Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          Jj929kdNEy26vgKfZ6F5yy1XgczqJDcvdT0fKvBKWKo=
Subject key identifier:   77:A4:AE:43:7D:E2:F6:05:36:FA:38:81:50:50:3D:54:69:BA:24:45
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       019F18303850D2A897F5AD7575D39F733608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          0E6A
Signing time:             Tue 30 Jun 2026 11:00:40 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:40 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:40 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: B3c2kXWYs4hZ3wC/646Vij5Ygj4ToMfk6b7flqzUyx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:38:50:d2:a8:97:f5:ad:75:75:d3:9f:73:36:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Jun 30 11:00:40 2026 GMT
            Not After : Jul  1 11:00:40 2026 GMT
        Subject: CN=77a4ae437de2f60536fa388150503d5469ba2445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:e8:12:a4:f7:25:b9:f7:b8:30:3c:cc:21:
                    13:0d:a1:06:b9:6a:03:75:5c:71:ff:80:df:d2:92:
                    5d:21:56:f8:f8:59:7c:71:13:f0:68:ac:db:ce:ef:
                    ff:4a:bd:09:9b:2f:f1:05:56:be:9c:8e:19:bc:80:
                    1d:3b:eb:7a:9d:4b:c0:c9:08:40:8d:7c:67:5a:7e:
                    30:d1:e1:7b:4b:cf:5b:18:79:97:51:cd:a8:1a:a5:
                    23:63:fd:bb:e7:da:db:3d:dc:de:45:0e:af:3c:24:
                    b8:80:46:e9:71:af:af:92:df:88:01:ab:54:1e:d9:
                    3c:03:66:e8:ff:65:c4:44:f4:0a:6a:ec:4d:d6:57:
                    f0:d9:98:f9:81:92:76:cc:85:a2:6c:f3:c2:1d:83:
                    75:f3:6f:58:60:e6:6c:57:6f:fa:2a:4b:4f:8c:0a:
                    86:39:01:34:16:dd:28:a2:ba:35:91:1d:bb:d1:8b:
                    d1:82:75:98:8b:db:16:a1:ba:6e:64:a8:cb:77:95:
                    d3:ac:24:06:4e:83:f3:d4:6c:7e:64:c7:9d:c2:c7:
                    e1:68:54:5c:61:31:ea:70:52:e2:d7:9f:45:0d:e0:
                    27:ee:46:81:d8:6f:50:73:9c:74:de:12:fb:10:14:
                    6f:ee:5c:42:00:70:8a:6b:6a:db:f8:eb:58:e8:14:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A4:AE:43:7D:E2:F6:05:36:FA:38:81:50:50:3D:54:69:BA:24:45
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:7e:38:e2:34:ab:e4:22:d8:0e:de:0b:a5:26:57:65:c1:
         1e:da:85:85:f6:b6:44:9d:13:50:de:7b:aa:f2:ec:7b:f3:87:
         04:7e:b9:05:e8:5e:d9:48:67:f5:df:db:e7:ea:64:4b:97:6b:
         e0:f6:f4:b5:15:a3:38:21:2e:35:8e:3a:45:75:91:59:a1:a9:
         ee:b1:2c:cb:89:b6:88:77:b0:a2:47:83:64:70:77:ed:35:19:
         55:f5:23:0f:08:f5:53:3c:7a:ba:7b:61:20:c5:cd:dc:c0:23:
         4b:f6:52:a9:bb:b6:6d:bd:a3:b1:ae:9b:ae:aa:76:db:ba:84:
         f9:a4:e8:6f:99:ff:de:bf:71:3b:53:13:21:bf:d5:29:e1:6c:
         08:ae:12:7b:bb:08:0d:aa:38:1b:13:2d:9a:26:65:84:51:69:
         dd:dd:29:82:c3:cb:6a:04:98:4b:5b:ce:21:22:f6:58:35:66:
         20:8e:52:49:4f:49:cb:5b:d9:71:62:11:bd:69:ae:46:44:56:
         72:ac:61:a0:69:0c:33:c1:58:70:fd:a0:15:05:ce:48:82:b7:
         53:fa:78:7a:df:de:c3:5a:14:10:53:47:49:12:a0:55:c9:40:
         08:47:a3:99:b2:a0:c9:49:cd:92:73:a8:00:9c:3f:57:15:63:
         37:b2:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:59 2026 by rpki-client