Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
File:                     6g92KC31MgmljAMC50-Kl8o6_wU.mft (raw, json)
Hash identifier:          OA7OqKGfAgmYKmHMO/Hcrq5iqG82039loN5tLSDZpsM=
Subject key identifier:   18:FF:54:98:81:35:E2:B0:DE:FC:A6:24:CE:C7:95:8F:A3:70:81:A0
Authority key identifier: EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05
Certificate issuer:       /CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
Certificate serial:       01A0C4B2BB336FB96B25FFC657FACC8831C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
Manifest number:          176A
Signing time:             Mon 21 Sep 2026 16:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:42 +0000
Files and hashes:         1: 6g92KC31MgmljAMC50-Kl8o6_wU.crl (hash: 8OF4bNRHxC/jOt2cLstwqX5xLAX1A/gmA2YkgNkRooI=)
                          2: ozz0x0OXpUjt9QlyXfs9KZpHyLU.roa (hash: 9p88oMkfOmCl4BZ4A7v3PATdrJhihjQlrWGyNGhJfyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:bb:33:6f:b9:6b:25:ff:c6:57:fa:cc:88:31:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f76282df53209a58c0302e74f8a97ca3aff05
        Validity
            Not Before: Sep 21 16:00:42 2026 GMT
            Not After : Sep 22 16:00:42 2026 GMT
        Subject: CN=18ff54988135e2b0defca624cec7958fa37081a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:9b:f5:33:07:41:24:ab:26:df:8e:5a:a7:
                    ce:0a:02:aa:81:7c:b9:22:e7:6e:ed:1d:da:f8:48:
                    37:a1:6d:ad:92:df:3a:9e:49:20:27:29:54:7b:55:
                    55:02:1c:a3:b9:c8:59:08:50:e3:2c:7f:4a:8c:d1:
                    1b:b6:66:6a:bf:6e:26:b9:ee:05:2f:55:17:d5:82:
                    68:94:ab:c1:22:c2:7b:f1:50:b0:e1:0a:d2:af:6f:
                    b2:3c:98:cc:7c:a6:3f:af:91:d0:87:3b:aa:62:9e:
                    27:f3:63:45:c5:c4:9a:6f:38:6b:98:3e:04:22:95:
                    63:99:24:63:f8:80:aa:62:b6:2c:f5:51:d2:f0:96:
                    52:2e:d6:e5:7d:4b:5d:8d:e3:5e:84:69:16:ef:e8:
                    87:09:2d:70:09:2b:3a:2a:d9:66:5a:70:0d:1a:60:
                    af:15:e8:78:df:5b:54:ec:40:fb:47:06:bb:4a:01:
                    a1:79:63:f5:06:22:36:81:48:6e:cc:94:11:e8:cc:
                    c0:d7:d6:e0:f8:a4:bf:66:2d:37:b9:b7:35:17:eb:
                    2d:b6:d6:75:b2:bf:fb:74:cc:62:57:9f:a7:3b:73:
                    1e:ec:c5:a3:c2:7a:59:03:64:da:ae:c6:c2:22:27:
                    5d:16:60:44:9f:3f:7f:12:cb:4d:e8:c1:c1:bc:8f:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FF:54:98:81:35:E2:B0:DE:FC:A6:24:CE:C7:95:8F:A3:70:81:A0
            X509v3 Authority Key Identifier:
                keyid:EA:0F:76:28:2D:F5:32:09:A5:8C:03:02:E7:4F:8A:97:CA:3A:FF:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g92KC31MgmljAMC50-Kl8o6_wU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7fa55-5925-4ba9-ad38-be7c81948324/1/6g92KC31MgmljAMC50-Kl8o6_wU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:8f:3f:80:8a:dc:4c:54:dd:52:76:ab:ac:75:f1:0a:4e:
         07:c2:50:4e:1a:ba:ac:d5:8e:2f:41:1e:d3:07:0a:f8:26:16:
         46:e0:44:b1:d6:5f:4a:25:fd:8a:80:a9:41:30:8b:35:3a:8c:
         89:df:5e:50:dc:9b:10:1f:c3:64:a5:f2:fb:d9:41:31:81:15:
         6b:c0:ea:d5:c3:45:25:7b:98:b9:1f:e9:c1:55:24:2a:c0:e1:
         bb:8d:23:05:61:e5:4a:e4:85:c2:46:47:5f:24:0b:fa:cd:bc:
         5f:8f:8c:07:a4:dc:83:71:5d:08:56:72:e4:a3:02:3b:ca:7a:
         76:02:0a:81:b6:28:98:8c:42:60:97:d9:ef:df:e7:0b:2a:41:
         62:4d:15:e5:a1:c5:dd:06:b3:f9:f4:7b:ff:aa:65:26:c7:21:
         c9:80:62:bc:e5:27:7b:99:30:34:2d:9b:af:0c:42:70:43:63:
         a6:4e:ce:b2:0c:b4:f9:b4:7a:4d:ab:52:5e:53:7c:ff:b1:88:
         ea:2f:05:d0:02:46:d0:b6:59:72:c9:10:c1:2c:e1:ac:ff:ab:
         c0:95:e3:02:05:2a:94:c7:6a:eb:b7:43:95:02:b8:46:1a:a1:
         74:c8:3b:69:ac:fe:7a:3b:e9:18:32:75:36:29:ca:b9:c6:d7:
         12:d9:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:19:44 2026 by rpki-client