Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          RV/cO8LdRWwgjVfVajW1Ikj3P1yYERP57Z7UGJuc7yw=
Subject key identifier:   0B:64:1E:39:5D:A7:C1:1B:60:51:B6:78:61:A1:34:1E:FB:89:13:E9
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       01A001A674ED3AF77B5D12D6682097F9994F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          0961
Signing time:             Fri 14 Aug 2026 19:01:20 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:20 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:20 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: N01gOgMTEkLmL2a1QJEnr3wX4VsSv6m3wb/LPiJ0dhA=)
                          2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:74:ed:3a:f7:7b:5d:12:d6:68:20:97:f9:99:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Aug 14 19:01:20 2026 GMT
            Not After : Aug 15 19:01:20 2026 GMT
        Subject: CN=0b641e395da7c11b6051b67861a1341efb8913e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:06:18:e4:07:a6:bd:b6:c0:91:d5:fb:7c:
                    c2:6e:48:33:fb:f6:61:c1:2f:1e:01:83:73:42:b2:
                    48:39:6a:ba:8f:eb:11:9d:aa:62:75:e0:ad:9a:a9:
                    35:98:fd:68:ca:c8:d9:7c:a3:6f:87:f4:10:bc:bf:
                    f6:cc:f5:a3:44:d5:c9:d4:b0:f0:e4:70:26:37:0b:
                    2f:4b:e3:1d:1c:b0:bf:c5:7e:db:8d:6b:68:67:52:
                    14:22:01:df:d4:81:6a:5d:fb:67:7a:c8:5e:d2:ca:
                    74:25:57:e8:ab:61:03:0a:67:6f:2a:4f:7c:fc:cf:
                    f5:d3:d0:8a:34:62:31:2c:19:ce:b5:02:de:76:72:
                    f0:69:55:fa:44:12:cd:04:f7:c1:73:24:2b:e2:25:
                    59:60:7e:ae:19:33:33:db:e3:7f:8a:8a:d1:ca:30:
                    3d:81:4a:25:d6:10:2a:18:11:02:84:3e:d4:d2:bf:
                    4f:5a:fe:7a:7d:c3:c5:61:c1:df:69:95:fb:5b:be:
                    de:83:c1:60:9d:8e:8e:74:9a:50:ba:36:a8:c1:69:
                    b2:38:73:a5:3b:b1:e8:1d:04:fe:cf:d7:c0:51:e2:
                    45:fc:e0:44:de:1f:d5:9b:e9:7b:36:34:26:62:79:
                    ca:4c:09:4e:ad:cf:a3:66:07:fe:01:cf:b1:9a:d3:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:64:1E:39:5D:A7:C1:1B:60:51:B6:78:61:A1:34:1E:FB:89:13:E9
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b7:59:35:36:ae:08:b2:2b:1c:74:80:de:59:4a:cf:02:b5:
         58:5e:45:6c:f8:d2:ba:7f:6f:64:03:d0:1c:fa:4f:e4:c3:98:
         b9:28:b4:3b:25:36:16:8f:1e:6d:a0:88:72:9d:a1:59:e9:53:
         65:06:7b:47:a5:db:e0:d5:11:db:42:d0:15:b0:8b:53:61:66:
         c5:bc:48:79:75:38:6b:aa:74:da:c7:e0:84:e8:79:ea:d0:e1:
         1e:14:70:61:a6:11:75:27:ad:15:72:05:01:61:1a:e1:67:da:
         39:e8:db:00:80:df:74:c9:08:fe:52:ee:ec:bc:fe:a9:7e:88:
         c2:8b:ea:9c:a1:8f:77:d9:71:4e:00:8d:79:cf:6b:58:9e:5d:
         f5:5c:33:bb:fa:e8:39:9c:2e:75:5d:21:30:d6:5b:e7:a3:68:
         5b:be:30:15:54:c2:0f:12:b2:c0:c4:a2:da:96:0d:69:d9:8b:
         87:a1:f0:1d:d8:5c:26:8b:ab:31:02:33:8a:ae:6d:c1:78:da:
         e2:b9:0b:19:55:18:27:d9:8d:6c:9a:f7:ee:9b:62:92:92:ec:
         a4:49:e3:a4:52:99:ef:be:83:d8:f1:35:a9:55:45:61:05:b0:
         63:dc:3c:9a:0e:88:ac:81:0a:1f:1b:d0:3a:79:ec:31:6e:d9:
         ea:01:f0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:34 2026 by rpki-client