Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.mft
File:                     y6GFqLFiAn6F7zGQGYh_4hk96qs.mft (raw, json)
Hash identifier:          OOL3rhU67tSxXRqpwh4PnKdUfo4xxC4KmAMi2N99UMc=
Subject key identifier:   F1:C5:C5:5E:A0:D7:E8:DE:BD:B4:0F:DD:5E:37:3E:33:AE:2F:72:87
Authority key identifier: CB:A1:85:A8:B1:62:02:7E:85:EF:31:90:19:88:7F:E2:19:3D:EA:AB
Certificate issuer:       /CN=cba185a8b162027e85ef319019887fe2193deaab
Certificate serial:       019FCD4B5AC9BC73849F1920B7ECA30DC2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y6GFqLFiAn6F7zGQGYh_4hk96qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.mft
Manifest number:          5F
Signing time:             Tue 04 Aug 2026 15:01:35 +0000
Manifest this update:     Tue 04 Aug 2026 15:01:35 +0000
Manifest next update:     Wed 05 Aug 2026 15:01:35 +0000
Files and hashes:         1: _ABV_5VBnB4k7l-PToT9DQmXexU.roa (hash: WozzA/Ovvccf1QRCxoJlKSURGc/qCGPUwMaC34biB0M=)
                          2: y6GFqLFiAn6F7zGQGYh_4hk96qs.crl (hash: BWxVVWiVZsrx+eJmoSdfv7a1E6GztoWFHP04H6cILOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y6GFqLFiAn6F7zGQGYh_4hk96qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 15:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:4b:5a:c9:bc:73:84:9f:19:20:b7:ec:a3:0d:c2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba185a8b162027e85ef319019887fe2193deaab
        Validity
            Not Before: Aug  4 15:01:35 2026 GMT
            Not After : Aug  5 15:01:35 2026 GMT
        Subject: CN=f1c5c55ea0d7e8debdb40fdd5e373e33ae2f7287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:65:b1:78:8c:db:c4:c7:39:de:ab:36:89:
                    11:2a:f5:e0:f3:d2:d9:82:ce:59:88:94:07:88:94:
                    ca:f8:d4:70:96:1b:2f:99:1a:53:83:0c:90:9a:97:
                    1f:f6:c4:d9:f2:b4:32:08:ff:ea:d7:1c:4f:ce:00:
                    a6:c9:37:a4:82:97:5d:b3:ee:d1:57:b7:86:7d:c7:
                    34:8d:dc:59:3e:5c:c5:00:be:17:b5:d5:5b:84:ce:
                    68:76:7f:e2:84:7c:6c:cb:1d:28:0f:5e:a7:06:b6:
                    ec:36:9d:cd:90:30:68:cb:3c:61:37:31:57:bc:61:
                    13:46:62:29:f1:d9:f4:23:c3:89:d5:64:2d:a5:72:
                    ba:e0:e1:0e:da:4a:a1:3d:0f:8c:94:8b:21:64:0f:
                    75:23:a6:1a:f1:71:00:9b:06:bf:a0:89:8e:1d:c0:
                    15:e6:d6:13:8f:78:45:29:44:57:c8:b6:73:3e:03:
                    a8:9d:f6:ba:2a:c2:1d:05:9d:af:c7:4e:80:a7:fe:
                    82:cc:19:29:88:4c:27:d7:29:0e:b6:e8:13:0d:97:
                    39:c3:f5:b5:9d:dc:67:33:19:06:6b:3c:a8:08:b7:
                    e2:b9:86:b7:b1:8b:38:6c:d1:65:10:7e:70:19:b2:
                    de:86:cb:75:a4:b5:5f:1d:ce:d8:71:84:b9:55:e6:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C5:C5:5E:A0:D7:E8:DE:BD:B4:0F:DD:5E:37:3E:33:AE:2F:72:87
            X509v3 Authority Key Identifier:
                keyid:CB:A1:85:A8:B1:62:02:7E:85:EF:31:90:19:88:7F:E2:19:3D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6GFqLFiAn6F7zGQGYh_4hk96qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/y6GFqLFiAn6F7zGQGYh_4hk96qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:f8:1a:9d:cb:9a:0c:18:a7:07:e6:4b:73:3e:5e:93:c5:8f:
         44:d0:79:58:af:7e:87:f9:49:53:27:6b:bd:48:05:5a:66:17:
         d5:3e:9c:30:73:25:1f:8f:63:ef:b3:88:c7:41:4e:cb:96:bb:
         7d:34:06:10:e1:e9:a1:1e:a0:1f:cf:c0:71:d5:9a:c5:aa:6c:
         be:c4:6e:b4:0c:66:8a:c8:5e:31:03:75:3d:29:c6:d9:33:2f:
         7a:6d:80:3c:80:53:e7:b1:d6:d5:47:a5:4a:48:93:ab:28:52:
         00:84:1c:22:a6:7f:35:fb:eb:6d:68:b4:d2:22:aa:b5:74:8a:
         0b:77:80:b4:ce:61:cc:2b:32:67:b2:cb:a7:96:9d:fa:da:0f:
         ba:87:94:2d:63:2d:b9:89:4d:a0:0f:3b:12:09:9c:05:ed:4d:
         5e:dd:8d:fd:ea:15:ac:b8:3f:06:65:02:97:9f:22:b7:2e:ad:
         17:b7:20:95:3e:bf:36:0b:06:1a:e2:ea:d2:86:31:e5:79:69:
         48:11:0c:ee:9e:f7:58:15:82:ae:81:06:3e:b2:04:14:eb:e0:
         ac:6e:ef:88:bb:91:5b:95:af:34:9c:e0:01:f7:23:25:1e:9b:
         24:04:c2:86:c4:db:7a:24:21:53:44:30:d2:53:b3:eb:c0:3a:
         dd:07:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:46:46 2026 by rpki-client