Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
File:                     6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json)
Hash identifier:          o0592Mpu0pEDlSv8C3EvcZsHAfDVZ4L7JsDi+f7nlT8=
Subject key identifier:   A9:94:30:3A:F3:BD:70:E9:96:67:94:68:D0:AA:9D:38:DD:42:E6:24
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Certificate issuer:       /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial:       01A0C2569DD611B85F294494B5150D2A379D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
Manifest number:          123C
Signing time:             Mon 21 Sep 2026 05:00:51 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:51 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:51 +0000
Files and hashes:         1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: YlqS3YNw+TCLtIzRexOCwX1GmUoA4MJRZ+DytAy0pUQ=)
                          2: j8NRcneTJ0erjUoC8sEq4kTQQnI.roa (hash: jexHV1h3hwT59/VOtHkOcyrNIXBETEJ/OwCKAiLIB9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:9d:d6:11:b8:5f:29:44:94:b5:15:0d:2a:37:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
        Validity
            Not Before: Sep 21 05:00:51 2026 GMT
            Not After : Sep 22 05:00:51 2026 GMT
        Subject: CN=a994303af3bd70e996679468d0aa9d38dd42e624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:7a:a7:13:69:32:8b:ab:22:f5:6e:47:46:
                    ed:97:93:b2:56:95:e1:dc:0d:47:ed:cf:31:7e:7e:
                    77:09:45:db:99:f5:8d:0d:fc:1d:3e:c4:49:da:57:
                    07:bd:4f:fe:89:81:93:34:69:f1:49:19:64:29:0c:
                    54:69:1f:63:4b:56:61:fb:f3:7e:c8:f3:27:8a:46:
                    b8:99:90:44:7a:11:84:c8:b0:72:97:b6:21:2c:c4:
                    62:27:74:81:bf:2d:c7:5e:e0:43:7e:2d:93:9d:e0:
                    af:9a:63:58:36:56:e1:88:9f:a9:92:15:12:ad:a4:
                    42:1e:e9:ab:c4:3e:67:5c:ac:53:27:6d:8a:88:79:
                    20:db:84:86:3c:6f:64:a4:d8:f9:0a:b1:fc:9d:a5:
                    b9:33:7c:95:03:7f:95:56:01:3f:d1:36:3c:89:e4:
                    cf:1f:03:5e:2b:53:3f:b1:fb:c2:74:65:8e:3f:c4:
                    ac:52:d9:79:c8:3c:f0:3a:c8:50:b3:eb:65:13:0a:
                    24:b7:d9:55:50:e1:43:3e:e8:57:18:13:47:bb:ae:
                    49:07:44:dc:f6:66:08:65:67:6c:8b:b2:99:71:7b:
                    5f:82:9a:f4:54:ff:6a:08:55:5a:03:9d:05:58:5f:
                    7b:82:e4:94:6a:f0:54:71:af:98:fc:d0:bc:4b:af:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:30:3A:F3:BD:70:E9:96:67:94:68:D0:AA:9D:38:DD:42:E6:24
            X509v3 Authority Key Identifier:
                keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:b0:4f:46:77:c3:1b:a7:44:d8:82:46:f7:9e:65:ee:87:
         f7:e8:82:d9:3a:54:9a:ca:91:a5:19:e3:76:85:60:a2:00:71:
         06:82:57:ce:d5:f1:5f:fb:f6:cd:43:20:eb:ad:4f:08:72:76:
         8a:47:e0:6c:24:9b:2b:d5:28:12:00:02:fc:10:37:42:67:00:
         47:6a:9f:37:69:31:5b:73:d3:48:d4:04:18:85:b5:d7:41:62:
         bf:93:f1:86:fd:66:67:48:cb:4a:9e:b6:0a:b2:82:23:3c:d9:
         2b:a5:08:aa:09:48:7d:3e:7f:6d:b2:1c:25:39:9d:3e:86:59:
         36:a1:df:36:ef:5d:68:99:73:af:2a:98:6d:8f:9b:1a:e3:cb:
         67:7e:8c:12:bc:84:9f:03:36:16:8d:99:31:d0:a2:3d:e6:ae:
         58:e8:12:8a:39:e0:1c:99:e5:ff:9f:47:aa:6a:a4:9f:ab:e9:
         88:87:3e:62:de:4d:82:6e:35:83:33:cf:2d:74:cc:0d:9f:bf:
         f1:22:52:bc:c0:8e:f8:cc:f7:24:84:6a:05:96:2c:f7:6a:c7:
         2b:bd:26:7c:87:7d:7c:c1:54:19:d2:64:bf:ee:93:52:83:c1:
         c4:5a:77:07:dc:da:30:b2:71:00:c1:dc:29:f8:04:e9:04:7d:
         03:66:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:49:31 2026 by rpki-client