Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          zArai2oxkjsdCL+Qu9732SH+aMyxToNRZOR2kwTykmU=
Subject key identifier:   30:93:F6:A6:AE:79:21:65:20:43:F0:D8:9F:7E:C5:9E:7B:6B:A5:29
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       01A0BE0BFE0365C611966151027C0E371223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          1267
Signing time:             Sun 20 Sep 2026 09:00:51 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:51 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:51 +0000
Files and hashes:         1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: isXGFkea0RLGGAuT5vDZLSWcKLDsDjeolQwRT3shLQQ=)
                          2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
                          3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:fe:03:65:c6:11:96:61:51:02:7c:0e:37:12:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Sep 20 09:00:51 2026 GMT
            Not After : Sep 21 09:00:51 2026 GMT
        Subject: CN=3093f6a6ae7921652043f0d89f7ec59e7b6ba529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:77:c5:94:af:a7:97:65:61:26:1c:24:49:
                    85:38:1f:b9:ec:5f:8b:3e:18:d1:05:86:91:a1:6d:
                    92:f1:dc:67:12:5b:25:f1:be:b4:f0:36:f9:79:ca:
                    14:a7:5a:2a:2b:f5:eb:fb:6a:3b:37:6a:c2:cd:3b:
                    d4:a4:ab:2f:57:19:d3:3f:c7:4b:9b:04:60:8f:8d:
                    35:f6:2b:15:71:45:2b:ba:c4:d1:58:d4:07:85:96:
                    f3:de:2e:df:e7:e6:d8:9d:b2:7e:c8:a2:29:e6:f7:
                    01:5b:f0:fc:b0:98:f8:eb:21:8d:ec:35:07:75:bb:
                    fd:08:ea:3f:f3:77:bb:91:b2:a0:7a:e6:45:37:70:
                    d4:95:aa:52:c0:55:6f:b5:ba:cb:f5:dd:3c:99:00:
                    bc:23:b9:6c:dd:f5:f0:8c:9c:64:8e:4b:ab:84:48:
                    af:69:c0:5b:e8:bf:2d:54:bb:ca:21:47:cf:fc:83:
                    c4:da:6e:b0:be:83:bb:63:ea:f8:8c:ab:8a:21:45:
                    1e:7e:88:04:74:d9:03:fc:47:3f:cf:a8:ac:57:66:
                    a8:88:55:51:0e:c7:8e:c7:1e:b2:7f:f7:35:1c:aa:
                    c3:e8:49:f1:97:e6:f8:8d:84:52:85:fc:00:32:65:
                    af:3a:4c:44:b8:59:a4:3e:fd:ae:24:99:a7:0e:5a:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:93:F6:A6:AE:79:21:65:20:43:F0:D8:9F:7E:C5:9E:7B:6B:A5:29
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:49:cd:07:e1:ed:57:f0:ff:f9:ff:54:ea:a9:a8:f2:73:bd:
         f5:ca:01:7b:fb:04:75:25:92:4e:8f:26:be:54:ce:8f:6b:90:
         e5:f5:74:10:e6:7e:6f:dd:9b:6f:df:eb:33:0c:b1:8a:f1:38:
         b0:37:11:88:c9:45:de:a5:db:8d:b1:f1:f4:88:86:45:43:4a:
         8c:8b:73:ed:f9:1d:bd:c3:ce:f5:c4:6f:ad:cf:be:b4:fd:dd:
         91:40:54:4e:0a:b6:35:8a:40:38:a6:d3:08:4b:ae:45:9d:f1:
         aa:1f:33:ac:d4:09:98:57:45:ad:69:93:49:b9:14:d8:f8:e7:
         0b:6e:95:89:25:cd:77:50:c9:e5:4d:67:36:88:43:0f:d1:36:
         50:6e:a8:91:08:74:a3:9e:b0:c3:1c:0d:e4:87:6e:51:a9:16:
         78:7b:77:ef:1b:ba:c1:95:cf:af:4c:a8:9c:17:ae:e5:4d:e8:
         ae:95:e5:cc:20:8d:9d:d2:a4:06:83:5f:2d:91:f3:01:3e:49:
         4a:87:a4:99:6c:45:ba:cd:94:38:5e:6c:f7:95:f7:27:48:bc:
         7c:ce:7c:1d:3b:85:93:63:32:c4:4e:40:b4:69:24:37:0f:2a:
         88:c4:aa:76:7d:83:c9:39:d9:6b:80:d4:44:e0:b7:c0:e7:08:
         cc:57:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:58:07 2026 by rpki-client