Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          XW9z9izhoouBFcJeVoYS59f5u1OnAiuLiRYfBpScfFs=
Subject key identifier:   30:E3:24:76:BC:57:3E:45:1F:C9:7C:81:BD:F0:4F:F7:D5:75:34:28
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       01A0C66B24C038C69D02DAAB81BED82611DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 00:01:45 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:45 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:45 +0000
Files and hashes:         1: 5Iruj7Q04-dIh4ZGTzY2lg5RxnQ.roa (hash: x1HpRiyK6tLqJ4m++Ue3xBke0BVmx3kiw0XUNo5+ScQ=)
                          2: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: 7oLQS18qNekI/z/x6MRRg0nnjCB3AVFW9VbrXz04Vzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6b:24:c0:38:c6:9d:02:da:ab:81:be:d8:26:11:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Sep 22 00:01:45 2026 GMT
            Not After : Sep 23 00:01:45 2026 GMT
        Subject: CN=30e32476bc573e451fc97c81bdf04ff7d5753428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ba:08:60:cb:2f:f5:0c:6d:f6:95:74:1a:1a:
                    ac:1c:35:15:d5:f6:f0:a6:57:98:60:08:d9:49:c4:
                    93:7e:3b:de:3d:9c:cc:68:1b:70:d9:b2:82:2e:5b:
                    a1:18:d8:f8:6d:45:1a:3c:13:65:24:28:e6:85:69:
                    91:ea:64:ad:22:09:50:e4:49:c2:71:2d:d6:7c:d5:
                    cc:a3:0f:53:01:62:f8:f7:63:30:14:d2:f5:65:a4:
                    0b:af:a0:3b:83:27:5e:17:79:e0:88:10:48:eb:ab:
                    60:2a:21:7e:b5:68:28:29:01:39:36:c1:af:85:42:
                    92:b2:19:2e:0b:94:d7:32:ec:34:45:10:a2:5e:52:
                    b7:b1:03:88:e3:a0:e6:df:dc:d6:12:7a:4b:ce:bb:
                    ff:af:ce:65:68:fa:d6:94:2b:68:89:2a:d2:69:72:
                    67:76:e4:a6:06:d8:18:1c:1b:aa:6c:25:dd:c6:fc:
                    35:02:33:87:f8:4f:45:5b:fc:ed:2b:bf:45:74:22:
                    f6:fa:87:cf:82:5c:8f:35:71:16:f2:54:76:e9:e0:
                    04:9d:46:e4:e8:af:7e:f4:1c:c9:60:e5:24:27:f7:
                    ae:7d:70:71:99:1c:75:10:5f:67:b7:63:b5:a5:fe:
                    ba:18:f8:6e:76:23:5f:90:d5:2e:34:9d:85:21:b0:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:24:76:BC:57:3E:45:1F:C9:7C:81:BD:F0:4F:F7:D5:75:34:28
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:55:b9:99:7d:93:02:a2:8f:94:63:3c:a3:bb:57:a1:17:
         51:e8:ce:4d:0c:47:a1:7b:14:b5:0e:1a:50:73:81:ed:fd:1a:
         a7:74:31:0b:6b:fe:c1:6d:f2:7b:bf:88:99:f0:02:68:ae:a6:
         52:0f:42:cd:ad:86:9c:d4:51:7e:55:fe:e0:99:fe:7c:59:6f:
         84:3f:5d:8e:dc:05:c4:cb:50:af:a8:b0:d8:76:88:6e:67:77:
         5f:c5:eb:e7:d3:b4:dc:98:90:7b:d4:c9:a1:58:cf:77:06:04:
         50:6b:39:a1:8e:f3:79:11:c6:41:08:9f:76:a2:52:ed:2a:05:
         82:a8:5b:4e:15:b3:4c:90:41:bd:46:7e:32:01:97:50:20:0a:
         f1:05:8b:47:d9:ad:ad:e0:62:2d:0e:f5:8d:ce:da:5c:71:23:
         d8:ac:ef:ef:fd:c4:18:73:f7:b9:c7:1e:2a:30:96:06:76:c6:
         ff:c9:99:68:28:e4:9c:fe:07:80:8a:4c:89:97:0e:de:a5:ab:
         87:1d:a1:a5:bd:2c:c0:7d:39:cd:01:87:d0:4b:ef:5c:bf:16:
         92:0a:45:fc:1d:c2:34:16:47:99:05:bd:0b:81:58:c2:d3:cb:
         94:c4:a7:4d:f0:f9:88:09:21:28:68:f9:ea:02:58:ad:21:5a:
         c3:73:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:25:21 2026 by rpki-client