Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
File:                     6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft (raw, json)
Hash identifier:          QqE3LIN4Z8EWf1wjOkGhryC9F0BsTigrRcO9R75QEt0=
Subject key identifier:   19:5A:EA:1C:B2:17:EB:B8:7A:72:AF:39:27:4E:51:D5:52:2F:AB:01
Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17
Certificate issuer:       /CN=ea93edfc2aa748e4981050ec06e3a66920265e17
Certificate serial:       01A0BE428D6519C3F02ABB9352485BC4A057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
Manifest number:          1A68
Signing time:             Sun 20 Sep 2026 10:00:27 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:27 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:27 +0000
Files and hashes:         1: 51xn4STL4iZZj62JSvhJ4zl6d6g.roa (hash: +puelUbKWuzaIoLcZeNYJ6k1vQgt2kHRx9TFlxyzoEI=)
                          2: 6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl (hash: jZXB6SVpUZ4amqGrH8OxgQXXVSf/Aa+eWsbatraIsgI=)
                          3: EXFU73rH1Gc1eVRDfvuScYJlzGs.roa (hash: OuCZzos3D1mTnexc0/u8FlcZVoi8DzCDiFFLd+iZReo=)
                          4: KddG9VzqqdX_8k-PUqQzM9NcRkY.roa (hash: pzuVMWDh2Vne7UfbY+caG5MJ7AmHoX1/3ZwULzGUsug=)
                          5: pWmm-znJ9h3QY4KDibvQqttBHk8.roa (hash: +zU8e4lmjNY/s6v0j6Eqt+nFntwM2ddZGrZrcJphjHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:8d:65:19:c3:f0:2a:bb:93:52:48:5b:c4:a0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17
        Validity
            Not Before: Sep 20 10:00:27 2026 GMT
            Not After : Sep 21 10:00:27 2026 GMT
        Subject: CN=195aea1cb217ebb87a72af39274e51d5522fab01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:24:b7:63:ce:b9:4c:e5:f1:82:f0:08:2d:
                    f9:9d:0d:1d:8f:fc:e7:48:3f:69:f3:3e:40:9c:3f:
                    83:b0:b1:c1:1a:d0:3b:a7:21:f1:90:a4:cf:97:d4:
                    7e:c2:00:b0:a3:82:45:6b:0e:d1:00:e2:bd:52:7c:
                    90:e6:75:5a:23:e6:be:df:37:54:09:69:f2:cc:47:
                    ef:14:8a:e0:bb:20:89:a3:48:30:c2:b1:e3:97:91:
                    10:69:fb:f5:80:4a:30:12:32:3f:44:ed:e8:69:35:
                    00:aa:2f:ec:08:87:d4:2e:c0:84:0b:1f:cd:60:f3:
                    15:d7:92:88:53:41:df:8c:35:36:77:93:d7:e6:57:
                    2e:bc:01:cd:16:13:bc:25:73:07:3e:3d:ab:58:d1:
                    d1:16:2a:73:10:f9:46:54:1b:15:67:b1:53:63:7e:
                    0a:f7:f1:14:5e:47:9b:43:42:0c:83:78:07:17:00:
                    f2:7f:62:90:91:e6:6f:81:14:a0:df:29:da:2a:4c:
                    b2:63:12:78:d9:d4:fe:31:83:51:bd:6f:bc:02:2f:
                    a0:cf:46:37:4c:5a:62:9e:94:8c:5c:68:24:f4:d4:
                    37:0f:11:c5:f1:20:05:09:31:f6:ba:8e:ab:6c:2c:
                    6b:c9:0a:21:25:34:97:1e:f0:7c:7e:b9:44:44:8e:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5A:EA:1C:B2:17:EB:B8:7A:72:AF:39:27:4E:51:D5:52:2F:AB:01
            X509v3 Authority Key Identifier:
                keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:98:d2:df:dc:7f:38:b2:39:40:f0:35:bc:63:8e:0b:d9:
         d4:3c:43:dd:58:29:93:28:8e:ba:cb:cc:22:92:b4:ed:48:38:
         c5:0a:50:b1:02:1c:bc:db:2f:f4:e7:18:52:52:17:6b:79:3f:
         54:52:43:af:c7:2a:77:e6:93:47:24:34:7b:97:5a:f6:50:44:
         30:07:f3:f2:94:56:91:b3:e5:87:d3:56:67:97:8d:c8:4d:1b:
         66:79:c8:f5:84:69:01:aa:2b:7e:aa:04:6e:15:11:6e:4d:11:
         eb:48:1b:0e:b0:d9:6a:4a:2a:51:ce:7a:0b:9b:60:7a:94:f6:
         b2:f8:51:2d:f8:9f:73:1d:41:b9:9b:27:f9:cf:d9:5b:ca:4e:
         43:22:e6:a1:59:ed:bc:63:72:a1:f2:23:d9:7b:3e:26:55:50:
         46:77:e0:45:e2:9e:bc:9c:5c:ac:51:1b:e6:c5:a6:b3:33:4e:
         72:46:88:9f:12:8a:fa:ad:2b:a8:5d:49:24:b2:7d:d3:51:00:
         de:b0:9d:4c:cd:1c:19:bc:34:61:71:9a:60:e0:b2:2f:73:19:
         9a:7f:05:39:74:1b:0d:f0:fd:ea:f4:d9:ec:33:be:dc:83:9b:
         35:76:56:ce:8a:69:c5:d5:cd:bd:23:31:c8:de:1e:d1:59:8e:
         42:97:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:39:23 2026 by rpki-client