Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File:                     6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier:          HrMzPxbPKP/UR/JoCjyCF6PzGh11OMB44jb7YeoWxjw=
Subject key identifier:   2F:4F:09:9B:0E:51:B6:AE:81:5D:7C:43:88:8C:10:E8:0C:5C:FE:D8
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer:       /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial:       01A0C10CE48FEB5F35A9CD43D63E6BF130FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number:          0C9C
Signing time:             Sun 20 Sep 2026 23:00:42 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:42 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:42 +0000
Files and hashes:         1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: muPJAWzTYY9P6UzQaaLIHNODvYydmY68RJ+CtFEWMV8=)
                          2: cmKY5ceisIdSEDxZAHQoFXS37F0.roa (hash: sNf/iuxeatsIfNnR4y3DdWxX9LCuZ9ar0ao5hSS62EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0c:e4:8f:eb:5f:35:a9:cd:43:d6:3e:6b:f1:30:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
        Validity
            Not Before: Sep 20 23:00:42 2026 GMT
            Not After : Sep 21 23:00:42 2026 GMT
        Subject: CN=2f4f099b0e51b6ae815d7c43888c10e80c5cfed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:b4:16:9c:54:ae:11:54:c2:49:af:d2:93:
                    9b:a5:68:b8:8c:e5:35:9a:22:bf:1b:8b:09:d1:23:
                    c6:1e:82:aa:bb:d6:06:be:37:1b:40:50:8e:0e:3a:
                    3b:b4:21:d4:20:0c:59:24:6c:3b:0e:cb:16:c4:54:
                    a3:17:c3:6b:5f:37:7d:0a:24:9d:2d:51:6f:d0:54:
                    de:6c:98:47:cd:fc:ac:6e:6f:31:24:89:bf:3b:21:
                    fe:12:01:ce:b8:3f:f1:af:71:f3:ed:7a:9d:53:fe:
                    6d:78:be:d8:22:64:64:45:e0:7e:d4:40:ac:c4:24:
                    ac:6d:fc:f2:9b:f0:37:a3:f3:73:3b:fc:44:34:0a:
                    ef:56:ae:03:f2:4d:c9:eb:70:f0:d0:6f:a5:cd:4a:
                    a2:7e:eb:21:9a:f2:f5:31:7e:fa:3b:49:67:39:53:
                    47:60:fb:a0:53:ee:df:fa:a1:f6:97:7d:f5:8f:33:
                    42:57:95:62:51:02:56:dd:cc:a1:f6:fa:3c:c7:98:
                    c0:98:45:80:59:04:93:98:9b:75:16:16:21:d3:04:
                    9e:5c:c3:b2:5e:95:e9:33:47:67:d7:9e:74:39:e0:
                    80:41:77:d7:ac:c6:90:03:22:f6:18:27:dd:3d:37:
                    01:93:3d:6c:c2:8e:93:50:30:94:9c:01:0e:87:ea:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4F:09:9B:0E:51:B6:AE:81:5D:7C:43:88:8C:10:E8:0C:5C:FE:D8
            X509v3 Authority Key Identifier:
                keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:79:1f:4d:e1:0d:ad:9a:63:79:f0:e2:2e:ee:1b:23:a0:b5:
         24:99:5f:c3:45:8c:de:5f:12:71:d5:4e:cb:71:41:d4:19:85:
         f7:50:63:3c:db:79:45:d2:26:1a:f6:15:fb:0e:65:da:bd:9e:
         23:a9:b7:02:8a:eb:b6:51:bd:db:46:67:29:b6:1e:fc:46:d5:
         ae:48:3a:54:ad:02:86:eb:46:b7:54:ef:c5:29:45:b0:be:88:
         e7:71:61:27:58:9b:e7:f3:33:8e:90:a8:71:4f:22:ad:5c:cc:
         97:f8:6e:99:5d:a4:86:d1:07:aa:1e:e3:0b:78:c1:ad:92:64:
         78:b9:5b:53:6c:2e:6a:df:6b:34:95:da:89:71:02:f4:d8:95:
         26:1d:e1:44:43:36:d5:f9:16:7f:84:de:cf:76:3d:3b:0f:1d:
         1b:cb:c3:59:4b:b9:9b:69:23:71:0a:04:35:23:18:f4:6c:3e:
         cd:16:cc:44:20:ac:a6:12:3d:89:d4:e3:8f:72:5d:96:e7:b2:
         5d:84:d3:96:ea:33:48:8d:d0:f5:8c:f1:ef:31:75:f4:f9:5e:
         45:f4:05:ad:d8:7b:e1:3b:c7:2a:38:17:05:bc:36:2d:49:7e:
         77:2f:e0:7a:35:75:8c:79:eb:cc:46:51:bd:0b:b0:00:32:8e:
         57:ed:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:44:31 2026 by rpki-client