Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File:                     6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier:          vWpGyfZHZVnVBV6x6aP3q9ypqdOPZguLpqkb+zpKJh0=
Subject key identifier:   4A:92:30:AD:73:7D:84:BB:CC:0D:5D:B0:3A:25:9D:62:9F:71:7C:9C
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer:       /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial:       01A0BD9E1AA43757D72BA7125A9DE0D6DDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number:          1365
Signing time:             Sun 20 Sep 2026 07:00:50 +0000
Manifest this update:     Sun 20 Sep 2026 07:00:50 +0000
Manifest next update:     Mon 21 Sep 2026 07:00:50 +0000
Files and hashes:         1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: zsOfqEpjNgoES2gDCK2YgCDh/i+VxrC4Qr67GtrQIIY=)
                          2: SEhILHygTvrckViFuTbzVqD8wFo.roa (hash: YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=)
                          3: mb-aWZ5_d3ag789UTUZQ7IaflbA.roa (hash: hsap3kqEKhxhExKW9nXN0i5BJCJKmqUW77rfHPyUXL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9e:1a:a4:37:57:d7:2b:a7:12:5a:9d:e0:d6:dd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
        Validity
            Not Before: Sep 20 07:00:50 2026 GMT
            Not After : Sep 21 07:00:50 2026 GMT
        Subject: CN=4a9230ad737d84bbcc0d5db03a259d629f717c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:2e:fa:03:73:46:b4:84:69:01:fd:09:ed:
                    4a:75:de:3c:96:a9:33:c2:c7:24:0c:fe:4f:8f:f2:
                    a8:e1:0b:8f:3f:46:b4:37:64:e4:37:f6:10:7c:89:
                    6e:05:8e:8a:40:8a:74:c2:56:8e:64:ba:09:28:1c:
                    5f:a0:9d:f1:72:1a:84:8f:96:45:b4:f6:63:16:b4:
                    de:e5:3d:e3:59:26:08:42:4c:fb:f0:f3:ab:59:73:
                    14:ee:c4:b8:c1:ea:fa:79:b2:63:27:42:fb:8b:aa:
                    87:bb:34:cf:b0:8c:fb:fc:95:f1:a3:a3:44:0d:ae:
                    71:ff:45:db:27:4b:f8:d9:88:a4:92:81:e4:7f:31:
                    10:45:f2:17:75:63:16:15:22:22:d1:62:98:bb:7e:
                    f1:23:69:bd:82:b9:c5:bd:33:3c:c7:3b:01:e0:b4:
                    df:1c:44:ff:cc:19:53:4e:98:b1:93:ee:40:a0:45:
                    16:b0:87:05:58:d0:ba:a0:0f:fe:f5:a8:a1:76:8b:
                    2c:87:12:c2:0e:65:08:bb:0d:75:20:1c:5c:37:8a:
                    97:90:5a:55:2b:1c:01:a1:a6:bd:a7:b7:a6:3c:d5:
                    7e:20:76:47:e1:09:52:06:ce:7e:80:3b:f9:3d:ec:
                    6e:d1:09:08:b3:98:03:e9:ef:06:cd:52:13:0b:25:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:92:30:AD:73:7D:84:BB:CC:0D:5D:B0:3A:25:9D:62:9F:71:7C:9C
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:ae:7f:91:fb:c0:21:dc:02:42:9a:f3:20:5e:8b:ff:73:
         86:c4:cf:31:c5:14:82:9b:b4:c1:08:6f:ae:ce:ed:cd:de:ee:
         9a:c1:ee:52:00:d5:c6:ab:a1:69:97:e7:25:31:ca:e8:74:9e:
         82:20:4f:42:bb:a1:c0:fa:a4:8a:35:b0:aa:5e:0f:d6:1e:1a:
         de:d3:76:54:60:7b:6e:99:8c:16:9a:27:f1:45:a7:84:a4:50:
         94:96:0a:03:a6:20:bc:64:6e:ee:41:54:90:9c:d0:95:fb:04:
         90:a9:fb:8b:ba:52:5d:f5:b0:eb:ff:90:d3:fa:d8:2d:39:a8:
         cd:7a:61:fd:c1:d3:98:30:c8:f4:84:b4:6f:54:84:35:c6:d5:
         df:06:e5:98:b5:5c:fe:14:96:9e:e5:21:c1:a0:20:b1:54:29:
         53:e5:07:27:71:b3:91:34:04:39:b7:76:29:8d:aa:3c:b2:48:
         de:7e:d4:df:a3:73:e7:5d:6d:93:e3:01:a0:bd:05:f3:66:bb:
         c4:b2:a6:bf:49:bf:35:ae:67:ba:75:a8:82:f8:d9:8c:c1:3c:
         73:3f:a4:61:f0:ff:f4:df:3b:5f:7f:7d:b8:7b:9b:19:88:90:
         2b:a5:57:4f:60:c1:8f:58:be:18:59:9a:64:a4:13:6f:d7:7d:
         2c:4f:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:22:09 2026 by rpki-client