Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File:                     6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier:          QnQnJv0lg2P8gcufsLx6ihJzHo8TsTc4v1VOW5YZzbk=
Subject key identifier:   A2:9A:3A:D6:35:A6:EB:73:56:53:10:93:A8:FC:B6:27:5F:E3:FB:ED
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer:       /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial:       019FA3733E4D9AFA12C93A9964C6463C18EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number:          049B
Signing time:             Mon 27 Jul 2026 12:01:06 +0000
Manifest this update:     Mon 27 Jul 2026 12:01:06 +0000
Manifest next update:     Tue 28 Jul 2026 12:01:06 +0000
Files and hashes:         1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: GYsTbRWMamWSfP9lvOzSz/KRkSNLxeY/KFuxKgJcY80=)
                          2: EPuA-rz2GCC_9oWJncgSaaD-Amw.roa (hash: 1zdJX0jOCZ5hbksB1gikYMcKYGrQ1RKUiTOb42T+2/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:73:3e:4d:9a:fa:12:c9:3a:99:64:c6:46:3c:18:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
        Validity
            Not Before: Jul 27 12:01:06 2026 GMT
            Not After : Jul 28 12:01:06 2026 GMT
        Subject: CN=a29a3ad635a6eb7356531093a8fcb6275fe3fbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:d3:ae:bf:39:29:fc:4b:16:02:c4:73:c0:
                    aa:a3:43:02:f6:7f:52:49:50:6f:b3:30:93:e5:a1:
                    31:ac:39:d7:83:d5:47:70:45:d1:fb:7c:02:12:87:
                    ba:04:20:99:97:6c:23:fe:8d:ee:1f:78:f2:48:9b:
                    c4:25:6d:a2:2a:8d:df:7b:16:5c:36:5f:fd:2f:88:
                    55:70:9d:6f:71:61:b8:b7:9e:0d:b6:ed:c0:0e:fe:
                    89:d4:4d:a6:78:c3:67:75:a0:41:2c:97:00:49:f2:
                    a6:fb:36:b9:0c:68:8d:26:3d:87:02:be:dd:cb:53:
                    80:f0:8c:07:f6:fc:b9:b0:ed:9b:31:e0:4a:98:9b:
                    28:28:82:0d:ae:12:cd:31:09:62:91:e5:83:dd:56:
                    d3:47:66:5c:34:e3:a9:f4:22:fd:86:a1:e4:00:3b:
                    62:41:93:10:b7:34:76:7e:c6:49:25:ce:3b:10:3e:
                    ac:e6:bb:5f:85:62:bf:63:fe:59:b0:8f:7c:15:4a:
                    84:99:0a:db:87:33:75:e5:2d:6b:3f:51:79:62:ae:
                    1f:f7:22:73:b8:4e:57:81:ff:36:b8:ba:4b:2e:6f:
                    76:b2:0f:35:7b:96:82:a7:68:c8:4b:3f:ee:97:f0:
                    62:92:03:82:55:cf:f9:f2:05:a2:b8:2c:5a:1a:54:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9A:3A:D6:35:A6:EB:73:56:53:10:93:A8:FC:B6:27:5F:E3:FB:ED
            X509v3 Authority Key Identifier:
                keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:77:d0:80:ef:c2:ed:9e:db:fa:26:74:40:d0:d3:ae:0d:5d:
         f5:7e:a5:3c:23:1d:50:d0:01:af:af:bb:71:3b:7d:12:dd:78:
         ff:f9:3b:59:4a:45:46:7f:64:50:bb:6c:c3:68:82:68:da:1b:
         2f:13:44:e3:85:7f:43:a9:ca:f0:51:25:5f:11:0e:2b:45:fd:
         9e:4c:6f:f4:95:f3:cd:4c:73:93:18:7b:58:73:a7:5b:39:c0:
         f7:c6:6e:71:00:aa:64:f1:79:52:55:48:49:d0:0a:00:f9:e8:
         92:87:91:ed:d8:8d:af:29:6e:08:ae:e7:88:61:a0:f1:ee:ea:
         7f:cd:d9:d7:02:17:a1:6f:70:41:80:cf:ff:10:ba:7c:06:17:
         bd:4e:77:56:1f:c8:b9:80:df:8c:bb:80:da:00:65:5f:ff:38:
         1e:5b:3e:1c:fa:89:c7:7f:1e:4b:16:95:e9:e0:fb:17:d1:e6:
         9b:74:e0:08:6f:94:e8:ac:64:4e:8d:6e:26:87:95:85:7b:46:
         1c:d6:72:e2:35:0b:63:ec:4b:18:56:08:b5:cd:bd:c7:bc:1d:
         1a:06:1b:0b:33:3e:cb:1b:99:d6:a5:76:ba:36:f6:60:30:c9:
         f0:0f:33:25:a7:13:6e:1b:ff:19:e3:8a:28:a7:e3:b0:e6:32:
         94:be:cf:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcz5NmvoSyTqZZMZGPBjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzBiNzZlNzIxZjVkODM0ZWQ1M2U0OTI4NGQ5NzkwMzM5
MjExYzgwHhcNMjYwNzI3MTIwMTA2WhcNMjYwNzI4MTIwMTA2WjAzMTEwLwYDVQQD
EyhhMjlhM2FkNjM1YTZlYjczNTY1MzEwOTNhOGZjYjYyNzVmZTNmYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6jTrr85KfxLFgLEc8Cqo0MC9n9S
SVBvszCT5aExrDnXg9VHcEXR+3wCEoe6BCCZl2wj/o3uH3jySJvEJW2iKo3fexZc
Nl/9L4hVcJ1vcWG4t54Ntu3ADv6J1E2meMNndaBBLJcASfKm+za5DGiNJj2HAr7d
y1OA8IwH9vy5sO2bMeBKmJsoKIINrhLNMQlikeWD3VbTR2ZcNOOp9CL9hqHkADti
QZMQtzR2fsZJJc47ED6s5rtfhWK/Y/5ZsI98FUqEmQrbhzN15S1rP1F5Yq4f9yJz
uE5Xgf82uLpLLm92sg81e5aCp2jISz/ul/BikgOCVc/58gWiuCxaGlTFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKaOtY1putzVlMQk6j8tidf4/vtMB8GA1UdIwQY
MBaAFOkwt25yH12DTtU+SShNl5AzkhHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYt
NzA1MjJkODE0ZTBjLzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hOWRiMjMtYTY3Yy00ZjhiLThhZGYtNzA1MjJkODE0ZTBj
LzEvNlRDM2JuSWZYWU5PMVQ1SktFMlhrRE9TRWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnfQgO/C
7Z7b+iZ0QNDTrg1d9X6lPCMdUNABr6+7cTt9Et14//k7WUpFRn9kULtsw2iCaNob
LxNE44V/Q6nK8FElXxEOK0X9nkxv9JXzzUxzkxh7WHOnWznA98ZucQCqZPF5UlVI
SdAKAPnokoeR7diNryluCK7niGGg8e7qf83Z1wIXoW9wQYDP/xC6fAYXvU53Vh/I
uYDfjLuA2gBlX/84Hls+HPqJx38eSxaV6eD7F9Hmm3TgCG+U6KxkTo1uJoeVhXtG
HNZy4jULY+xLGFYItc29x7wdGgYbCzM+yxuZ1qV2ujb2YDDJ8A8zJacTbhv/GeOK
KKfjsOYylL7PGg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:21 2026 by rpki-client