Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          sf4R+ZDCplO4Xcivp8cClg0//eNQ+Vs5eQA/X6VzjnM=
Subject key identifier:   88:77:71:FD:80:F7:B1:1F:2D:FB:91:9D:60:8F:D9:18:3A:77:72:EA
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       01A0C88FB15202822ECF20844E9BAEFCFD2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          1785
Signing time:             Tue 22 Sep 2026 10:00:55 +0000
Manifest this update:     Tue 22 Sep 2026 10:00:55 +0000
Manifest next update:     Wed 23 Sep 2026 10:00:55 +0000
Files and hashes:         1: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: z47r+AIN47d4xZUB7d7F6i8MMs9qt4IqAh3hjX5rhzQ=)
                          2: iYwrp0w-YMmm0ibxrh86XDfftXk.roa (hash: ondL4ek6tcywdsndKqkoZF68C1amMGdy1QAaB/ONx9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:b1:52:02:82:2e:cf:20:84:4e:9b:ae:fc:fd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Sep 22 10:00:55 2026 GMT
            Not After : Sep 23 10:00:55 2026 GMT
        Subject: CN=887771fd80f7b11f2dfb919d608fd9183a7772ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:c0:95:32:a5:03:bd:1f:a8:92:08:f7:05:
                    76:84:68:bb:ac:a6:37:e7:22:27:cc:04:54:14:ca:
                    dd:d8:b4:1e:98:02:97:f0:cc:7e:47:13:f8:80:e8:
                    98:af:05:37:70:e1:84:6b:e4:40:82:34:3a:e1:0b:
                    78:9e:04:c0:ee:3b:8c:bd:fa:37:7e:1c:c1:8e:7d:
                    90:59:9e:0f:b5:39:4e:74:52:6f:56:2e:e3:5e:ab:
                    4f:cf:d4:1e:89:f2:e7:cd:68:22:fd:6b:e6:39:0c:
                    35:cd:56:df:52:64:cd:fd:ee:b9:1c:94:42:a2:cb:
                    c8:b3:8e:08:3f:77:1a:38:45:73:b4:c9:28:4e:58:
                    a4:f0:5e:98:56:f9:c8:ed:83:02:ab:8a:cb:f0:6d:
                    3b:a0:76:b7:3a:12:77:7e:e2:cd:d9:52:49:d7:ee:
                    08:16:18:27:08:73:d5:5d:29:28:7d:f6:1c:7d:31:
                    96:3b:37:a7:6c:ec:51:2c:28:14:ba:8a:41:b9:21:
                    92:ca:a2:6e:b3:9e:00:1f:7f:62:c9:4e:c7:18:e4:
                    ac:25:22:c5:5b:88:ba:e9:8c:94:fe:bd:de:c7:b7:
                    17:da:dd:9b:ba:9a:98:dc:ee:6c:9d:8e:96:45:a8:
                    c5:50:a4:7e:e2:33:91:a6:10:94:7a:96:b0:94:58:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:71:FD:80:F7:B1:1F:2D:FB:91:9D:60:8F:D9:18:3A:77:72:EA
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:7d:8e:bc:df:d8:45:61:51:41:93:23:a0:9d:b4:ef:5c:
         75:dc:b6:6b:57:22:2d:f3:e2:6f:d7:6b:97:ca:e5:68:81:71:
         75:f9:4b:92:5f:32:00:b6:11:cd:31:81:2e:61:4e:50:c1:53:
         61:f6:c5:db:5c:e2:1e:8a:a7:45:d3:5f:e0:7c:5f:f3:7a:8b:
         7c:f1:8d:92:f6:5f:ff:15:cc:09:c2:b7:a6:f1:aa:f4:c2:ce:
         0c:5e:17:09:6e:af:9f:4f:7b:8c:36:b6:87:ff:97:48:1b:8a:
         6c:49:b7:59:f3:6e:b0:f9:c9:85:81:ac:65:b0:de:fb:5f:aa:
         4b:8e:80:2d:7d:4b:c3:99:8b:0e:28:5b:43:6f:3b:db:76:5a:
         1a:66:22:35:53:b1:62:99:85:76:f7:3d:64:92:19:63:c6:0c:
         fa:13:69:5c:2e:85:93:89:52:47:e4:3f:0b:e0:17:52:bd:fb:
         cf:15:7d:a8:88:d4:5d:cf:2b:d7:8e:53:51:c7:bd:1f:78:8d:
         46:48:1d:7f:83:6b:95:21:a1:9f:4c:a0:77:d3:fd:87:36:ca:
         3c:e7:1a:2b:54:28:0f:92:79:ae:9e:86:93:31:cf:24:3e:6e:
         fb:a1:66:0e:78:c3:43:9f:9e:da:79:7d:a0:d9:af:11:f8:b7:
         35:81:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:34:57 2026 by rpki-client