Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          2N8UqkDlN31BS9oOk/XHqb9YzqOEYITchXbU/EAcZUQ=
Subject key identifier:   32:35:38:7D:8F:0D:C6:FA:40:BB:0E:8A:4B:4E:42:EA:CC:87:F8:3A
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       01A0C28DD66BF7BC7EAC4CD77E51D4120B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0E57
Signing time:             Mon 21 Sep 2026 06:01:10 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:10 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:10 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: vqxyieabzoQh7uw9Pcq0A3jdWrysfrQh2Wkr++GTASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:d6:6b:f7:bc:7e:ac:4c:d7:7e:51:d4:12:0b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Sep 21 06:01:10 2026 GMT
            Not After : Sep 22 06:01:10 2026 GMT
        Subject: CN=3235387d8f0dc6fa40bb0e8a4b4e42eacc87f83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:0d:3c:94:db:f9:d0:4c:8a:ea:49:08:91:
                    08:c9:bb:37:da:e1:bb:ba:43:f4:f6:9f:b2:a2:52:
                    11:05:c2:9c:da:ec:72:87:dc:f2:38:cb:eb:0c:1d:
                    9e:d8:33:9b:89:29:a2:65:9a:90:2c:f6:96:3f:18:
                    35:6e:c5:8b:8a:22:54:2d:3b:40:41:d6:e3:58:da:
                    48:16:ea:ee:70:04:26:c1:a9:b7:df:db:71:4c:6f:
                    e7:ef:84:8f:3e:a2:30:23:97:7a:c3:dd:61:d4:8a:
                    ef:8c:40:c0:2a:00:86:6f:1f:fd:58:e2:73:b8:89:
                    99:0f:1d:7a:ac:93:92:f0:5b:9e:26:a7:54:72:ca:
                    52:10:ae:da:9f:5e:c9:0e:44:d4:aa:84:eb:76:42:
                    da:78:0a:b1:e0:b0:6a:10:c2:80:21:84:0a:cd:9a:
                    92:cf:6a:8b:3c:24:02:ba:b1:00:58:13:42:d9:63:
                    11:10:68:5b:76:74:a7:c2:20:7a:f6:47:89:ef:1e:
                    8b:b1:53:fe:1a:c7:90:d2:9b:c2:87:00:16:98:c6:
                    98:81:92:01:c5:ef:4d:cd:13:07:1d:7b:fd:09:f1:
                    bc:1b:ab:5a:21:23:76:3c:7b:8b:e4:97:69:ad:a4:
                    49:8e:0f:f2:52:63:b0:96:63:cc:51:f2:a5:41:c1:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:35:38:7D:8F:0D:C6:FA:40:BB:0E:8A:4B:4E:42:EA:CC:87:F8:3A
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:9a:51:3f:48:83:cf:7f:5f:cc:d4:71:3a:cf:5c:59:a3:
         95:f2:7c:59:a2:d2:af:94:6a:26:98:dc:da:a7:94:e5:e7:a6:
         03:7d:f1:ac:9f:2c:22:57:e3:43:0d:4f:9e:46:05:ea:de:c1:
         6f:ad:1a:44:a6:ca:e6:04:45:95:d5:f0:12:da:95:4e:3b:a0:
         49:d1:be:27:b0:58:c8:85:24:fc:2c:d2:ba:13:e1:88:72:ae:
         09:f0:d6:8d:a2:f1:b8:65:3c:bc:78:83:1e:5c:aa:49:07:0c:
         bf:04:12:5b:ab:f2:ab:00:43:4a:dd:bb:d6:fc:6f:35:9c:30:
         1f:43:f7:9c:e6:41:e6:be:ef:88:17:4a:0b:f9:ab:e8:d6:67:
         16:ea:20:ba:b5:fa:79:d0:c9:3c:9a:be:85:25:3d:13:65:d1:
         c5:eb:13:fb:6c:8b:e0:06:8a:00:18:26:cc:9f:81:1a:9f:99:
         ee:ac:c0:fe:40:95:72:ee:e2:27:4e:a7:e9:c5:3d:91:31:ad:
         ad:fa:32:1c:94:bf:64:18:f4:a9:cf:05:b2:9e:ce:27:9a:24:
         2f:ec:7b:1d:f8:27:21:4b:ea:2e:14:c0:1e:54:25:7c:5a:b8:
         e6:3d:6f:12:56:ff:7f:99:61:f4:2a:c7:fc:f5:dc:49:80:bc:
         23:a8:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:50 2026 by rpki-client