8:10:94:ee:59:45:38:fc:83:b2:cb:23:6e:
         e0:8b:04:05:bc:4b:4f:67:7e:87:40:3c:d4:6c:c7:74:8b:ca:
         61:17:dd:24:57:40:72:4e:5a:0f:e4:0a:4a:a4:ed:6d:90:2a:
         ab:37:56:8c:fc:ab:da:a2:39:af:59:67:9a:14:ce:c2:36:39:
         d3:04:6d:0d:58:93:ef:e6:6f:bf:51:ab:b1:93:ef:5f:2a:a0:
         7a:c2:36:91:8c:0b:a6:02:17:3f:c3:01:35:45:81:58:30:fb:
         e3:57:63:49:ac:74:38:6c:d8:da:93:c7:ae:9c:24:fe:5a:86:
         21:8d:bb:09:9b:4b:36:1c:57:fe:d1:f7:09:09:32:12:f7:d4:
         13:fd:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:44 2026 by rpki-client