Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
File:                     1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft (raw, json)
Hash identifier:          3zNxqKfaS3zbMR7sjo4SbhbQsGOB90lgtrcvy0fAv1U=
Subject key identifier:   65:E5:BF:B1:AD:04:86:24:48:3E:A0:20:83:BA:95:85:FB:F4:DA:43
Authority key identifier: D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1
Certificate issuer:       /CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
Certificate serial:       01A0D2014AD84D50641D98BF334D87EE0304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:01:34 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:34 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:34 +0000
Files and hashes:         1: 1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl (hash: 2E0R3TyW1zFSUvi2iy3+2xMydmgsBQ8n6QtvEN3yJJw=)
                          2: 8mWPiavSIhHhZrr_OyyIC3ldxIU.roa (hash: 54lDOWiVIqMmT6MqaRlUv+jn9WnmFxvCPORtfhuO2us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:4a:d8:4d:50:64:1d:98:bf:33:4d:87:ee:03:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d465ac3621b226bc6916705bb5b2ea9b56259fc1
        Validity
            Not Before: Sep 24 06:01:34 2026 GMT
            Not After : Sep 25 06:01:34 2026 GMT
        Subject: CN=65e5bfb1ad048624483ea02083ba9585fbf4da43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:4e:83:9c:af:32:29:f4:3d:18:c3:4d:4b:
                    4f:74:e8:e3:b7:74:95:94:02:9f:07:d0:c5:53:d5:
                    53:19:fc:25:9c:52:47:56:33:7b:12:5c:4f:ae:4a:
                    00:46:7b:b7:a4:c8:ba:d4:ff:8e:9b:b3:5a:35:5f:
                    d5:5d:29:3c:24:fd:6b:dc:47:e4:d1:d4:8e:fe:eb:
                    f4:25:1a:57:da:4b:44:b1:86:98:73:b6:1e:b8:e0:
                    e5:4a:2b:e6:21:da:50:38:3e:1d:b9:27:a3:ae:ac:
                    20:58:2d:a7:88:64:4b:1f:e9:16:3f:1d:32:bc:6f:
                    f2:d1:b4:c4:d9:64:2f:67:50:5e:8f:47:a4:e7:22:
                    15:9a:ca:ab:b2:a3:b7:36:16:4f:4f:e4:b8:0f:47:
                    fe:93:8d:bf:51:03:3f:50:19:02:47:93:37:cc:37:
                    4a:fd:d4:20:41:1a:b9:c4:39:74:8e:55:b7:9e:7c:
                    41:47:59:e5:b4:11:f4:e8:b5:12:d3:e8:72:59:36:
                    10:42:ac:9d:03:11:42:47:28:53:44:8b:be:83:a7:
                    2c:f5:b3:76:8c:a3:83:1b:ce:5d:d2:74:86:a9:b9:
                    28:7f:47:2e:d2:47:2f:2f:81:34:6e:af:e1:60:1b:
                    2a:d7:55:0c:73:3c:02:04:a8:ad:0e:b0:b3:c8:48:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E5:BF:B1:AD:04:86:24:48:3E:A0:20:83:BA:95:85:FB:F4:DA:43
            X509v3 Authority Key Identifier:
                keyid:D4:65:AC:36:21:B2:26:BC:69:16:70:5B:B5:B2:EA:9B:56:25:9F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GWsNiGyJrxpFnBbtbLqm1Yln8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/1GWsNiGyJrxpFnBbtbLqm1Yln8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:80:38:bb:42:11:ae:46:ac:40:0d:0e:5f:50:ba:28:48:
         05:92:0f:dd:dc:3a:c2:9c:ec:b1:2c:a7:f7:5a:40:e4:e5:23:
         5f:d7:24:16:be:fe:2e:30:cf:4d:91:0f:e9:58:a1:d6:fa:d9:
         36:74:4f:9f:4a:6e:9e:3f:41:52:f7:2a:78:cf:26:da:d6:20:
         ba:eb:a2:0c:b1:5f:31:53:d5:68:07:f8:a2:60:99:18:48:b0:
         0f:a8:4c:97:3e:96:d7:57:94:07:c2:31:33:2f:ab:db:99:0b:
         c0:f5:2b:84:7f:70:6c:eb:37:49:5d:7a:2a:53:8b:a8:92:e9:
         7b:4e:2c:c0:ce:92:94:c7:86:83:14:47:c2:db:1c:05:e4:72:
         bd:a6:96:1e:77:f5:e3:b7:5a:e7:9c:f2:27:fd:3d:3a:12:c3:
         1e:c3:36:10:48:0e:52:af:ab:d5:2b:4d:6a:d3:5e:27:ff:ca:
         50:c8:c0:cb:56:c9:56:98:cd:0d:b2:f0:3f:a3:74:26:cb:ee:
         e7:32:3c:14:92:02:df:01:4b:a9:7a:b5:83:31:54:15:73:16:
         9e:9e:74:d3:1e:12:62:a1:5a:1b:80:db:af:4d:fe:88:52:25:
         b6:ec:e0:09:11:73:22:e4:f3:ac:fa:aa:8b:3e:07:22:32:19:
         58:33:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:24:46 2026 by rpki-client