Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          aGUOuGSHvz2xNMmwJC40g7c6p2mkDHtLSzqRWGcsges=
Subject key identifier:   B5:45:74:51:4D:89:0C:E0:B5:F1:6D:49:CF:1A:3A:5D:AF:76:F6:AC
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       01A0C1B15E43E97F3EF43371CA7DE75C4442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          1A8B
Signing time:             Mon 21 Sep 2026 02:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:21 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: sx3RLXSEefTxfwMwXQ2jE4yssPfJy6Mwo8/25Bhkqrk=)
                          2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
                          3: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
                          4: Q185qBCTAslf97Rog3SUyG95EBo.roa (hash: +jTEwCGDvqQHKcWHrPwBJB6gQVTArNQuwOaaAn3R7Fw=)
                          5: oen-QFfHBmIEOP5ttsAYHQc7OEM.roa (hash: M8LjK98wamn1Bf61XvL6iwM/2t8o+aYURFWF4088u4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:5e:43:e9:7f:3e:f4:33:71:ca:7d:e7:5c:44:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: Sep 21 02:00:21 2026 GMT
            Not After : Sep 22 02:00:21 2026 GMT
        Subject: CN=b54574514d890ce0b5f16d49cf1a3a5daf76f6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:de:43:38:96:4c:19:c1:f0:d9:19:bb:be:
                    4c:6d:d4:56:18:4f:fe:4a:9d:ae:56:e3:c7:78:82:
                    8c:6c:6d:86:1c:fb:11:bc:a6:16:4d:7c:81:11:e0:
                    1f:01:9f:8d:06:5f:2a:6c:98:b6:27:d8:6d:c6:dd:
                    f0:fb:3d:c9:d9:17:16:2c:fa:d1:d6:b2:ce:89:1a:
                    fb:ce:45:d6:ef:9a:e6:c1:5d:de:87:11:67:c9:44:
                    97:ba:0c:9d:aa:05:2e:ec:28:8a:ff:37:f8:0a:e8:
                    48:85:37:fa:57:d8:21:f7:fc:45:f2:24:ea:97:2b:
                    2a:21:0c:86:d1:03:59:1c:1a:d6:ac:10:b0:05:03:
                    67:f4:40:1f:ca:10:18:e2:f8:c4:d2:4a:c6:7a:1b:
                    94:89:2e:bb:4a:f3:2b:88:97:74:7a:fd:6e:5d:aa:
                    5d:29:a6:8f:60:cd:4c:2a:52:fd:07:32:23:81:17:
                    94:c6:86:4e:2a:01:3d:2e:a7:bf:ca:47:b1:95:82:
                    22:bb:f5:95:ca:74:8e:4e:07:23:da:f5:fc:3d:05:
                    1a:10:64:c3:26:ba:55:29:cb:41:bc:79:dd:0d:3a:
                    bb:57:1a:bd:8b:14:55:64:e0:47:8a:e7:8c:f1:52:
                    af:e8:9a:90:74:8a:ef:b0:c5:e5:5e:4e:e5:23:3e:
                    a3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:74:51:4D:89:0C:E0:B5:F1:6D:49:CF:1A:3A:5D:AF:76:F6:AC
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bc:1f:8b:02:f2:34:62:f5:19:e8:0c:6d:7d:a6:92:59:1c:
         6d:0c:b8:47:02:12:77:98:34:6f:7f:48:3b:ed:b3:82:df:b8:
         41:16:ae:4a:f1:ec:b5:f9:b6:20:85:7b:75:a5:a7:a0:42:fc:
         74:6d:4c:49:2d:2a:26:f7:d9:08:fe:f3:0a:8e:32:c9:42:d8:
         30:a9:9f:d0:00:7a:11:db:81:9a:6e:ed:67:e5:fb:2e:dd:4a:
         69:13:6a:80:f3:4e:b9:30:38:d2:da:cc:6e:09:73:01:26:9e:
         90:25:a9:7e:13:a9:5a:74:97:80:a4:a2:cb:c3:da:08:0e:90:
         59:38:4f:b6:9b:bc:60:dd:e6:6a:c8:bc:17:67:11:52:ff:3d:
         59:e5:ef:bc:21:53:a0:49:8e:b1:f8:9b:db:31:8f:83:1c:72:
         f2:4e:75:c7:ae:9c:aa:ab:d3:06:a2:1e:47:75:8a:70:27:3c:
         ac:f4:b5:cc:01:64:3a:89:6d:bc:de:82:af:1a:dc:35:8c:3f:
         f4:76:07:d4:b3:84:40:84:8e:6c:74:b5:17:fa:67:97:71:90:
         4f:5f:a0:21:93:c7:e0:ad:ab:51:ac:c6:e7:f0:3d:61:0d:9e:
         4f:e3:2f:12:f8:68:da:cd:5a:a6:c3:c2:f5:c9:dd:79:2f:75:
         15:4d:3d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:51:52 2026 by rpki-client