Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
File:                     6pDtaEipyh7yAQ5jTOIbbJrd62I.mft (raw, json)
Hash identifier:          zoU7NYoLVc5FNPqvK0Gndq73J+fwYq0Gk5JOe0xsz70=
Subject key identifier:   B4:56:B6:84:94:DF:D8:8C:5B:CA:E2:7C:AD:0B:83:B0:12:B2:25:43
Authority key identifier: EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62
Certificate issuer:       /CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
Certificate serial:       01A0C70E9CDD23498AB06A65820D7FC3C0B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
Manifest number:          0729
Signing time:             Tue 22 Sep 2026 03:00:18 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:18 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:18 +0000
Files and hashes:         1: 6pDtaEipyh7yAQ5jTOIbbJrd62I.crl (hash: SqqNsoWce+quw5RChyBh3gBMrsUlswsKrKo/yJctxqo=)
                          2: IPh_6iVNx496xq8P78NbeC5ann4.roa (hash: p/kpws4dnlRTMpuyDTof3NBBpdQNG/GFmv/G6ZFNtHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:9c:dd:23:49:8a:b0:6a:65:82:0d:7f:c3:c0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea90ed6848a9ca1ef2010e634ce21b6c9addeb62
        Validity
            Not Before: Sep 22 03:00:18 2026 GMT
            Not After : Sep 23 03:00:18 2026 GMT
        Subject: CN=b456b68494dfd88c5bcae27cad0b83b012b22543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:e7:a1:4f:19:42:9c:3c:88:72:cc:6e:d7:
                    22:f5:ef:6a:38:9e:cb:04:29:34:1b:17:4e:d9:94:
                    0c:fa:35:7f:35:83:48:e5:01:24:9b:e1:b3:3c:2e:
                    fa:91:f9:a2:97:2a:49:26:b2:14:50:41:74:65:30:
                    5c:42:e1:5d:c4:bd:5d:39:f1:3a:e1:31:ed:37:77:
                    bc:d5:2e:93:e2:97:c0:a1:0e:c1:69:96:2e:71:35:
                    e2:eb:e9:03:e9:75:64:7a:e8:e3:d2:55:76:15:3d:
                    29:7b:4a:9d:c2:4d:83:3a:d0:0e:74:12:eb:a7:9c:
                    3a:bd:22:65:be:fd:9d:75:1b:0d:9d:07:61:ef:6c:
                    78:fe:1c:ba:fe:c3:c0:a3:2b:84:11:d1:a3:61:e6:
                    1c:0b:7e:46:86:ea:ff:17:60:0d:a3:ed:c0:d9:f8:
                    cd:05:13:b1:bb:6c:a4:62:b2:2b:bf:18:62:5e:e6:
                    87:86:9d:be:c3:d5:f5:ca:5b:b4:bd:bc:bb:0e:d4:
                    f0:b6:b9:df:1e:c8:d2:3e:bd:60:13:77:76:c2:e2:
                    51:2b:b3:2c:95:3f:48:73:24:b0:e6:32:4b:79:a4:
                    77:ef:b2:7b:47:a8:6e:cc:6d:ce:88:76:4a:85:e6:
                    75:69:67:dc:55:e2:0d:d8:c0:02:31:cf:f7:fc:02:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:B6:84:94:DF:D8:8C:5B:CA:E2:7C:AD:0B:83:B0:12:B2:25:43
            X509v3 Authority Key Identifier:
                keyid:EA:90:ED:68:48:A9:CA:1E:F2:01:0E:63:4C:E2:1B:6C:9A:DD:EB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pDtaEipyh7yAQ5jTOIbbJrd62I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9c1e83-e714-4c45-8685-586b6d047878/1/6pDtaEipyh7yAQ5jTOIbbJrd62I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:76:36:af:b2:b2:7c:eb:4f:74:91:7a:68:98:23:7c:1d:
         fc:79:a6:27:c3:41:ab:89:12:cb:80:33:fc:38:08:56:32:5c:
         66:82:c2:f7:1a:12:cc:dc:f1:5d:67:f9:b3:2a:6d:73:0b:6c:
         68:f3:1a:10:13:09:f3:4e:ff:fd:ed:a6:cf:fe:c6:ca:d6:52:
         10:70:42:39:07:c1:8c:10:24:16:d6:f7:a4:0f:c1:6f:fb:1c:
         40:94:54:7a:a2:7c:e8:8e:99:6e:09:b7:74:3c:22:30:7a:b2:
         06:10:29:5e:e8:7e:c5:af:ee:d3:61:12:e4:93:f7:93:c4:c8:
         5d:21:4e:a4:77:1f:59:03:fe:bb:fc:de:9f:e8:25:1b:60:70:
         7a:46:06:2e:03:31:b9:87:4e:71:0c:a4:98:4a:2d:25:fe:a4:
         42:0b:1c:6d:94:21:c0:98:b0:b9:ba:75:32:20:fb:1c:fa:b2:
         3b:f8:7b:b9:c0:8f:e1:45:74:0e:24:a4:c0:e2:13:86:50:0e:
         28:ea:c6:24:4a:73:1d:be:eb:b3:8d:2c:b7:c8:f8:fe:55:ea:
         f6:26:16:22:88:97:e0:c0:c2:22:b8:63:a6:27:b7:e7:30:4d:
         d9:6a:84:b3:69:14:af:1d:ff:3e:55:2f:3e:d8:55:68:ad:0b:
         d0:4a:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:07 2026 by rpki-client