Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File:                     IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier:          zz5B8NKQVbN/qaMioF5ZrSYcjnZ/YmnI+IcZm/kpmeE=
Subject key identifier:   45:FB:F1:95:41:3C:5A:47:DE:25:2C:4D:F0:00:DD:FE:B4:71:26:11
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer:       /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial:       019F38607D7969A5DDE5D4063AB2B9A564AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number:          08B2
Signing time:             Mon 06 Jul 2026 17:01:15 +0000
Manifest this update:     Mon 06 Jul 2026 17:01:15 +0000
Manifest next update:     Tue 07 Jul 2026 17:01:15 +0000
Files and hashes:         1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: 0o/ObAl5/AYEhNFqFGhJyLPi8IpsOZ6nADeB6UquHQk=)
                          2: TGA4vVujs0yD_obPFPyktqNpDgc.roa (hash: 5S5Kx8RY4RfrsLwFClyqoZagN1DyIRqE+8qw4ESGtGA=)
                          3: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (hash: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:60:7d:79:69:a5:dd:e5:d4:06:3a:b2:b9:a5:64:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
        Validity
            Not Before: Jul  6 17:01:15 2026 GMT
            Not After : Jul  7 17:01:15 2026 GMT
        Subject: CN=45fbf195413c5a47de252c4df000ddfeb4712611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ad:e8:a8:57:04:41:a2:92:6a:f0:81:79:d7:
                    ea:7c:21:ff:fe:47:4f:4d:fe:67:71:19:07:2f:6e:
                    0d:86:30:85:b4:f8:74:54:55:e3:f1:57:6e:78:fa:
                    4a:1b:0a:01:c9:01:9d:ac:d5:8c:0f:51:ac:6c:1e:
                    a6:c0:c8:89:86:ae:ef:8b:58:5f:fc:c1:e6:a6:2c:
                    69:de:4f:a7:a4:98:c7:e8:8a:9d:7a:ed:da:8e:40:
                    c8:8b:29:e4:10:ba:1d:5c:f7:dc:1a:35:7a:7d:ec:
                    4b:ec:2f:c1:a7:ff:df:b5:d3:17:89:24:84:6c:7a:
                    8f:aa:63:87:02:45:65:30:f8:7f:2d:6d:7b:c6:74:
                    bd:aa:55:37:04:db:48:46:df:a3:76:97:d8:33:c3:
                    3b:21:9f:d4:10:e5:09:7e:5b:65:74:7d:93:77:8b:
                    c5:08:75:2b:0f:40:99:d8:98:07:2f:d9:fa:df:22:
                    61:8f:bf:42:0c:80:26:55:78:65:28:ce:cb:27:91:
                    5f:71:3e:a4:62:ff:29:d7:80:c0:ce:ae:ce:ac:5e:
                    77:59:00:cd:f2:d6:16:2e:58:6e:29:77:92:67:f4:
                    ae:19:e7:00:73:e4:62:7c:63:81:e7:c2:b0:95:6b:
                    e2:76:f7:81:64:69:0b:8c:0c:89:ee:04:00:a7:78:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FB:F1:95:41:3C:5A:47:DE:25:2C:4D:F0:00:DD:FE:B4:71:26:11
            X509v3 Authority Key Identifier:
                keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:58:71:9a:e0:9f:16:c0:ba:88:28:63:7d:c6:1c:4c:7b:
         49:3c:96:8a:86:d0:57:d6:e2:fe:99:d0:4e:6b:99:1d:19:ac:
         21:a4:23:55:11:ab:d1:dc:6e:81:36:a5:4c:28:14:93:9f:41:
         59:a3:06:69:13:d5:66:ce:ea:92:b5:79:28:b6:10:b0:15:d7:
         91:42:7d:9b:59:7f:82:59:c4:10:0f:88:a3:37:2d:d8:41:14:
         55:c1:b2:8f:71:fb:bf:84:31:17:4d:67:d4:9a:84:d3:e6:4a:
         14:ce:70:74:28:f7:81:e6:e7:73:49:22:d7:48:97:17:f3:4a:
         8b:37:25:65:cc:9b:ae:6c:69:b2:db:84:c1:82:62:28:1f:88:
         7f:41:72:18:04:f9:30:f4:dd:fa:03:86:65:51:7b:a4:1d:18:
         c3:28:54:9d:20:da:94:bf:82:1e:09:85:43:e3:3d:af:15:0c:
         02:b7:28:4e:5a:5e:63:41:fa:8d:0d:1e:55:5a:97:f9:59:de:
         5d:f5:bf:3c:48:fe:6c:30:9d:67:d6:b3:5e:fa:ff:e0:53:da:
         75:e9:0d:7f:26:c1:b8:33:68:b2:32:c8:ec:fa:8c:39:5a:82:
         56:a0:e2:d1:d9:be:99:9b:d5:de:48:dc:36:13:fc:ef:e3:81:
         76:ec:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:06:29 2026 by rpki-client