Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
File:                     6fRRBEShet1zJxRhUpQ0lauruWg.mft (raw, json)
Hash identifier:          nb+atSRE8dhGRDCgBC0+ZMJb2uarl8eTEVBeZD1W4g8=
Subject key identifier:   87:F6:10:4A:65:53:C9:91:B8:FA:B5:5F:88:8B:F5:A1:10:97:C2:1A
Authority key identifier: E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68
Certificate issuer:       /CN=e9f4510444a17add7327146152943495ababb968
Certificate serial:       019FA1BBEE451C4875509BCFFC9B39D60887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
Manifest number:          1129
Signing time:             Mon 27 Jul 2026 04:01:15 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:15 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:15 +0000
Files and hashes:         1: 6fRRBEShet1zJxRhUpQ0lauruWg.crl (hash: yQcevDSOrgTbJX3iWmEeYfaoHy3dwWCbrgKU2P/Nh90=)
                          2: CdMLNjkWN_LbBmbtyqVRIvBxVHQ.roa (hash: 86QotpjDcKjFxnBx3ug0BvDhMYnHrgdBwrKCM9Nq8eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:ee:45:1c:48:75:50:9b:cf:fc:9b:39:d6:08:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f4510444a17add7327146152943495ababb968
        Validity
            Not Before: Jul 27 04:01:15 2026 GMT
            Not After : Jul 28 04:01:15 2026 GMT
        Subject: CN=87f6104a6553c991b8fab55f888bf5a11097c21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:1a:7e:28:f6:b8:30:32:bb:30:8b:f5:47:
                    b9:b4:f1:cf:02:dc:55:df:a6:73:b9:5b:b4:0b:c5:
                    b9:14:2f:c4:9b:71:e9:a7:27:02:a9:fb:c3:d4:3c:
                    7d:b8:14:04:17:35:a2:69:3d:04:d1:3d:a2:e7:18:
                    94:f3:d9:bd:ba:b1:6e:8e:cd:85:37:fa:28:d6:05:
                    60:ab:57:29:94:d7:4d:9a:9a:65:31:74:29:38:e1:
                    fe:07:a0:1b:b7:5b:dc:11:b0:37:ef:7b:0b:c3:8e:
                    65:91:53:30:ef:00:c6:d5:01:05:61:e2:04:c4:7d:
                    e5:c9:46:23:76:08:2d:8e:28:ee:f6:08:94:4b:e1:
                    10:59:c4:56:98:23:2c:e7:ac:24:9e:b7:71:c7:8f:
                    88:7f:6b:67:b4:e7:21:b0:c0:6c:66:fa:62:11:79:
                    1c:7d:42:03:a6:9d:3a:6e:55:4f:24:d3:82:b8:99:
                    b5:d0:0d:6c:e3:b0:56:7b:80:2a:f5:eb:bf:4b:e1:
                    b4:b2:69:0b:ca:b6:8e:73:dd:e0:a6:d4:51:8a:96:
                    1b:ae:1f:9b:3b:2a:bc:99:04:42:af:ee:36:47:6c:
                    90:da:4b:de:68:df:01:6e:2f:83:54:df:f0:62:2d:
                    a9:ab:88:87:8f:7c:ad:c8:0c:bb:1b:68:e0:b7:32:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:10:4A:65:53:C9:91:B8:FA:B5:5F:88:8B:F5:A1:10:97:C2:1A
            X509v3 Authority Key Identifier:
                keyid:E9:F4:51:04:44:A1:7A:DD:73:27:14:61:52:94:34:95:AB:AB:B9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fRRBEShet1zJxRhUpQ0lauruWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4a9e5b-aa40-4dc2-8ded-a276ed0ba1bc/1/6fRRBEShet1zJxRhUpQ0lauruWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:dd:da:94:4f:8f:a4:d5:c1:47:fa:15:fb:72:2b:e8:28:
         7e:38:91:e9:61:10:05:73:5a:f6:b5:13:fb:b8:52:fd:8a:dc:
         2a:fd:cd:de:eb:8c:a0:af:92:54:92:d3:60:d0:6d:03:74:19:
         5f:55:aa:a2:ea:4d:d6:7e:a9:12:f2:ac:8b:9a:fb:ad:90:be:
         e0:cd:d9:06:8a:60:e7:71:db:e6:94:4d:f0:68:d9:af:52:51:
         1a:6f:38:3b:e0:f9:74:1a:b6:9d:43:35:f0:23:26:55:2c:28:
         22:09:c2:f7:42:0b:43:cd:04:78:70:4d:25:1e:e5:de:91:fd:
         a2:81:4a:39:fb:15:5d:d0:e6:43:96:54:77:9a:e0:1b:9f:db:
         6b:1f:d7:ae:91:4d:ef:72:05:b4:10:20:b9:e5:8c:ff:d7:e8:
         21:34:5c:85:b4:37:9a:d3:e3:e7:e4:3d:a1:cb:0d:f7:35:ac:
         29:9c:91:33:ea:57:18:59:5d:f1:bd:da:df:da:a3:59:23:c8:
         83:ec:ea:c8:de:4c:98:6b:7a:27:f7:11:6e:6d:b1:50:1f:dc:
         db:51:ee:53:8a:62:4d:e7:03:26:b5:36:1d:42:b6:63:5b:e3:
         a2:21:4a:71:82:44:17:8a:c1:98:92:65:fa:b7:25:66:c7:af:
         99:78:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:40:45 2026 by rpki-client