Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
File:                     6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft (raw, json)
Hash identifier:          3b/6PH16Cg/50nqrH3JzwA3GAPe2IrGXO/uZFsPM9d4=
Subject key identifier:   C4:07:04:43:4F:87:A2:DA:0A:B6:B3:37:32:21:AC:05:80:52:6B:27
Authority key identifier: E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34
Certificate issuer:       /CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
Certificate serial:       01A001A5CCBD435F12F6DE454B0623CEA0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
Manifest number:          1477
Signing time:             Fri 14 Aug 2026 19:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:38 +0000
Files and hashes:         1: 6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl (hash: qh59UCy5WTZf7bDV4tck+1afzr7jfcIMMG949XfKEis=)
                          2: UpgEGqcu1GJuaf10KzAyz7aDr-8.roa (hash: FafcYCab2MaXN/I3JHkDEUMkIjEyTMvrCthzIZARBZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:cc:bd:43:5f:12:f6:de:45:4b:06:23:ce:a0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84187984faaeff8fa1d0d48aed7c0cfd800de34
        Validity
            Not Before: Aug 14 19:00:38 2026 GMT
            Not After : Aug 15 19:00:38 2026 GMT
        Subject: CN=c40704434f87a2da0ab6b3373221ac0580526b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:d4:ff:f0:71:97:a7:2c:12:07:f5:24:f3:
                    04:a6:15:d5:b5:b8:eb:86:86:0d:cd:45:c4:ed:63:
                    75:de:49:94:a8:9e:1b:29:81:2e:f4:43:08:30:c8:
                    7c:9e:97:7f:5c:bf:d0:ca:82:da:1e:28:24:bd:4a:
                    90:88:d9:a9:16:d3:76:ea:e2:90:91:65:79:22:4a:
                    75:1c:64:ec:03:b7:b1:14:cb:5c:b3:fa:e7:83:d7:
                    bf:d1:7b:32:62:e8:f7:da:d9:46:df:3d:3e:1d:ca:
                    aa:f1:2d:6a:dc:ef:f0:22:2b:86:e9:d4:12:dd:38:
                    48:a4:c1:cc:eb:a9:85:23:6c:8c:44:83:65:ac:d3:
                    6f:fc:79:3c:ef:93:ad:d0:e3:7b:65:97:59:95:5f:
                    a8:8a:15:c8:bf:c4:57:0a:2c:01:21:26:6f:27:b0:
                    9d:45:57:f9:02:06:bf:f9:9d:21:b4:69:b3:8f:ea:
                    93:7c:58:fa:a5:0a:1f:f6:18:ba:c9:77:b6:5b:2e:
                    1f:08:35:44:57:cf:e7:b8:8f:d7:24:81:8b:0b:42:
                    ee:51:a3:90:a7:dc:23:e0:c6:6f:78:53:7b:12:47:
                    69:d6:4f:19:63:72:eb:1a:2e:b6:f6:50:0b:9c:ff:
                    00:dd:a1:bc:1f:0e:73:d0:34:73:76:f0:08:77:19:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:07:04:43:4F:87:A2:DA:0A:B6:B3:37:32:21:AC:05:80:52:6B:27
            X509v3 Authority Key Identifier:
                keyid:E8:41:87:98:4F:AA:EF:F8:FA:1D:0D:48:AE:D7:C0:CF:D8:00:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5df231-2684-4f13-ab6f-ea302ad18ad6/1/6EGHmE-q7_j6HQ1IrtfAz9gA3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:d9:96:e1:07:d1:d6:03:4d:d9:59:48:e1:96:af:41:dc:
         a7:ce:99:30:01:95:17:74:8e:d0:07:c0:cd:ea:23:6a:72:15:
         5b:f3:26:83:52:e7:4f:16:d0:7d:5d:b0:ad:39:59:76:ca:05:
         0c:6e:4b:17:3e:75:24:48:d7:f0:19:5f:9e:b4:16:10:84:27:
         5e:d6:b1:1a:5a:31:37:6d:f2:0b:a3:cd:02:db:a1:21:7c:65:
         11:01:c4:86:66:9f:65:ba:2a:6f:14:f6:12:f8:96:62:9f:33:
         6a:ed:ec:fe:e0:04:c2:09:32:cd:92:71:bd:13:c6:8e:74:86:
         ea:34:0d:03:db:4b:48:82:84:1e:51:6c:a4:1e:ba:54:4a:a3:
         c6:2b:4f:0c:b4:a5:20:e5:5f:af:a8:ec:4a:c0:b9:a5:e5:8f:
         56:0d:59:93:47:8a:7c:c3:44:70:0a:6d:b9:ca:91:c4:5e:1d:
         7a:55:6d:ee:9f:bb:dd:fe:da:69:d7:22:d0:7f:59:bc:b8:c6:
         1c:b4:cb:ec:ac:e5:6f:5b:98:73:60:13:10:3a:00:ac:e6:4e:
         c2:85:2a:47:74:68:3d:81:98:45:cb:0e:68:7a:7a:4c:cf:77:
         78:94:36:81:9f:85:3a:07:50:45:e0:f4:ba:2a:4c:a4:5f:0d:
         63:d6:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:55 2026 by rpki-client