Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File:                     Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier:          ZrLXM7AsMRf16M7C858n8QcidTaynsMxPWP2HkIeQcg=
Subject key identifier:   42:2A:25:C5:C6:33:70:28:C3:8D:E2:2C:00:7C:87:09:6F:10:5C:A0
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer:       /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial:       01A0D1C96862664A350DEA099BEF3EB2702A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number:          06D1
Signing time:             Thu 24 Sep 2026 05:00:32 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:32 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:32 +0000
Files and hashes:         1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: 8bZh+mr2NBELKyKhaoxxsXY5Xr8S9sJsmSptNSPFupg=)
                          2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:68:62:66:4a:35:0d:ea:09:9b:ef:3e:b2:70:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
        Validity
            Not Before: Sep 24 05:00:32 2026 GMT
            Not After : Sep 25 05:00:32 2026 GMT
        Subject: CN=422a25c5c6337028c38de22c007c87096f105ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:81:d2:a7:1e:0f:44:48:ca:a4:f4:12:6d:
                    6e:31:f8:d2:8e:2e:7f:07:98:23:65:d0:87:c8:34:
                    9f:af:5d:aa:20:e0:97:0f:78:f7:53:fc:bf:dc:93:
                    c3:62:f0:bd:8c:e6:36:97:c4:5b:c5:19:5b:a3:a0:
                    55:6e:83:1e:3e:3b:63:28:b9:80:77:5f:7a:84:9c:
                    00:f1:15:54:91:64:ea:49:b2:86:07:06:b4:08:bb:
                    76:0f:77:7f:79:cf:e4:41:fe:d8:4b:a3:f3:2e:3f:
                    f4:3b:0f:91:6b:75:63:36:2b:57:10:23:cb:cf:47:
                    27:ee:4a:53:09:7e:66:6a:38:5e:65:75:c1:c5:0e:
                    10:87:61:0c:51:5f:f3:69:e9:fc:bc:1f:fd:97:ba:
                    ab:fb:bd:05:00:8c:56:4a:3e:c3:70:20:ae:3e:15:
                    30:2d:82:3a:24:e3:be:64:03:06:64:32:ea:d5:03:
                    4d:ed:8e:cf:a3:8f:f0:44:cf:21:90:d1:2c:d9:c6:
                    37:2b:76:b3:f7:e1:1d:89:d3:2b:e9:73:15:94:51:
                    d6:b4:5f:9c:92:6a:78:56:1b:f5:49:53:00:c8:98:
                    c2:23:01:e0:f4:7f:ec:65:4c:e4:5a:05:7d:3f:68:
                    ae:32:74:32:56:ad:05:ad:23:d1:84:15:d6:b8:11:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:25:C5:C6:33:70:28:C3:8D:E2:2C:00:7C:87:09:6F:10:5C:A0
            X509v3 Authority Key Identifier:
                keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:80:5d:15:dd:bc:ba:e8:6b:5c:a5:6f:da:4e:ae:52:62:
         8d:94:00:0e:7a:01:5d:0f:1f:e7:d4:b7:ef:36:6c:4f:9e:62:
         8d:69:73:bd:11:fa:ea:3b:4e:7a:01:67:fc:48:b0:50:5e:e3:
         25:90:05:24:ee:e9:43:4c:f0:a3:a2:6a:1e:e1:09:d1:9c:08:
         e6:2a:52:06:32:63:8d:ce:4f:07:18:7b:fa:7e:fe:af:ce:4d:
         ca:3c:ff:3f:93:d7:35:09:f1:e3:01:0b:5b:24:cb:75:59:02:
         d4:a4:e1:97:30:8c:e7:dd:3c:30:af:18:a5:8f:15:4b:37:65:
         2a:14:cf:4e:fc:6d:8d:5f:f6:02:4b:ae:b1:68:a8:35:20:eb:
         cd:62:a6:91:cc:f7:05:be:53:c1:1d:c7:29:80:02:d5:d6:0e:
         e6:4c:9e:8e:45:3b:f2:ba:39:de:45:9d:e3:8a:98:97:93:f6:
         f5:a8:54:0d:ad:26:c0:49:57:78:bf:e4:3f:90:72:a9:81:2b:
         be:dc:59:4e:a6:bb:5a:8b:04:b3:6b:2f:6b:3c:09:0a:98:50:
         87:4c:f3:bb:de:2c:b5:fe:c1:c3:c1:13:c1:51:0a:2e:59:59:
         f7:6b:79:eb:ca:b7:f3:10:f6:b4:f9:9b:d2:18:32:c4:55:98:
         8a:f5:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:57:08 2026 by rpki-client