Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File:                     E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier:          Jd85Kg2gfMuahr7df8lxwpk8NQXieD+rVmCnaZr+444=
Subject key identifier:   65:F4:39:73:DD:E7:4D:DE:BD:A3:90:37:42:58:3A:ED:DA:83:D5:DF
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       019F303930CFEFAF1F236CCB57C0D87219BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number:          0FFB
Signing time:             Sun 05 Jul 2026 03:01:22 +0000
Manifest this update:     Sun 05 Jul 2026 03:01:22 +0000
Manifest next update:     Mon 06 Jul 2026 03:01:22 +0000
Files and hashes:         1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: zyQ0xzEUdRur0yJrWvX0rtQ1mqo/nu1Zq9jwhJbaNxw=)
                          2: Lk2VNJqZZqeqOV-mRQdjI6qYn-4.roa (hash: zKEK4KKUZ3gGuC6GoGIG9wJZcEYp/lskXr6MfelP6ws=)
                          3: OPOHu4baKrOuoP3MheEFtHAeXko.roa (hash: A1lA/lI/7Nnxtr0SxEKDti+LjBheE5trX2b66xGDddo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:30:39:30:cf:ef:af:1f:23:6c:cb:57:c0:d8:72:19:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Jul  5 03:01:22 2026 GMT
            Not After : Jul  6 03:01:22 2026 GMT
        Subject: CN=65f43973dde74ddebda3903742583aedda83d5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:47:96:a4:9a:3d:fe:f2:b8:c7:60:af:58:
                    24:8c:80:b1:fc:a8:8b:a1:a8:fc:7e:53:70:c2:48:
                    3f:06:82:20:88:8a:f2:92:33:60:9f:c2:ca:c4:00:
                    d4:40:bc:67:c4:00:ff:0f:57:b3:90:b4:5b:7e:8c:
                    2f:3d:b1:fd:55:f6:80:8c:32:8a:62:4e:eb:1f:dd:
                    b1:e2:44:da:40:4a:fb:bd:71:fc:5d:ac:78:77:15:
                    89:61:15:87:69:60:a3:64:6b:96:55:a7:43:50:c4:
                    59:1d:30:8a:b2:e2:fe:cf:5d:f1:db:8e:fa:a5:2c:
                    bd:b8:6a:73:a2:17:52:5d:79:d6:c8:c2:cc:21:b4:
                    ac:b3:38:45:28:22:93:5b:e3:06:92:38:2e:83:bd:
                    f9:cd:45:2c:df:af:d8:73:b5:88:ab:ea:e0:96:9f:
                    7d:1c:ad:15:48:6b:91:9c:de:7f:86:be:84:b7:65:
                    48:2e:0b:e6:37:32:72:25:74:03:6e:3d:a8:2b:d1:
                    1d:c4:71:92:d7:c3:1c:76:71:24:47:17:88:43:e3:
                    89:9e:ef:a7:05:32:97:f3:d3:96:e0:f3:cf:39:8f:
                    38:95:2b:3e:89:65:33:80:68:f0:2f:62:05:85:09:
                    a4:fd:0f:29:2e:99:e3:7d:a1:23:f2:19:41:f1:4f:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:39:73:DD:E7:4D:DE:BD:A3:90:37:42:58:3A:ED:DA:83:D5:DF
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:e5:5f:a9:fc:9f:b6:2c:f0:cf:fe:18:fe:97:96:cb:cb:
         0c:3b:52:ab:c5:f6:6e:01:ed:25:ce:79:f9:98:fb:19:e9:01:
         84:50:1c:63:93:f4:56:41:72:f6:9d:b6:3f:90:6d:c9:ab:b8:
         e1:8c:3d:61:38:cb:ae:3c:92:07:be:ab:f2:8d:92:43:66:db:
         74:42:ae:e0:5a:9f:d2:b9:a8:81:18:e2:25:a6:86:6a:5f:35:
         93:95:58:44:e6:f6:2a:1f:6b:13:32:b4:67:32:d2:10:02:46:
         ee:a5:57:25:46:07:bf:de:0a:8b:1c:ef:0f:4f:00:78:da:27:
         f0:ad:08:e7:71:c0:ef:f9:e7:66:ed:1b:eb:c4:6e:74:23:1a:
         0c:83:b4:a1:f1:f2:3b:34:95:83:69:7b:56:f5:c5:ff:9e:40:
         fb:05:4e:d2:3b:e1:95:db:41:64:1a:21:d9:25:81:1a:e9:d9:
         4e:15:6d:af:ce:9e:12:5a:b2:2a:86:3f:ee:7a:25:6f:38:7f:
         85:51:7e:d5:43:a3:e5:01:df:a6:b5:f9:85:8c:03:37:6b:d0:
         4f:38:56:a1:e7:86:ad:70:79:53:4f:f8:c0:67:d1:e0:23:04:
         ac:9a:ac:2c:1e:48:f8:db:bc:25:40:b8:23:90:cd:74:ed:94:
         b3:55:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:38:22 2026 by rpki-client