Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          YK6X0UUY7Zn9iWjnjLHYpK8wFa5GG72acs28g47ONPk=
Subject key identifier:   4A:1A:32:E5:71:F4:13:DE:90:EB:4A:95:F3:23:4B:84:B4:78:50:DD
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       01A0C331F2CED4A964216DD04C07892F7143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          1ADD
Signing time:             Mon 21 Sep 2026 09:00:25 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:25 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:25 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: iHddJ/AWQih/wICUbGzhXW2IrBpmRMoa1IBgZUeS1SA=)
                          2: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
                          3: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
                          4: HmF9BlW0N9Gf90qlurIxvLh06Qk.roa (hash: ZSkQkLJR9FAk0rQTmxE9Q0nn/fbR18zVkksGDExkMjk=)
                          5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
                          6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
                          7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
                          8: nhhkg_jIxt4rVXWEx9XQblCSEZ4.roa (hash: y1FUEKnJ06vvn88HA1FBYat4W4h49NECAE4Wk6psYL4=)
                          9: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
                          10: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:31:f2:ce:d4:a9:64:21:6d:d0:4c:07:89:2f:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Sep 21 09:00:25 2026 GMT
            Not After : Sep 22 09:00:25 2026 GMT
        Subject: CN=4a1a32e571f413de90eb4a95f3234b84b47850dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:20:f5:3d:54:20:cc:8c:7b:44:23:3f:6e:
                    d3:09:49:a7:3d:e0:79:30:0b:41:8b:72:4d:96:33:
                    51:aa:7d:30:c9:a1:db:e9:87:13:32:4c:da:6d:1d:
                    c9:af:04:9c:00:39:dd:b1:ee:45:3f:d7:a6:75:ae:
                    35:d1:36:22:27:40:99:59:d5:39:f9:6b:7c:53:c6:
                    ac:4b:c1:7e:23:44:aa:cd:41:6b:c0:20:8a:5a:e0:
                    92:22:51:1c:d3:b2:c1:67:be:64:c1:6b:41:c4:c6:
                    96:fd:9c:4e:11:09:e5:36:8d:9b:9c:0f:80:4d:4f:
                    db:9a:f3:c8:aa:86:47:01:3a:7f:ff:8c:53:e3:b5:
                    27:80:f5:1f:9c:d6:dc:85:90:dc:f4:94:db:88:4c:
                    a6:99:e8:2d:81:de:c5:b7:35:4f:4f:d3:b7:e3:80:
                    3b:c9:ca:66:bc:81:e2:d2:5d:51:f7:d5:eb:e3:c1:
                    fd:2b:3b:3b:78:ae:2b:24:b1:79:d6:b4:f5:3b:b4:
                    d7:f8:1a:a0:3c:92:ed:3b:8e:fc:c7:db:35:8d:ad:
                    de:a7:2a:b3:08:de:6c:46:06:7b:a8:60:43:76:13:
                    58:90:8c:21:79:42:e5:e3:4b:f8:59:25:2c:7a:d0:
                    e8:08:7b:8a:ca:90:ae:02:21:9f:4e:58:98:f0:d8:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1A:32:E5:71:F4:13:DE:90:EB:4A:95:F3:23:4B:84:B4:78:50:DD
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:57:ef:40:01:2b:3b:17:fc:39:d3:7a:4f:f3:ca:9e:31:ba:
         db:41:1d:95:43:d2:06:80:4a:a1:3d:7b:d2:8f:3e:03:c0:db:
         8f:c7:9b:91:5d:3c:65:2f:7c:d9:99:a5:27:86:d3:a4:21:44:
         9a:cf:c3:09:cf:94:b0:c3:1f:71:de:10:92:e1:e5:49:61:a6:
         f4:74:6a:7c:45:b3:fd:38:50:54:1f:b7:3f:18:76:1a:eb:80:
         4e:de:ea:64:e2:c6:76:f3:69:9a:4c:6b:88:20:92:bb:c7:d8:
         72:ed:be:f7:7d:47:b6:21:e6:04:f4:17:e0:47:c4:36:f6:90:
         41:fb:61:e4:83:f0:6a:f7:b1:f6:d9:73:a4:c4:0e:f1:3d:a4:
         06:f2:59:82:a9:50:a6:a3:6f:91:95:89:40:93:b4:6b:88:e1:
         5d:38:1f:a4:21:6f:e6:8f:b7:e5:71:a6:63:fe:9a:a0:69:70:
         6b:05:0e:7f:e8:20:7b:b0:2f:92:86:35:a7:a7:80:a5:38:fc:
         7a:2a:b9:91:aa:a0:3a:84:6a:fc:f9:20:a9:21:22:c6:59:bc:
         b2:d4:7e:88:58:2d:a4:1f:ed:bf:e5:6b:dd:4a:4c:31:2d:26:
         ac:27:23:5d:ca:89:f8:1a:c7:58:73:6b:c5:6d:54:54:7b:46:
         d3:67:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:53:05 2026 by rpki-client