Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
File:                     e27QJ9N71hCaAxHihp00StlZNfk.mft (raw, json)
Hash identifier:          j4ORpZXwYOLWXsgPaGQlF+kj1Doe4a1h8RX62TuQySs=
Subject key identifier:   DF:43:B9:0F:52:23:13:F5:D1:C3:C4:31:7F:4C:0B:6F:F5:D7:43:AE
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Certificate issuer:       /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial:       019FA03ACDEA73BD4E9C9F76F53D177EE76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
Manifest number:          150C
Signing time:             Sun 26 Jul 2026 21:00:36 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:36 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:36 +0000
Files and hashes:         1: e27QJ9N71hCaAxHihp00StlZNfk.crl (hash: i2Y3iHcOiG38iWulCjQo//CrvT7+apsSaHePy5Ks618=)
                          2: mqkbXzrPajAciz1rznIJtOvpuyM.roa (hash: tQe8xgR/BeAjkQiY4TisIF6fbpojr1Hl6k10jQeFvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:cd:ea:73:bd:4e:9c:9f:76:f5:3d:17:7e:e7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
        Validity
            Not Before: Jul 26 21:00:36 2026 GMT
            Not After : Jul 27 21:00:36 2026 GMT
        Subject: CN=df43b90f522313f5d1c3c4317f4c0b6ff5d743ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:18:f7:61:2d:02:83:bd:45:40:37:9b:2c:
                    6f:2e:e8:6f:83:53:ce:70:f3:a6:89:6c:85:f6:44:
                    55:06:14:f0:0f:b0:26:28:a6:bc:8f:1e:98:82:94:
                    60:b1:ee:cf:76:53:07:8c:ad:d6:6a:e2:c2:26:65:
                    91:0c:70:d7:0e:48:71:8e:55:5d:18:22:a7:ad:3e:
                    da:6a:a4:0c:96:a3:27:9a:af:c2:63:da:97:e0:5e:
                    2e:3b:a6:fa:91:45:9e:dd:83:a3:6c:7d:3d:39:4e:
                    83:16:9e:19:1c:d1:2c:10:7b:70:15:23:49:99:7a:
                    f0:d5:bb:7c:4a:12:a3:95:d7:f7:ff:b4:a1:c6:63:
                    6b:6f:4e:02:f3:de:4a:0e:cd:c7:e9:51:a4:15:a5:
                    59:c0:34:72:66:62:8c:ba:24:3c:61:e4:10:6c:99:
                    45:c1:b9:d4:7e:35:44:09:81:f6:1c:ff:94:f1:78:
                    07:2c:1c:37:42:0d:ed:24:c2:83:8b:5f:98:97:8b:
                    f9:ea:85:73:1a:4a:eb:dd:f3:30:b6:6a:dd:d8:30:
                    43:84:aa:a7:7e:74:b5:13:cd:9f:fe:e8:83:f1:ad:
                    07:4f:f8:48:51:c2:59:0f:fa:2a:8b:26:b2:38:dd:
                    d2:f3:d9:d2:99:c1:b9:15:1a:2d:1c:1b:18:30:81:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:B9:0F:52:23:13:F5:D1:C3:C4:31:7F:4C:0B:6F:F5:D7:43:AE
            X509v3 Authority Key Identifier:
                keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:f5:31:d5:6e:a0:4b:5f:e8:ce:0b:af:55:d2:80:2f:6b:
         1a:90:0f:35:df:71:44:7b:25:61:08:d0:c5:4d:d5:77:e5:e0:
         91:5d:2e:6b:2c:00:2e:ae:9c:e2:95:74:b0:b0:7c:b2:96:55:
         e8:9d:88:ef:7b:64:06:73:a9:53:45:ae:c4:09:4a:c1:37:7b:
         db:d8:39:c2:6d:6a:82:c1:52:3b:71:29:dd:4e:1c:2a:7a:f2:
         e4:cc:47:37:3b:95:67:20:9e:a0:14:2a:a3:ab:8c:b9:ca:46:
         42:76:ae:56:8d:f6:a6:d1:6e:24:5f:6c:52:e8:9a:a1:2b:52:
         9f:d0:cc:62:cc:cf:15:67:4e:85:de:99:50:ce:6f:70:08:ce:
         6a:50:32:26:1c:30:a4:d4:c2:48:39:66:be:68:85:46:d1:02:
         e9:0a:8a:14:fa:95:3b:52:7f:b2:dd:39:52:09:f5:fc:31:fd:
         36:31:ed:af:bc:9f:d3:ba:b1:0e:64:08:2a:45:7f:47:60:b7:
         93:ac:24:28:71:81:d6:7e:1e:32:cd:91:fe:3c:74:09:ba:c0:
         35:38:24:45:3e:91:a5:ae:75:d4:a0:b8:79:37:7b:c3:26:46:
         60:4b:84:a1:51:5f:20:8f:72:fa:ed:eb:86:7d:e5:d7:ee:63:
         e6:99:35:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOs3qc71OnJ929T0XfudtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNmVkMDI3ZDM3YmQ2MTA5YTAzMTFlMjg2OWQzNDRhZDk1
OTM1ZjkwHhcNMjYwNzI2MjEwMDM2WhcNMjYwNzI3MjEwMDM2WjAzMTEwLwYDVQQD
EyhkZjQzYjkwZjUyMjMxM2Y1ZDFjM2M0MzE3ZjRjMGI2ZmY1ZDc0M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXMY92EtAoO9RUA3myxvLuhvg1PO
cPOmiWyF9kRVBhTwD7AmKKa8jx6YgpRgse7PdlMHjK3WauLCJmWRDHDXDkhxjlVd
GCKnrT7aaqQMlqMnmq/CY9qX4F4uO6b6kUWe3YOjbH09OU6DFp4ZHNEsEHtwFSNJ
mXrw1bt8ShKjldf3/7ShxmNrb04C895KDs3H6VGkFaVZwDRyZmKMuiQ8YeQQbJlF
wbnUfjVECYH2HP+U8XgHLBw3Qg3tJMKDi1+Yl4v56oVzGkrr3fMwtmrd2DBDhKqn
fnS1E82f/uiD8a0HT/hIUcJZD/oqiyayON3S89nSmcG5FRotHBsYMIEpYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9DuQ9SIxP10cPEMX9MC2/110OuMB8GA1UdIwQY
MBaAFHtu0CfTe9YQmgMR4oadNErZWTX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEt
Yzk3ZTM3M2Q3MDRjLzEvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEtYzk3ZTM3M2Q3MDRj
LzEvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7/1MdVu
oEtf6M4Lr1XSgC9rGpAPNd9xRHslYQjQxU3Vd+XgkV0uaywALq6c4pV0sLB8spZV
6J2I73tkBnOpU0WuxAlKwTd729g5wm1qgsFSO3Ep3U4cKnry5MxHNzuVZyCeoBQq
o6uMucpGQnauVo32ptFuJF9sUuiaoStSn9DMYszPFWdOhd6ZUM5vcAjOalAyJhww
pNTCSDlmvmiFRtEC6QqKFPqVO1J/st05Ugn1/DH9NjHtr7yf07qxDmQIKkV/R2C3
k6wkKHGB1n4eMs2R/jx0CbrANTgkRT6Rpa511KC4eTd7wyZGYEuEoVFfII9y+u3r
hn3l1+5j5pk1hA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:41 2026 by rpki-client