Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          HxEQfk8+mdSRIVtOEAou2rxUMXPPCjmA5hU4UpkzBgc=
Subject key identifier:   F9:29:E8:8E:2E:05:87:AE:DD:72:84:A3:91:B5:3B:A7:2C:AE:D4:7D
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       01A0CD11084F9C2CF60C8DA60DBEF2307D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          19FB
Signing time:             Wed 23 Sep 2026 07:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:40 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:40 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: R+LTnGGwNSnAoQF1ru4KecgcXhyzFqpPVUOKOn3SSSU=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:08:4f:9c:2c:f6:0c:8d:a6:0d:be:f2:30:7d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Sep 23 07:00:40 2026 GMT
            Not After : Sep 24 07:00:40 2026 GMT
        Subject: CN=f929e88e2e0587aedd7284a391b53ba72caed47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:e3:ab:21:7f:23:df:15:a6:31:88:79:6d:
                    65:0a:d8:c3:e8:d9:46:61:07:a1:91:f8:1d:7e:95:
                    f9:98:e1:67:1f:a5:3b:d1:ee:4c:62:65:d6:66:0b:
                    03:6d:d7:e0:72:a5:c7:09:ea:f0:3f:41:5a:b0:30:
                    19:87:3c:d5:34:1f:96:04:40:8b:c8:ed:59:d6:fd:
                    de:7f:72:58:85:98:fd:b5:00:8b:ab:e8:60:9f:87:
                    7e:57:64:35:a3:c0:95:14:71:06:6d:e5:86:53:c8:
                    cc:d6:bc:c3:9f:8d:89:a1:9e:f0:1d:29:b7:f3:c2:
                    1c:a9:1a:8c:65:dc:76:26:08:7c:22:c4:1c:df:b7:
                    db:d0:6c:8b:13:24:4f:18:12:05:70:54:1a:e9:9e:
                    35:67:63:07:f9:f6:ed:90:29:0b:7c:bf:05:da:a8:
                    6b:00:4e:90:71:aa:95:9f:de:6d:25:ce:f3:45:26:
                    e5:b2:eb:9d:eb:86:b9:cd:e7:7f:7c:bd:a0:9d:7a:
                    e1:36:b4:c6:a1:a5:c8:91:13:3e:0f:ce:44:64:60:
                    f4:8c:7e:f1:75:fa:36:63:4e:c4:a3:f9:f0:87:55:
                    f3:8b:e2:df:b9:32:1a:df:59:4e:9e:1a:de:c8:49:
                    a1:07:ad:94:cc:8f:c6:85:6b:c1:0b:3f:44:7b:00:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:E8:8E:2E:05:87:AE:DD:72:84:A3:91:B5:3B:A7:2C:AE:D4:7D
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:43:a8:5b:b9:b7:87:05:3d:e3:f4:18:6f:65:56:4d:11:36:
         bd:0c:12:f0:09:21:3f:78:d0:d6:3b:37:26:6c:4c:78:6f:33:
         73:46:36:a1:df:7e:23:66:a0:e4:f1:63:f3:52:ae:2a:7f:96:
         8b:34:7f:b5:de:8a:47:61:f8:16:7a:b4:24:04:ca:42:70:9c:
         8a:5e:a4:7f:04:f4:7c:8b:4a:73:ca:38:70:19:cf:1b:fb:40:
         2e:b3:1e:4b:e1:85:96:b5:c3:63:72:9b:8c:e7:73:01:05:98:
         a5:0d:57:8a:bb:53:f6:61:e2:60:c7:e6:9d:71:02:36:32:c6:
         59:1c:02:9d:a6:4f:7b:72:96:87:b6:67:93:42:f4:8c:01:1c:
         6f:37:b7:24:e0:c7:0c:c3:ef:0a:22:d4:a1:99:b1:70:a4:e4:
         92:35:82:1b:6e:e3:c3:92:49:61:98:c8:8a:e6:33:a7:06:18:
         1b:65:b6:44:8b:86:c3:0d:e8:30:33:38:a9:72:f2:c9:72:77:
         b6:74:31:84:2d:21:6e:fa:1c:93:36:2e:fa:99:e3:49:06:ee:
         25:ab:d4:36:00:7e:ad:8c:8c:66:bf:f8:f5:57:37:cc:fa:df:
         a5:eb:a3:04:0a:16:b6:fe:9f:85:6b:90:46:f3:c0:a3:a2:01:
         b8:68:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:06:19 2026 by rpki-client