Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          DLrILvOjOGgAyP5k057x1sYoZmmoEE6igWITPkd0ymA=
Subject key identifier:   B6:F3:B5:B5:19:83:AE:11:85:19:0F:A8:74:81:55:D4:2B:05:D9:93
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       01A0BF1EEE9AC56BF3B4BECCA2E8A1B3A9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          1148
Signing time:             Sun 20 Sep 2026 14:01:10 +0000
Manifest this update:     Sun 20 Sep 2026 14:01:10 +0000
Manifest next update:     Mon 21 Sep 2026 14:01:10 +0000
Files and hashes:         1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: Brgaq537ZQHf/p6tQ11/7qmSvqwm9tKoHUvVoAa0CD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:1e:ee:9a:c5:6b:f3:b4:be:cc:a2:e8:a1:b3:a9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Sep 20 14:01:10 2026 GMT
            Not After : Sep 21 14:01:10 2026 GMT
        Subject: CN=b6f3b5b51983ae1185190fa8748155d42b05d993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:76:d4:c2:ba:56:84:c9:f8:db:8c:64:20:
                    1d:ec:d4:45:7a:54:7b:ee:c7:c4:91:b6:17:dc:f6:
                    6c:84:a7:e1:98:30:97:5e:94:67:6f:24:47:94:7c:
                    2c:95:a2:bc:e3:c8:79:1b:d1:be:ae:44:64:b2:c9:
                    a9:71:de:01:41:27:b0:cc:b2:e4:b9:c1:31:c2:c9:
                    fc:8c:af:32:02:32:8f:3c:ec:57:f7:62:ef:25:86:
                    56:22:42:4e:d9:1d:69:b6:9c:37:dc:30:52:1e:31:
                    66:e0:40:09:ad:9a:0e:56:2b:df:4d:04:8c:9f:66:
                    23:60:1d:91:38:47:37:28:71:a2:03:69:cc:c4:4f:
                    3b:6c:26:e8:08:2d:a2:4d:2f:6a:44:a7:52:28:09:
                    61:89:45:a5:70:a8:18:61:36:fc:56:05:b4:85:f0:
                    89:d5:1f:66:83:75:a7:5f:6b:8f:a9:c2:fc:90:03:
                    07:5c:9b:b2:38:47:31:ac:d2:6d:78:c4:e6:bb:45:
                    0a:21:74:e4:5b:0d:7d:2e:2c:63:32:50:09:ce:43:
                    4d:d3:59:71:b4:d8:cf:3e:37:50:25:42:44:58:17:
                    db:28:b7:5a:e7:dd:1c:3a:13:b9:ec:3a:f5:6a:21:
                    03:a2:9a:5f:3f:27:ab:e0:84:0d:87:a7:ca:f5:e0:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F3:B5:B5:19:83:AE:11:85:19:0F:A8:74:81:55:D4:2B:05:D9:93
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7c:74:cd:46:21:a8:37:e4:0e:93:3c:50:34:cb:1c:e5:ee:
         67:40:72:75:21:e8:e5:52:85:0e:1c:12:1e:39:41:5d:28:12:
         67:ad:bf:80:af:ee:6f:9d:61:9f:83:55:90:33:8b:e4:f7:cc:
         c7:63:18:53:ba:4d:5f:3c:f1:4d:b2:8a:78:bd:29:a7:ec:4e:
         64:29:b2:88:a3:df:17:7e:3e:3d:33:5f:3f:00:1a:89:20:4d:
         4c:cb:9f:7a:90:47:53:e5:ad:d6:c9:86:e0:d5:36:f0:67:7d:
         b3:d3:ea:8f:5f:00:ed:46:bb:16:c7:d2:ad:99:ab:1f:d9:0b:
         56:7e:51:55:60:59:80:6f:b3:39:2f:36:a4:a8:9e:6d:36:53:
         9e:aa:1e:4e:81:01:38:dc:ed:98:8d:27:d8:f4:d8:c8:46:a7:
         20:be:14:5e:94:df:e6:06:ed:5e:83:06:1d:c2:e0:d1:42:26:
         02:31:93:bc:e9:48:3f:35:9d:8e:f4:c9:b8:8d:1c:71:3e:8b:
         2d:19:d0:dd:af:50:b7:0c:54:bf:b6:dc:0c:62:c1:b0:63:51:
         51:8f:b0:80:82:58:af:bc:15:77:d9:ec:6d:20:4b:f7:e1:77:
         a2:c0:0f:5e:88:de:86:3d:ec:01:af:c5:6b:c5:54:66:f4:29:
         53:1e:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:51:40 2026 by rpki-client