Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          muSwU4pZFkldE5yUT6RfwsYW60Dv5CkxyMiG4vhalwM=
Subject key identifier:   64:BF:B2:62:F0:BD:8F:F4:1E:34:E4:83:5E:AD:95:F6:10:EF:33:DA
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       01A0D34A7E48D82ECA2BF1A3375D739F0C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          0580
Signing time:             Thu 24 Sep 2026 12:01:09 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:09 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:09 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: ntgnbQFiVf2zsTsmc67MmUzU2jwyON8VX0LVwYSxGm8=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:7e:48:d8:2e:ca:2b:f1:a3:37:5d:73:9f:0c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Sep 24 12:01:09 2026 GMT
            Not After : Sep 25 12:01:09 2026 GMT
        Subject: CN=64bfb262f0bd8ff41e34e4835ead95f610ef33da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:4e:1d:ce:64:97:33:69:a1:f4:50:b6:89:
                    58:f2:ed:49:d4:ab:1c:a4:9c:5c:4c:ff:0e:22:48:
                    ab:f0:dc:e5:8e:d5:06:3c:32:e3:e6:49:60:8a:da:
                    c4:3d:f7:79:ed:e6:5b:68:39:bb:4b:41:ad:05:98:
                    bc:80:66:9c:0d:5a:fb:14:b0:5b:53:d2:68:12:96:
                    5f:2c:f0:d3:6a:db:7a:23:86:a6:02:41:cf:3a:45:
                    2a:e9:ee:10:7e:dd:64:fb:5a:3f:c9:02:a8:a0:46:
                    ff:fa:cd:38:b8:ee:fd:94:84:7f:11:c3:c0:0d:2b:
                    29:9c:de:ed:05:65:7e:55:f6:83:7d:40:46:0c:c0:
                    ff:b3:66:ce:81:65:95:80:2d:d0:f7:73:e7:44:ab:
                    e6:87:6f:e4:a5:29:8b:7e:28:bf:12:ce:59:e3:39:
                    cd:ad:4c:5e:80:f1:7b:17:3d:34:d6:7d:0f:dd:12:
                    e0:4f:f2:1b:6f:cf:6f:1d:bd:ef:57:4f:b9:3a:43:
                    ed:ad:07:cf:73:96:5a:08:e4:58:93:62:d3:0d:81:
                    d8:eb:8a:c0:da:e6:78:f4:8a:bb:b9:12:17:41:08:
                    c7:6f:7f:54:6a:70:47:5a:95:d0:d1:ed:11:b1:30:
                    06:b2:42:0c:dc:d7:ba:92:86:fe:8b:42:ea:88:37:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BF:B2:62:F0:BD:8F:F4:1E:34:E4:83:5E:AD:95:F6:10:EF:33:DA
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:80:18:f1:66:46:aa:e1:d6:cf:5a:2c:d7:02:bc:0c:de:14:
         8f:cb:42:fa:10:17:6c:6b:db:d8:41:cb:a9:34:73:84:7c:5f:
         8c:77:86:34:f6:28:8e:de:88:cc:69:2c:65:a7:9c:32:75:a0:
         03:05:05:87:30:e6:d6:31:82:fd:91:92:fa:e5:0e:0a:7f:7b:
         5b:ee:16:29:4f:e4:97:6b:75:31:6a:13:e6:83:b8:e0:f5:bf:
         69:ce:60:10:a8:d0:c0:73:76:4b:66:6f:4d:d5:c1:71:91:c3:
         27:e3:fd:75:17:11:36:38:d2:3e:51:a1:7d:a6:3e:91:1d:3c:
         4d:96:bb:0c:8f:40:fe:c0:bc:1a:2c:b5:bd:dc:cd:b1:dd:6c:
         cb:53:df:4c:bc:9d:21:b2:16:be:cb:87:90:d0:5b:8e:2c:30:
         75:e4:67:03:56:24:bc:fd:4d:4e:95:ea:d9:42:80:a6:05:80:
         09:74:70:ce:e6:19:ca:1c:6d:b0:3f:08:f1:d9:08:78:88:41:
         1c:54:0c:e4:21:34:42:50:22:b1:65:e8:33:63:ba:d9:73:37:
         83:29:39:17:d5:bd:83:44:84:a8:f5:fc:26:94:14:c5:0a:04:
         e5:5b:45:69:b8:2a:df:49:26:00:80:5a:be:59:d1:4a:69:18:
         ca:3b:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:04:30 2026 by rpki-client