Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File:                     M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier:          YahAhpWNT1eFnr5gWxtUCVjrr4u8whrDysBPx7DFMIk=
Subject key identifier:   99:9B:38:FA:AF:EE:BF:FC:A1:5E:6E:58:5E:29:75:7C:3B:71:29:6F
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer:       /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial:       019F3A17A26A3176C87DA20F95F2C1354805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number:          0187
Signing time:             Tue 07 Jul 2026 01:00:55 +0000
Manifest this update:     Tue 07 Jul 2026 01:00:55 +0000
Manifest next update:     Wed 08 Jul 2026 01:00:55 +0000
Files and hashes:         1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
                          2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: fOPgtHfX7h0QYlDJgwaTwm6GNBdIc8BBdQypJNjnGyw=)
                          3: X-2N1a5UxbTy8UiT9fJ_Ncm8URk.roa (hash: nD4QapFvX1Fl/0WBxavjE2vvK1teC2/+MXL6kQWr5E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:17:a2:6a:31:76:c8:7d:a2:0f:95:f2:c1:35:48:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
        Validity
            Not Before: Jul  7 01:00:55 2026 GMT
            Not After : Jul  8 01:00:55 2026 GMT
        Subject: CN=999b38faafeebffca15e6e585e29757c3b71296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:d8:67:45:18:ee:69:1e:66:b7:fc:14:1f:
                    df:20:69:95:a4:bc:9e:e4:17:83:44:4c:28:d8:4f:
                    ca:d4:33:2c:b0:ca:b3:e3:6d:f1:9a:a9:1c:aa:9a:
                    7f:b9:44:bf:c6:74:3c:96:5c:1f:1b:b1:56:fe:d7:
                    dc:ce:94:64:01:b0:6d:15:50:20:52:9e:bc:84:62:
                    81:92:bf:a8:77:46:2d:98:c0:5d:18:4f:a5:8e:4d:
                    8b:76:56:8f:74:52:8b:64:4c:7b:4e:a2:d4:08:93:
                    54:f4:89:35:d9:97:59:c1:22:a9:2d:7f:0b:51:15:
                    f8:51:55:6a:08:92:ba:e7:b3:c2:98:43:75:64:a0:
                    8b:02:09:5c:c6:97:2c:aa:3c:8d:27:d6:49:ee:9d:
                    34:c6:2a:d2:44:53:5d:b0:a0:86:3e:5e:e4:18:69:
                    f2:23:f1:dc:11:60:ba:79:a8:25:8e:74:86:b0:b2:
                    cd:c5:73:e7:9e:8b:33:14:34:bd:26:e5:0f:6b:10:
                    d5:68:d9:9d:f3:fe:c4:f2:69:40:31:67:86:79:15:
                    7a:98:17:ef:8b:ce:b0:55:a2:17:9b:13:cc:f6:07:
                    30:14:f3:62:3f:09:f7:e1:92:dd:86:ff:82:94:e1:
                    b2:38:35:56:ee:3e:4d:1e:41:e6:74:75:d8:69:02:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:38:FA:AF:EE:BF:FC:A1:5E:6E:58:5E:29:75:7C:3B:71:29:6F
            X509v3 Authority Key Identifier:
                keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:80:95:a8:78:3e:b5:aa:4b:b2:4f:44:b6:5d:97:83:61:b0:
         5f:3f:e0:37:f1:7c:c8:fd:94:0c:34:e5:d9:41:b8:4d:47:0c:
         60:3b:cd:a5:4d:0a:89:04:8f:06:2c:67:4f:91:b5:73:41:f9:
         8a:28:33:e3:87:98:47:e3:de:0e:4a:97:7f:3c:9c:f1:0c:29:
         37:4f:75:58:1e:c9:02:ef:7f:cc:19:63:90:1f:e5:6a:e1:ce:
         6e:3e:f6:d3:5f:a8:7f:69:17:ec:6e:56:12:68:8b:47:0a:c1:
         30:86:4d:80:f0:54:be:ec:ed:53:8e:7c:e1:8f:b5:d0:09:b2:
         5c:9e:45:53:9d:29:11:40:0e:1a:d6:29:da:93:10:52:21:15:
         5a:27:0a:38:01:05:43:ac:67:3a:dd:36:25:ea:bb:b4:4f:fd:
         c9:9a:db:ef:66:98:fa:42:36:18:9c:fa:4c:73:e7:78:92:fe:
         2c:c1:96:1b:2b:fd:48:0d:42:dd:c3:5e:10:34:4e:f1:fc:6f:
         64:b0:14:60:20:93:63:0a:d0:09:de:32:c5:91:56:fe:00:53:
         08:37:81:2a:ed:e3:07:68:23:59:6d:e7:68:80:ce:ff:6a:3b:
         8c:85:cf:b1:d6:a6:0d:7e:00:5f:3a:21:a6:33:78:91:a1:8c:
         52:03:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:31 2026 by rpki-client