Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File:                     xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier:          VxbWagcJzCkbMLYrubDHM/T5ZTXr1WAqFrdl+wzeDSQ=
Subject key identifier:   E6:0E:20:38:D7:25:AD:85:45:92:54:36:3F:79:3E:16:F6:66:FA:48
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer:       /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial:       01A0D614CEDB001255277EB6CC64994ED856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number:          1A00
Signing time:             Fri 25 Sep 2026 01:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:22 +0000
Files and hashes:         1: AfdcY0-Nv9-nDm8D_XhuzGvHs1M.roa (hash: Iln5My7Vy90xzmErWY2q1+QP+/1Vku9eLVf6no/e5Gc=)
                          2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: cckpzAfURxF7EHg6Q/997OJPnsJ0kG7hkK1dvJ4xi5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:ce:db:00:12:55:27:7e:b6:cc:64:99:4e:d8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
        Validity
            Not Before: Sep 25 01:01:22 2026 GMT
            Not After : Sep 26 01:01:22 2026 GMT
        Subject: CN=e60e2038d725ad85459254363f793e16f666fa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:e7:62:9f:a2:10:18:c1:4d:bb:15:7e:26:
                    b6:65:e0:c8:5c:7e:1f:fe:fb:cb:f1:74:af:88:74:
                    0a:46:9c:db:76:90:fa:7a:13:c1:1c:de:d7:91:06:
                    3f:f1:66:8b:a8:b9:82:77:1a:84:4a:ac:69:35:6b:
                    1e:42:5b:3a:15:41:e2:2e:82:38:bc:52:53:1b:24:
                    fb:de:54:12:a0:db:44:9d:78:31:d2:e3:66:04:0d:
                    f9:03:f2:50:61:e9:fe:95:e2:35:7e:61:f8:e9:4a:
                    1a:1c:8d:62:d7:1f:e2:98:53:21:38:fe:a3:fc:00:
                    b7:aa:cb:0d:bb:c7:f0:78:6e:a3:82:03:ae:f0:ef:
                    f3:7f:aa:98:30:e9:43:6e:61:bc:02:e3:77:41:42:
                    92:53:b6:a5:44:b0:a8:3f:b1:48:3e:47:f4:60:bf:
                    e0:1e:ff:c8:17:ce:d7:2b:76:54:b5:d1:b3:91:a4:
                    b7:46:2a:ca:29:c3:c9:81:d4:cd:fe:c1:26:83:86:
                    67:59:85:c2:a0:5d:e9:f5:c7:e7:f9:61:52:bd:2e:
                    96:3e:0c:dd:6d:26:80:f0:be:ce:54:73:ff:1d:a1:
                    80:e1:bb:0e:14:81:f5:f4:cb:d0:9f:26:88:cb:8d:
                    52:bb:1d:c1:e5:93:e7:14:8d:92:17:bb:cb:04:32:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:20:38:D7:25:AD:85:45:92:54:36:3F:79:3E:16:F6:66:FA:48
            X509v3 Authority Key Identifier:
                keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:50:56:21:bc:eb:d8:7f:4c:a1:a7:41:55:13:be:2a:c7:d8:
         22:91:60:2d:e3:b3:f5:16:bf:ff:c1:7a:bc:a4:ff:25:de:56:
         d3:5c:4e:6a:da:60:37:47:e0:29:04:96:e2:28:c6:9b:3a:85:
         ed:58:17:af:4f:4d:2a:79:4a:a8:13:98:df:30:97:3a:1d:c4:
         1c:21:cc:23:9f:98:22:54:6b:6c:95:d3:16:6b:6b:61:72:e4:
         45:38:2d:57:2c:d3:59:ad:5b:ba:a1:ea:8b:fc:2b:e7:26:2c:
         92:9b:15:e2:a0:c6:7e:81:f3:b4:e3:7c:aa:4c:ed:3e:6b:6a:
         a4:4e:e9:a2:82:00:b1:b4:7b:85:68:8f:e0:00:d6:d9:f1:f8:
         ae:1d:d8:dd:3e:6b:7a:42:68:85:3b:4c:51:72:ce:35:11:c3:
         9e:05:c1:a6:76:64:6e:c3:64:70:96:5c:00:64:39:5b:b2:e9:
         7c:36:dd:4f:8e:9a:cb:1a:f6:56:fc:f1:be:48:b2:93:42:be:
         97:ab:4e:ff:29:27:93:81:3e:1f:2b:84:b7:e7:69:dc:27:b4:
         d3:db:fc:07:be:1d:0d:d7:bc:c6:65:24:9f:81:98:a7:85:f1:
         b2:fa:96:87:5e:d1:e2:63:a3:43:a8:3f:7f:27:0b:b7:ed:a0:
         cc:db:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:34:59 2026 by rpki-client