Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
File:                     6RbcnbTknecbL9CBna6FOusFOwY.mft (raw, json)
Hash identifier:          lCmAItLfHQpeChzBWCYtozGy91uiLehU4kbf+U7uDyc=
Subject key identifier:   2E:97:39:A2:36:9C:E7:D9:6B:99:AF:F6:41:74:23:79:91:65:F4:B1
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Certificate issuer:       /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial:       01A0C2C44568A850FE1FE47F1A1DA8F5B2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
Manifest number:          0D69
Signing time:             Mon 21 Sep 2026 07:00:37 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:37 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:37 +0000
Files and hashes:         1: 6RbcnbTknecbL9CBna6FOusFOwY.crl (hash: nYnRg9+1p3Ux93xHJ6qp0PUeXeSPDtc5erxkgkAeBy0=)
                          2: 7JG0wgwc3Ipwz7qhWdtjieS8I-g.roa (hash: Bf31ERPASMZUPsJ1JNVT6s0KlXLHtYfNo3YFwAiIYd0=)
                          3: TguuQZO9I1_7-VqoQL5wsWb9jPA.roa (hash: sLoYLNBugvAeAbkeqi4GS5CpT4/CERXu2yJ09Zh9oGs=)
                          4: dldtGf8iAqMIc0ytnDvP-eC4mMM.roa (hash: YSxthPkt2JpRD0R9sk5QHtBzuSlu83HWt9XvpioLJ/M=)
                          5: lP0ykif50yA8AG9VfJnhqGB_mS8.roa (hash: ytE6dcjHno16teNpTqPF9DCN/rBWfa+d3ChvXPOe6JY=)
                          6: lgKQY1jrZyDFCiYIeiyZtygDhmg.roa (hash: xAal+frG5vHvILaUbwJvEDBjUYIoE/U1MQ1PZt8g8nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:45:68:a8:50:fe:1f:e4:7f:1a:1d:a8:f5:b2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
        Validity
            Not Before: Sep 21 07:00:37 2026 GMT
            Not After : Sep 22 07:00:37 2026 GMT
        Subject: CN=2e9739a2369ce7d96b99aff6417423799165f4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:fd:6d:7a:b8:db:41:2c:cb:39:80:fb:ff:
                    d8:61:c7:b5:71:e1:06:8b:4d:44:03:c1:2d:29:f1:
                    54:08:39:76:45:41:13:9a:80:9f:d8:d0:4c:c9:cd:
                    77:8d:03:89:3c:2b:1a:8f:ad:6e:47:74:35:db:c2:
                    7e:24:f6:85:bb:fc:9b:91:e0:1d:fb:b9:36:54:49:
                    4b:e7:5a:b9:c5:fe:7e:d1:37:3a:c3:35:dd:92:55:
                    71:58:6b:60:48:37:d6:c8:69:cd:30:20:d9:e7:ff:
                    87:21:78:55:c1:59:cd:80:61:d7:cb:72:8e:f2:eb:
                    f3:b9:51:34:84:b5:b0:63:dd:25:2a:3f:da:5c:04:
                    bc:a6:c2:8c:84:df:9a:81:65:54:33:16:d0:9e:02:
                    76:c4:91:d0:8a:a7:c1:76:03:21:e3:9d:a1:e1:1e:
                    35:9a:b4:94:af:fa:65:de:ef:02:c0:38:dd:8a:03:
                    c2:88:5f:e8:47:d4:bf:c0:8c:e3:52:df:2a:40:e0:
                    31:bb:82:aa:5c:f1:03:5f:3a:ed:1d:98:0d:5f:b8:
                    d4:0c:6a:6c:a6:59:80:dd:a3:5f:f3:d9:f1:63:ba:
                    3b:61:4b:7c:c8:55:3e:40:68:8b:24:17:49:af:9e:
                    ae:83:7e:0c:e2:65:77:96:9b:c6:2f:77:91:20:65:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:39:A2:36:9C:E7:D9:6B:99:AF:F6:41:74:23:79:91:65:F4:B1
            X509v3 Authority Key Identifier:
                keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:aa:87:df:f4:8f:7f:bd:e2:fb:a2:e1:96:7a:d5:6b:d0:3a:
         93:59:6f:94:2e:f3:f8:54:bf:49:22:96:3f:3c:ec:f0:5c:a4:
         41:f2:09:f6:cc:26:c7:b7:04:a6:2f:41:89:53:47:bd:df:ae:
         61:3d:c6:44:be:85:e2:9c:1e:6d:c6:6f:ec:48:a9:20:ac:f1:
         18:fc:1e:47:c0:69:76:31:db:cd:4f:7a:39:e5:a1:9a:28:e9:
         37:5a:ec:4c:6b:e1:38:e9:95:fa:99:48:2e:40:dc:d8:f5:ab:
         d7:15:30:65:29:47:6f:e8:ff:59:c9:63:53:fe:29:a5:11:43:
         5c:8f:8b:27:fa:12:df:8f:2b:7a:f0:02:6d:64:48:2d:3e:2a:
         86:c7:b0:ac:2e:0b:9a:8e:fd:f2:a3:68:c2:ac:bf:0b:37:56:
         3b:43:67:70:ab:e0:f9:2f:6c:5d:de:10:87:85:83:1c:66:7f:
         d6:48:4e:a8:13:1a:44:2e:7f:d8:a2:56:36:68:16:27:9e:54:
         39:a6:09:d2:f3:23:b8:14:d8:30:5f:85:69:69:69:27:22:5d:
         59:77:66:31:03:5d:44:e7:84:b9:da:82:aa:54:fa:f7:06:01:
         22:e7:19:dd:9f:88:41:7c:29:74:3b:d2:d7:cd:7a:98:bd:49:
         ed:96:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:42:11 2026 by rpki-client