Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File:                     00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier:          /wFg0ZeS6B9YcoJIoPPpbiztOvxrp7W0ySNSCvyIcHg=
Subject key identifier:   06:6E:6E:39:01:18:3B:4F:33:8A:89:F3:BD:69:91:CD:07:D7:6D:26
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer:       /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial:       01A0CB228BBC126874332CC5C8A0292A6DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 22:00:33 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:33 +0000
Files and hashes:         1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: lQj6FnYl4AygNgEHkwU2XdIK5qjTmQpJtafoKutAJ9A=)
                          2: LNdrd32mL4o15Pj5JcWmBKR2Q2I.roa (hash: hLgQdqBGoRGoVp14crN6xd2B0BaQtU78dsrL7Dz6tOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:8b:bc:12:68:74:33:2c:c5:c8:a0:29:2a:6d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
        Validity
            Not Before: Sep 22 22:00:33 2026 GMT
            Not After : Sep 23 22:00:33 2026 GMT
        Subject: CN=066e6e3901183b4f338a89f3bd6991cd07d76d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:44:7f:a0:44:42:64:8f:0f:3e:15:31:9a:
                    a0:12:9c:0a:2c:2b:77:cb:a7:0e:f4:05:aa:68:3b:
                    ea:cf:c1:84:a8:79:41:2a:d6:7a:de:66:a0:66:f2:
                    f7:bc:bf:51:c8:79:85:ed:f7:77:08:c6:d4:50:e9:
                    35:6d:a5:08:ad:88:19:cd:80:cf:ff:01:47:81:3b:
                    99:97:e1:65:84:89:bb:8e:4c:4a:a4:17:fc:55:7e:
                    2f:88:4e:9e:cc:27:a9:3f:11:7e:c1:78:af:47:24:
                    64:c7:af:29:c4:4e:f8:5f:b8:c1:f3:4c:74:07:36:
                    60:66:19:d3:5c:19:25:48:02:7f:b6:bb:6a:41:cb:
                    a8:f5:7f:35:42:63:75:ef:15:51:aa:22:88:41:da:
                    4f:02:11:d3:6a:5e:1c:60:5a:89:87:5e:ab:df:67:
                    d5:03:72:65:5d:b7:63:51:7c:c4:f7:03:d9:73:68:
                    92:30:49:13:43:87:3c:ae:7d:4a:cc:ee:a1:38:8c:
                    7d:26:89:37:00:21:07:3d:29:96:9b:37:52:48:1c:
                    38:ad:86:82:5b:6d:b1:0e:80:c0:d8:56:0e:80:38:
                    f5:fd:f6:74:08:b8:32:f9:ac:71:e6:f3:6c:19:a4:
                    6b:80:c5:15:c0:08:87:3e:79:a6:94:ab:6b:e9:2b:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:6E:39:01:18:3B:4F:33:8A:89:F3:BD:69:91:CD:07:D7:6D:26
            X509v3 Authority Key Identifier:
                keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2a:87:8d:6f:7e:20:3e:b8:e6:8e:50:c0:af:86:a9:b0:a7:
         6a:00:00:b3:93:04:95:48:56:7e:2b:02:5f:c9:4b:10:35:c7:
         87:92:6c:7b:20:19:4e:fc:6d:c4:ed:2a:40:d8:bc:80:4c:c7:
         8e:92:65:f6:ee:2a:01:6e:a8:ac:fb:e4:8d:6b:d7:c9:03:fc:
         db:dc:9d:a9:52:fe:a2:3b:26:37:dc:ed:2d:41:0d:8b:b5:dd:
         08:27:53:bc:44:3e:59:ec:9b:b7:d8:e0:74:8f:ea:7a:2e:e2:
         f0:26:59:fc:07:2b:45:26:d9:0c:77:dc:07:71:27:31:0c:c8:
         45:6b:92:e2:ca:36:ec:bf:b5:09:aa:12:60:d3:f1:36:75:24:
         19:bd:c9:ff:55:12:7c:ed:19:ff:23:44:3c:7e:0c:94:21:60:
         b2:fe:84:48:8d:1d:9a:98:41:fa:1d:4f:cd:42:d5:07:01:ca:
         aa:78:66:38:9e:8a:ed:86:10:11:b5:3f:7d:7f:38:35:e4:53:
         5d:1b:14:68:ff:c8:4e:04:a4:91:39:71:d6:5c:49:25:75:c1:
         5e:e3:c4:04:db:55:75:0f:8f:1a:da:57:ee:70:20:65:92:af:
         3e:99:ed:8e:d0:db:fd:c5:e1:5e:a9:c7:db:36:cd:91:62:16:
         89:a4:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:40:25 2026 by rpki-client