Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
File:                     6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft (raw, json)
Hash identifier:          TYmKfdelkBb6dcoln7VBoHdISlNPD70s7ZIKEy4MPOU=
Subject key identifier:   7E:57:18:3D:D4:4F:5E:A5:E7:34:15:D1:04:AF:46:5D:AD:A0:A6:52
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Certificate issuer:       /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial:       01A0C5FC6ACD8FD47B3EA367D508A2B25822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
Manifest number:          1A76
Signing time:             Mon 21 Sep 2026 22:00:48 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:48 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:48 +0000
Files and hashes:         1: 6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl (hash: zAXuiOW5b6Ax2SFLJFUhu3FMkW7GCnSNNnHnesIQ4Ss=)
                          2: PLU1scGCX_Z6EP8Hgyg69HPqQ9I.asa (hash: 9c59RiHmUg5m8lvioiUPAxpkste+ERLLAHwy/LfB1tc=)
                          3: h49K85L4UEyeEFjotSv0qoO9c5E.roa (hash: Om6LbPxllmjNlvNuigobtMNJ+3VA5Oexf50hnPEjfBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:6a:cd:8f:d4:7b:3e:a3:67:d5:08:a2:b2:58:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
        Validity
            Not Before: Sep 21 22:00:48 2026 GMT
            Not After : Sep 22 22:00:48 2026 GMT
        Subject: CN=7e57183dd44f5ea5e73415d104af465dada0a652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:b3:ab:43:e0:9f:39:4f:e3:4d:6c:00:c1:
                    b3:c7:cd:1d:5c:92:9b:8d:c0:0a:99:de:49:a9:ab:
                    40:4d:bf:a7:84:69:53:87:29:7e:d2:1c:b3:e2:94:
                    e2:5c:51:e1:6d:14:81:67:ef:7d:a0:0b:a0:c1:3c:
                    62:65:36:20:a3:ac:6e:5c:d3:21:ed:67:3c:c5:05:
                    95:43:5a:5a:cf:30:6b:35:60:bf:d4:9f:70:7e:67:
                    4d:b9:c4:38:1e:cc:8b:59:51:cb:9f:bd:ce:59:79:
                    30:5d:91:e5:f5:7d:2a:9a:6e:cd:d8:ff:2e:24:1c:
                    ba:3b:ed:63:05:e5:fa:6c:7b:57:6d:48:e2:0f:5c:
                    80:b7:21:64:e3:b1:33:43:cd:9f:e5:c9:9f:b5:b0:
                    71:36:90:b3:a0:8b:64:ab:87:61:fb:55:81:84:79:
                    dd:00:06:46:4e:c7:9a:6d:1f:45:4e:0f:7b:c5:f9:
                    0c:db:0b:c6:fb:8d:3f:ad:60:16:76:14:9a:fa:7c:
                    b4:46:01:90:da:da:b0:40:fc:e9:ac:3e:af:10:30:
                    e6:19:b4:18:2f:ba:01:63:0c:cc:e1:27:da:e8:3d:
                    2c:19:e6:7c:a6:52:a9:b1:bf:31:ef:ff:f6:38:83:
                    09:02:b2:69:2f:e7:2e:5b:9b:a3:9b:b0:f3:ce:ec:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:57:18:3D:D4:4F:5E:A5:E7:34:15:D1:04:AF:46:5D:AD:A0:A6:52
            X509v3 Authority Key Identifier:
                keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:7d:e5:9f:21:25:28:f4:92:36:f7:53:6a:3a:a9:1f:9b:
         e5:b6:33:44:cd:b1:c8:08:ad:5a:c6:fb:ba:ab:4d:68:b4:30:
         6c:13:68:34:ef:57:80:6b:83:d5:d4:b4:d1:0f:72:aa:63:7d:
         8e:b6:52:d1:f3:26:24:db:a8:ab:4c:f0:79:cd:19:b0:81:a0:
         3f:e5:0d:75:9d:dc:4b:02:21:d8:6d:30:af:63:84:8d:2f:60:
         e4:de:e5:74:cb:85:98:45:d8:a5:e0:1c:4f:72:ce:6f:3d:ee:
         e6:a5:74:21:aa:d9:dd:0f:71:2b:6f:38:9d:0a:be:08:6e:63:
         76:ba:6f:ed:21:1b:dd:93:5a:50:82:0f:21:23:4c:81:4d:55:
         ad:21:fe:c0:9d:ea:31:51:91:bd:1f:b4:c8:29:29:3a:c8:c8:
         82:69:75:18:57:1e:93:b9:90:11:b2:2b:43:32:a3:67:b1:0a:
         8c:dc:c2:e4:d4:a5:f7:11:25:71:ae:cf:9e:6c:c7:8e:7a:bc:
         bd:28:81:54:8d:be:cf:ee:b5:92:43:19:af:79:e4:50:4f:4f:
         96:45:3b:9c:96:4f:cf:2a:ce:11:8d:df:fc:2c:62:0e:05:e9:
         0d:d0:86:90:a8:e3:cf:ee:71:b3:3c:e4:7b:fa:de:f4:bc:9e:
         6b:43:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:09:54 2026 by rpki-client