Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          IjNo5PK7p+Nxc3nnDI19UC0ShfJjEluxjwXBaFQOLmg=
Subject key identifier:   61:EC:48:43:55:15:AD:9C:E1:0B:64:79:A6:AC:7A:53:9B:1F:24:CB
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       01A0BE4268E09C8B6E76F06E3490929C6077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0E4B
Signing time:             Sun 20 Sep 2026 10:00:18 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:18 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:18 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: /KZmd1PUM5ifQucC/2E3NrVCf8TDdTqmJ9rEuVjQqMM=)
                          2: QS3mViuWefpzRVuut9BCujNEHBk.roa (hash: pncFDsfj5PoDws+gFKzvHR1BHzgW/TNAwcyb1+Rx/Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:68:e0:9c:8b:6e:76:f0:6e:34:90:92:9c:60:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Sep 20 10:00:18 2026 GMT
            Not After : Sep 21 10:00:18 2026 GMT
        Subject: CN=61ec48435515ad9ce10b6479a6ac7a539b1f24cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:26:a6:09:75:88:15:64:34:46:dc:49:74:
                    70:0b:2b:85:2d:7e:26:69:ff:d9:f4:e5:85:44:5d:
                    e6:47:77:88:82:90:c4:66:e1:a9:07:99:75:e7:53:
                    ab:69:64:2f:9f:fa:96:a6:22:b9:a2:62:cb:06:1d:
                    93:76:b8:60:d5:80:a1:bd:c2:cb:c4:d5:92:ad:04:
                    cb:e6:ad:1e:77:58:31:70:b7:a8:21:81:68:42:46:
                    61:d7:2a:fe:b6:27:6a:b0:e0:a4:63:37:d2:a3:d7:
                    9e:99:69:90:8d:11:42:4c:3b:b6:18:1e:da:4a:13:
                    7d:07:82:15:45:b6:f7:14:75:40:0b:f0:d5:d0:4a:
                    64:bd:6a:ae:b1:9e:25:99:1c:2b:52:98:29:86:ae:
                    b1:a1:e3:91:29:80:c3:ba:55:dd:68:e1:2a:98:8c:
                    16:dd:da:1b:7d:ba:d0:db:50:5c:87:a6:d0:1a:51:
                    de:f5:0d:ff:90:73:43:74:a7:1b:91:76:00:57:99:
                    78:22:9a:5b:e3:55:b4:e0:a7:a1:e2:f5:23:e3:47:
                    5d:f7:3d:e3:6f:79:a9:90:38:f5:72:80:b2:a2:38:
                    a7:04:b0:2e:06:7c:7a:7f:06:78:97:3f:83:1e:0f:
                    f6:c3:be:84:21:da:2e:07:ed:fd:eb:3f:fb:1a:7c:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EC:48:43:55:15:AD:9C:E1:0B:64:79:A6:AC:7A:53:9B:1F:24:CB
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:3d:f1:3e:2d:90:0e:91:69:5d:9e:0e:2b:36:b2:c4:33:13:
         ee:51:3e:7f:98:01:e1:0e:dc:e2:dd:5c:e3:6f:74:e9:f5:e5:
         20:e5:0a:f0:96:05:74:f5:67:9f:d2:1c:1b:b3:da:87:e2:aa:
         dc:36:28:c4:90:1f:cd:c9:c9:3f:0e:9d:a3:aa:54:a6:dc:55:
         87:47:d6:8e:16:51:96:36:83:ab:04:8f:59:e1:87:34:20:e5:
         20:02:21:e2:07:5c:f9:ce:5a:8d:6e:fe:96:be:bc:a1:c4:2f:
         c8:11:38:80:4d:4d:19:b4:ba:3d:05:9f:3b:24:2d:e1:3b:48:
         a9:70:25:82:aa:a1:04:ac:b8:4d:1e:34:14:06:7c:8f:98:15:
         43:c3:eb:7e:45:f9:52:d1:07:83:8c:0e:64:64:1f:ec:e4:af:
         06:9a:11:9a:39:9f:aa:1f:08:da:1c:c6:e4:78:af:60:84:60:
         7c:17:5c:47:dc:6d:fd:7d:d1:d7:4a:67:e0:c6:9f:c2:17:a0:
         4a:da:c3:33:77:f3:8b:ef:a5:51:76:79:14:e4:fa:6f:cb:5c:
         de:33:b7:0c:bf:39:a4:03:5e:d8:93:3f:26:76:17:bd:dc:c3:
         ac:52:91:7f:fa:ac:4d:13:1f:52:99:7f:96:40:ba:a7:cb:3e:
         38:eb:ef:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:51:37 2026 by rpki-client