Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          RgLnqZJIv0taPH0yOtQ/F2MoMuUM7rqI+eBNCYRiuck=
Subject key identifier:   E4:9D:F0:A6:54:F5:F9:83:61:4B:01:BB:5A:D3:2D:3C:75:76:06:56
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       01A0E8F69D4D077F60303173610E1018557E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          09B1
Signing time:             Mon 28 Sep 2026 17:01:11 +0000
Manifest this update:     Mon 28 Sep 2026 17:01:11 +0000
Manifest next update:     Tue 29 Sep 2026 17:01:11 +0000
Files and hashes:         1: 8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa (hash: CzDXuVFvOpgIjJyo8JK5OTAHeeCyIkIfuyxNLXuiD4w=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: KovgdQpTAIdOZcLfe/ltk6D2O7gM5HDCW9XjtLQksaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:f6:9d:4d:07:7f:60:30:31:73:61:0e:10:18:55:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Sep 28 17:01:11 2026 GMT
            Not After : Sep 29 17:01:11 2026 GMT
        Subject: CN=e49df0a654f5f983614b01bb5ad32d3c75760656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:7e:e3:bb:d7:9a:b3:2f:2d:fa:12:c9:85:
                    1a:4d:e2:20:aa:0e:1d:50:85:4c:54:36:b5:da:f1:
                    7e:36:35:1d:84:f0:7a:65:bb:e4:93:9f:c6:90:9a:
                    f8:8b:47:54:89:ed:eb:97:de:bd:c8:3c:e6:52:0e:
                    b1:eb:8e:b6:cc:4f:95:0d:55:86:92:a1:fc:a9:ea:
                    0f:c2:d1:4e:cb:38:f1:2c:fc:f7:28:6a:9c:32:ff:
                    ec:00:f3:0d:c4:77:5a:63:cc:f6:39:3f:38:e4:ac:
                    18:48:41:34:81:2d:a0:a1:25:a9:f2:a9:f6:a9:c6:
                    71:31:48:1e:96:85:95:19:91:02:80:52:68:72:85:
                    1b:22:1c:63:f2:b5:4b:84:8c:1f:fb:7a:ec:dc:07:
                    a1:af:26:9a:fc:9f:b7:5b:f0:62:ea:1d:af:1f:fa:
                    5d:c2:f5:aa:4f:3a:09:da:8d:95:76:33:12:dd:51:
                    1c:d6:58:d7:4c:36:00:d0:a7:a3:7b:64:b1:db:1b:
                    12:7b:6c:8c:47:c2:2c:e5:53:e4:89:39:aa:58:c9:
                    d7:eb:34:10:ef:a2:7b:65:32:4f:23:72:39:7c:9b:
                    3e:24:80:06:44:1d:fb:8f:d1:de:9f:f3:27:e7:87:
                    ee:e4:51:89:9b:2b:93:9c:fa:41:60:71:72:58:ae:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:F0:A6:54:F5:F9:83:61:4B:01:BB:5A:D3:2D:3C:75:76:06:56
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:09:ba:e8:50:ec:01:66:21:77:ee:79:8f:d4:5a:07:f6:
         68:53:c2:08:c5:db:19:d8:9e:ee:61:34:67:04:38:cc:49:91:
         66:9d:ae:75:18:96:b7:28:c3:44:6a:42:07:d2:a3:77:a0:b5:
         8b:3d:86:ab:93:b9:59:82:e8:6b:5c:5f:e7:de:0d:4d:da:e2:
         76:a2:3d:d8:22:6d:73:ea:2b:85:3a:0d:64:5e:b8:18:11:28:
         29:1a:9c:cf:c8:58:8f:90:04:80:c8:09:68:8a:f5:88:b5:1c:
         4f:13:84:ac:52:4e:3a:e0:27:a0:ca:84:34:05:23:14:91:5f:
         ee:b9:12:82:9a:b6:a0:8e:40:f0:e0:a0:f3:ac:b4:b4:78:46:
         cf:10:2d:ac:43:b3:09:a8:43:84:61:41:b8:0d:77:ce:ac:c6:
         40:27:37:7e:fa:60:9e:4f:5c:92:00:fc:78:11:d0:37:98:fd:
         26:a9:b2:ab:d8:a9:bd:a3:11:db:a8:1d:e4:8d:09:70:d0:6a:
         ac:92:a6:37:28:47:84:3c:af:9f:b8:86:ab:3c:77:4c:98:ff:
         44:44:d6:cb:ab:d8:f2:b5:24:02:f5:6b:0f:2c:2d:56:b8:8b:
         9f:1a:58:fc:de:d1:53:9a:9b:87:85:6c:47:ec:7a:a1:a6:54:
         36:a7:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:01:31 2026 by rpki-client