Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          t32/zuCjNoZkLlRZS4RuwrbQZlr8TMyh3ufUfz1jD7k=
Subject key identifier:   9D:D6:99:EF:D1:11:A2:BE:C7:AE:21:C1:4A:BC:D0:AA:E7:A2:3E:EE
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       01A0C0680D9971AB6E4D749221EBF1309D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          1A6B
Signing time:             Sun 20 Sep 2026 20:00:39 +0000
Manifest this update:     Sun 20 Sep 2026 20:00:39 +0000
Manifest next update:     Mon 21 Sep 2026 20:00:39 +0000
Files and hashes:         1: 8z842irPUI8EAcdgem6-OTXhKlE.roa (hash: HK9+peK6bA6qvniuZHkI3MKhAoqJRMXPjQN3NjLDd4Q=)
                          2: C-eRdGJheWWO-BQH20gVo6-55lU.roa (hash: AbD58rM5EB/Q++PaApU6j4w5JzUDMVH5itkiJf48ScE=)
                          3: nfbSVsYj14X3ZfSgLBVMUYnsOIo.asa (hash: s6nrdvhUBgHrfgOiWy7ToxqlDwGipII3LxQu2o1H4zI=)
                          4: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: vrGrHLGCjHG4ZLZp8iCbOr/JvKkidomhzsqNUD4Gtys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:68:0d:99:71:ab:6e:4d:74:92:21:eb:f1:30:9d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Sep 20 20:00:39 2026 GMT
            Not After : Sep 21 20:00:39 2026 GMT
        Subject: CN=9dd699efd111a2bec7ae21c14abcd0aae7a23eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:e4:b6:d5:a9:b5:79:f2:47:bb:a7:7f:26:
                    6f:63:fd:63:01:70:dc:48:5c:d8:e6:13:15:f3:b2:
                    83:b4:c0:8d:55:b3:f9:7e:bc:3d:4d:5c:5e:90:75:
                    96:9a:fd:c5:81:a6:dd:1d:20:16:8c:ee:bb:30:94:
                    9a:da:6f:d8:08:67:9b:e6:05:54:cd:d5:d9:70:46:
                    ac:44:52:89:33:c4:51:6c:1a:55:06:a3:af:7e:50:
                    f0:87:34:48:2d:07:42:5a:57:6b:0b:be:5f:22:fc:
                    c3:c3:d5:44:3e:3a:71:a3:5b:8b:67:ed:96:f2:25:
                    2d:2c:42:2b:aa:fe:1b:49:a7:c9:61:75:8c:3e:8f:
                    e8:92:f7:66:b8:03:85:ee:db:c8:ae:80:b9:be:59:
                    ef:63:ac:fc:d1:89:4b:1a:aa:23:40:e4:f4:a8:4e:
                    81:ee:89:c7:df:40:2a:95:d6:56:85:16:b5:e5:1b:
                    6f:f7:a9:06:d0:e5:01:03:ac:63:1a:f8:eb:1a:a9:
                    cf:d7:75:de:de:eb:0f:f9:d2:97:59:a2:5b:45:89:
                    b6:a2:21:5e:32:9e:fc:6a:f8:b3:b9:8f:93:3c:60:
                    e8:1c:89:5a:7a:48:bb:32:73:36:2f:8b:62:5d:1b:
                    e9:5e:bb:77:cf:b0:02:f7:f6:d0:2e:83:54:a0:01:
                    3f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:99:EF:D1:11:A2:BE:C7:AE:21:C1:4A:BC:D0:AA:E7:A2:3E:EE
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:00:fb:f0:71:16:6e:83:54:bc:00:c2:ee:74:1d:0c:54:
         e7:ab:71:6b:e4:3e:90:35:93:79:69:97:8c:ac:79:0d:1f:c2:
         e9:7c:50:ac:5c:39:b2:ab:1c:5a:e2:5c:6f:9c:9a:03:56:da:
         02:a1:15:80:39:d7:93:43:b8:d2:27:44:c9:b0:ea:4b:51:c1:
         0a:07:7a:d0:df:55:85:c2:39:8a:db:a5:c7:a1:c9:35:45:f8:
         07:94:53:34:50:2a:dc:15:89:b8:52:12:75:7b:eb:9a:f9:53:
         b6:2a:58:10:8f:21:19:fc:18:1f:0a:d5:19:50:59:e1:e3:be:
         93:67:73:23:72:66:da:85:24:40:b2:16:e4:f3:ef:b7:bf:f3:
         5e:f7:f3:44:b4:fa:2d:c3:6b:83:72:82:63:dc:43:6c:bb:80:
         d5:43:61:82:88:fb:b9:b5:82:db:63:a4:8d:74:6b:c0:3b:c6:
         79:bf:a5:df:c6:32:37:c2:e2:d9:33:ac:34:0d:f0:7d:ec:1e:
         eb:f8:f4:94:b0:f7:07:0c:42:de:d3:99:42:13:72:f6:75:dd:
         0e:ee:be:94:87:fc:ba:95:06:a5:f9:36:f8:d0:67:30:4b:20:
         fa:a2:fe:45:55:9f:f9:5c:b5:47:1d:07:a1:05:93:64:8a:3b:
         da:c9:09:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:22:02 2026 by rpki-client