Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
File:                     6GNg24H1BcXpqbWtEKgcZPSoW9I.mft (raw, json)
Hash identifier:          4qz5UWxdN0P/vkUDz8m6IhTYxEJErtGQj3Ca5pZz5W8=
Subject key identifier:   7D:76:AA:1C:6E:18:F1:92:4A:10:DE:ED:0A:BB:D1:6F:6D:DE:5E:76
Authority key identifier: E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2
Certificate issuer:       /CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
Certificate serial:       01A0DA97044C9780CC676273D3AA0E94977F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
Manifest number:          1A03
Signing time:             Fri 25 Sep 2026 22:02:05 +0000
Manifest this update:     Fri 25 Sep 2026 22:02:05 +0000
Manifest next update:     Sat 26 Sep 2026 22:02:05 +0000
Files and hashes:         1: 6GNg24H1BcXpqbWtEKgcZPSoW9I.crl (hash: pjIqgsyD3jdu+BB+XnAa4oSagyLgcYEgvl4iayP4U7s=)
                          2: m2Z0wBEzN8fscwTDloF7hDYFp-U.roa (hash: RR+TM2qfe7c3hOxq3hLFeEmbYbML3r9sN4F/EITsexg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:97:04:4c:97:80:cc:67:62:73:d3:aa:0e:94:97:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86360db81f505c5e9a9b5ad10a81c64f4a85bd2
        Validity
            Not Before: Sep 25 22:02:05 2026 GMT
            Not After : Sep 26 22:02:05 2026 GMT
        Subject: CN=7d76aa1c6e18f1924a10deed0abbd16f6dde5e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:3e:d1:e6:5c:65:09:1f:45:47:ec:fd:4e:
                    1e:91:97:80:84:c5:ff:d1:29:b0:e8:01:38:89:77:
                    8a:97:5a:6a:53:02:f3:36:3f:61:45:98:96:d4:35:
                    ac:cd:72:09:91:f0:56:56:a8:76:a1:19:c4:0e:6c:
                    04:a3:e9:cb:f7:03:4c:f6:f0:73:70:75:37:64:9f:
                    15:d6:62:fb:b3:91:b8:c5:20:a4:10:ac:92:c1:17:
                    02:c2:7e:86:42:2d:51:31:44:c7:c5:99:00:fe:7c:
                    a7:3c:8e:ff:32:c9:af:87:fd:60:68:9e:1b:1f:cf:
                    ad:ff:67:36:65:f1:18:32:91:93:0c:6e:57:2f:2a:
                    70:11:b7:5f:e9:fa:06:c9:bb:d1:b5:5f:1c:3f:06:
                    42:e8:c6:17:5d:71:98:08:36:21:ff:6b:47:48:f5:
                    74:be:67:72:d9:09:71:9f:ee:7f:ae:18:66:09:18:
                    e8:9c:96:1d:20:0c:cc:19:d0:43:1a:98:84:00:7c:
                    11:92:0b:56:f3:4f:ae:d2:6f:03:0e:55:25:89:4b:
                    51:4b:c7:88:87:86:49:b2:2c:16:25:aa:00:70:fd:
                    c4:4c:a7:31:22:ff:b3:86:21:21:c3:be:fa:84:f0:
                    8c:60:4a:65:cd:b7:a7:a4:3c:5a:00:29:9f:db:57:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:76:AA:1C:6E:18:F1:92:4A:10:DE:ED:0A:BB:D1:6F:6D:DE:5E:76
            X509v3 Authority Key Identifier:
                keyid:E8:63:60:DB:81:F5:05:C5:E9:A9:B5:AD:10:A8:1C:64:F4:A8:5B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GNg24H1BcXpqbWtEKgcZPSoW9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e177f7-6348-4744-ad9c-76189bd4a040/1/6GNg24H1BcXpqbWtEKgcZPSoW9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9d:5d:c2:e2:71:7d:3d:40:3c:74:e6:57:d6:c9:82:51:1e:
         17:c9:a3:3f:cf:55:06:3d:3f:0a:65:3f:3f:e9:3d:19:cb:69:
         93:39:40:9b:12:f9:54:85:f0:35:9a:c7:a4:9e:c0:c9:fb:c6:
         fe:b9:0c:04:69:2e:9c:9f:a4:da:13:99:63:d6:79:bc:2c:3c:
         e0:1c:c1:76:b3:f1:4c:89:be:6e:8c:c1:51:ec:d5:a7:2f:25:
         a5:44:a7:32:a5:89:bc:73:db:1c:12:f6:8b:60:f8:2d:be:3d:
         c3:12:8b:71:8b:37:36:76:bd:4b:eb:c0:6b:ed:08:58:fe:b8:
         2d:aa:b2:8a:45:62:04:50:d2:cc:cf:e0:5c:b4:35:ba:98:f7:
         8b:25:bc:ee:1a:06:f7:8b:dc:76:7d:d4:8d:9a:5e:0e:92:8a:
         07:f1:8f:35:d9:5c:83:ed:5c:43:0b:78:2f:3a:ba:50:b2:a4:
         2e:59:4c:84:f7:b6:85:18:cb:f1:0b:04:e6:a3:33:d9:d9:a7:
         47:93:96:f6:a2:1b:27:4a:40:03:01:aa:1b:a0:fe:7d:c3:be:
         9d:7a:9f:45:7c:93:b3:fd:a8:e2:15:fc:bc:ab:74:30:be:0a:
         f6:40:d5:52:fe:87:f4:5f:cf:8d:73:b4:6f:ad:ce:8c:7f:bf:
         95:f3:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:29:28 2026 by rpki-client