Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File:                     r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier:          I/WH9K+LkkC7vxqfPkTo7ZNgUzubvbvLdtasACmorwA=
Subject key identifier:   94:2F:90:01:64:35:50:8A:5C:36:F0:62:51:4F:55:61:2D:D1:89:6F
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer:       /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial:       01A0E663977A3FEDD82B4DDEB1B438360C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number:          15D4
Signing time:             Mon 28 Sep 2026 05:01:21 +0000
Manifest this update:     Mon 28 Sep 2026 05:01:21 +0000
Manifest next update:     Tue 29 Sep 2026 05:01:21 +0000
Files and hashes:         1: 8VoV6D_eegqIBHZanaVQhQ_BcA0.roa (hash: BR+EO4ahbvoTRogEluDEGsMqIHtTB8hdFQ6Pgx2wNhw=)
                          2: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: R2Lb+Bq3huIAqd0+6VW9x5X6g9lptOV//VVInk7hnyg=)
                          3: sG9W1Xy_sx6TaJNJJ2tAauKaFb4.roa (hash: 2TT3GLZDtqOpSaUq6isrPNnlWIbuaybJDZfYdXkAT/w=)
                          4: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (hash: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:63:97:7a:3f:ed:d8:2b:4d:de:b1:b4:38:36:0c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
        Validity
            Not Before: Sep 28 05:01:21 2026 GMT
            Not After : Sep 29 05:01:21 2026 GMT
        Subject: CN=942f90016435508a5c36f062514f55612dd1896f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:44:03:40:b2:59:97:52:11:05:05:17:a2:a1:
                    1b:6d:bc:35:6a:06:66:ce:70:c3:82:5a:23:08:01:
                    ce:3a:a1:94:54:68:1c:7b:c5:4e:4d:d0:e2:7a:53:
                    11:78:07:79:3f:63:40:95:44:a2:aa:3a:f1:70:dd:
                    26:2f:fa:27:49:51:38:89:65:a8:d8:41:90:b7:ec:
                    04:a1:ff:b0:bc:e7:65:ed:c2:c5:3e:fa:f6:4f:98:
                    aa:4c:b9:39:e5:2f:13:69:a7:c5:a7:65:ca:9f:10:
                    16:16:d9:00:f1:dc:be:3a:b3:a9:88:b3:95:cb:9a:
                    e0:31:53:7b:26:b4:4a:b0:96:10:cd:18:67:73:14:
                    cc:71:81:46:6e:1d:06:51:97:b3:b8:05:9f:af:90:
                    13:c6:92:0d:e1:4a:16:df:53:70:a4:4f:37:4e:90:
                    58:82:67:f6:b7:23:98:be:83:22:50:57:d5:1c:77:
                    45:05:52:34:7f:68:0e:84:23:2e:5b:e4:56:b1:ee:
                    87:a1:91:ca:40:2a:58:93:3a:48:1d:1c:2a:cf:b8:
                    c9:d1:ac:9f:4f:24:4e:e3:3b:fe:89:c6:b8:e6:f6:
                    20:64:f6:9e:7c:aa:04:89:7a:c7:53:c8:52:51:82:
                    b0:a5:12:73:b1:47:d9:ba:0b:85:20:91:dd:87:a9:
                    1f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:90:01:64:35:50:8A:5C:36:F0:62:51:4F:55:61:2D:D1:89:6F
            X509v3 Authority Key Identifier:
                keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:b2:ef:6d:8b:ca:86:6c:b2:de:2a:5d:98:58:88:34:e2:
         f4:b6:c1:09:09:b5:e4:55:42:08:81:c4:0e:2e:50:40:5a:03:
         7d:44:13:7f:ab:8a:d0:4d:cc:b4:25:c3:ef:97:5f:79:b7:c4:
         0d:8e:67:eb:3d:99:15:42:a6:87:92:e0:1a:22:60:9c:71:22:
         bc:7b:3c:a1:a6:f6:ea:99:63:45:5a:b0:33:d8:a2:0b:9e:79:
         6b:39:1e:4d:10:60:a9:8c:30:95:40:08:ef:44:02:c4:b2:dc:
         a5:53:83:59:0b:0e:2c:81:73:f1:5c:24:74:86:2c:3c:a2:0c:
         d6:c3:0f:82:5e:bb:4c:e0:a2:de:ab:cf:b9:b1:4f:6d:de:b8:
         f3:2c:a0:98:23:5b:39:ad:c3:94:55:c2:bf:59:12:e3:6f:78:
         be:56:75:6e:e6:2f:a3:9f:1f:f3:62:a6:93:e6:84:9d:e1:a3:
         d2:d2:db:53:a4:ee:9a:28:5e:5f:b8:b1:a7:cd:86:4d:f3:11:
         4c:30:0c:c6:4b:fb:9a:40:45:3e:01:e5:6e:35:91:73:32:23:
         7c:45:c8:c8:7d:9b:5b:de:83:29:4b:02:85:c7:94:86:b7:5e:
         ad:d2:35:c9:50:7c:71:d0:d9:16:da:ca:0f:46:f8:d9:c2:37:
         23:75:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:23:31 2026 by rpki-client