Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          bVdMkAGlv4pQwgZXX/NMZf0IUx4017CxF0bGldRoA2A=
Subject key identifier:   51:F4:1A:19:01:6D:0E:AB:2E:1B:48:99:36:D3:C9:A2:8E:1A:0B:B2
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       019FA4BD0C0FA91D856205ABB4FE6C58B943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          099E
Signing time:             Mon 27 Jul 2026 18:01:20 +0000
Manifest this update:     Mon 27 Jul 2026 18:01:20 +0000
Manifest next update:     Tue 28 Jul 2026 18:01:20 +0000
Files and hashes:         1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: v4HSn1Aj+WxaYP9a2QhZ7YlkWvKSe4TuXWiblcZmTlQ=)
                          2: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (hash: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:bd:0c:0f:a9:1d:85:62:05:ab:b4:fe:6c:58:b9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: Jul 27 18:01:20 2026 GMT
            Not After : Jul 28 18:01:20 2026 GMT
        Subject: CN=51f41a19016d0eab2e1b489936d3c9a28e1a0bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:fb:26:0b:87:55:bf:fb:31:d2:77:d5:a9:
                    15:bd:95:19:65:44:88:f0:c3:4a:bf:4a:a0:fb:74:
                    44:dc:28:ba:e6:ac:04:f4:09:9a:99:8c:99:6f:f6:
                    79:57:b7:b9:21:3d:c6:66:b3:2f:e2:88:02:76:5e:
                    f3:a2:c7:d2:28:05:50:ed:d6:a4:ba:4a:07:40:e4:
                    f8:ca:7b:05:d0:a6:2d:b6:7d:41:ca:02:0a:e2:8d:
                    3e:07:c3:9f:0b:0c:2e:e9:82:2b:f7:08:a4:8a:f9:
                    93:38:59:bc:70:f2:e0:80:8e:84:ad:91:80:ba:17:
                    39:5d:8d:ea:a3:66:69:d3:b4:67:1a:41:2c:78:87:
                    d6:60:ce:8a:70:04:b0:09:4a:ce:13:f3:f1:7a:63:
                    f5:54:99:4e:e1:c4:c4:f0:86:5d:bb:57:a2:46:de:
                    99:7c:55:ca:88:76:73:52:15:7d:13:40:f9:5d:f9:
                    e8:50:23:71:78:ce:09:e6:65:4a:09:94:4d:6c:92:
                    8d:15:ff:8e:88:8c:bb:0a:07:1b:af:c6:81:d4:66:
                    ac:06:40:d6:72:b7:dd:d3:62:6c:50:cc:b5:4a:66:
                    38:87:b4:b9:19:5a:90:ab:6f:fe:11:25:54:62:d7:
                    8d:19:fb:db:cf:92:c6:91:2e:6d:19:67:95:63:c8:
                    f3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F4:1A:19:01:6D:0E:AB:2E:1B:48:99:36:D3:C9:A2:8E:1A:0B:B2
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:70:9b:cb:2a:29:73:88:f8:e4:a0:59:ed:c6:45:68:3d:58:
         6b:3f:67:7f:74:78:cd:eb:fd:94:35:2f:3a:7c:d1:b7:22:8a:
         9b:8b:14:fa:cb:9d:8e:a7:3e:d3:5b:f2:51:6c:59:90:ac:31:
         8b:81:5e:fb:aa:fc:ea:80:42:e4:1d:71:62:13:0c:4a:40:0b:
         e7:a2:a2:60:69:12:e6:96:85:40:8a:64:ef:7d:94:de:5a:49:
         40:a3:f9:ae:9e:7d:50:70:ce:98:f1:d8:af:ee:cc:d3:35:b0:
         01:89:b6:9a:1a:5a:c8:a0:a4:e1:6e:0b:cb:62:9a:7b:d9:f2:
         42:c6:24:ef:f8:79:8e:7d:87:d8:fe:6a:48:7e:f7:65:25:f5:
         a5:6b:23:ae:cf:c8:d0:9c:fd:f4:ff:78:8d:ed:d4:78:7f:5f:
         f6:50:17:31:53:1f:95:be:3d:74:03:44:a0:62:0b:11:01:37:
         ff:34:d7:4e:e5:40:2a:cd:30:38:fa:a0:3f:44:86:d8:75:c4:
         9c:c6:06:45:4a:01:86:37:bf:ff:d2:42:e3:f3:77:c6:b1:3d:
         ed:7d:0a:b6:4f:56:85:f9:7f:b8:8c:85:0e:fa:f2:8b:87:bf:
         95:7e:18:52:28:a7:ff:e0:8b:c3:81:27:d8:ba:6a:ac:c8:a8:
         46:d0:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:21:52 2026 by rpki-client