Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          1VjFjxgiOCWZCzXMHdMBMzt5MJZdIDjM4Sz0K5i7jPw=
Subject key identifier:   23:D2:EF:AE:C9:7F:C3:7D:44:16:51:3E:1E:9B:F8:21:FE:2B:1B:8A
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       01A0C58E5A137515F986B7BEA9CB9D723D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          1A68
Signing time:             Mon 21 Sep 2026 20:00:35 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:35 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:35 +0000
Files and hashes:         1: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: Zvl+zApmQKbCqyvo1C5hvvL13W16oAXFhIUeiQ/J/l4=)
                          2: OZ-4bdLigPBsZcaqqgq1vun0WQw.roa (hash: pGYKvg2Oo9KoFiiz7qQh+48XYCnScT9nFS878Hx3KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:5a:13:75:15:f9:86:b7:be:a9:cb:9d:72:3d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Sep 21 20:00:35 2026 GMT
            Not After : Sep 22 20:00:35 2026 GMT
        Subject: CN=23d2efaec97fc37d4416513e1e9bf821fe2b1b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:fe:e2:98:96:a2:9d:c3:a6:74:2c:c8:51:
                    51:1f:83:b7:b1:12:fb:4f:37:51:9f:69:09:7a:2e:
                    d6:50:fb:ca:32:60:a7:c8:d4:0e:63:89:db:ff:11:
                    fa:34:8b:e1:17:a9:51:75:bf:e7:90:ce:29:9a:c4:
                    bc:74:d2:de:69:f8:a8:33:99:32:12:89:f3:d1:a7:
                    b8:73:ec:dc:1b:99:16:28:4b:fc:ed:77:e7:95:50:
                    66:11:2e:92:64:4b:fb:83:e5:c1:4b:41:0b:50:e3:
                    0c:e5:20:c7:40:47:ea:78:be:2b:19:c1:f4:c4:22:
                    38:83:04:27:1a:80:24:87:f8:b6:a2:f5:e9:48:33:
                    0b:a4:ee:67:74:ca:51:01:b8:e4:46:54:78:a4:57:
                    c3:c5:ba:ed:62:5d:7d:17:c4:94:8b:a7:dc:7e:70:
                    5b:57:3c:12:11:26:1a:2c:f2:b7:cd:ba:9d:72:f2:
                    59:71:81:18:54:ba:3c:62:53:75:c3:6c:c4:0a:a3:
                    58:3e:21:a5:0d:5a:5a:b3:d9:13:a3:5c:e4:ad:bd:
                    51:49:21:78:9d:55:ee:f1:15:20:e8:6a:5a:05:a3:
                    e9:a4:19:8a:7d:71:d6:91:d9:e9:12:7c:66:23:a9:
                    68:8d:96:8d:e5:00:0a:80:1d:c5:a0:37:24:6d:bc:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D2:EF:AE:C9:7F:C3:7D:44:16:51:3E:1E:9B:F8:21:FE:2B:1B:8A
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c8:b4:f5:10:b9:42:49:43:f6:a0:43:94:fa:52:d9:39:ea:
         e4:38:7e:c1:d9:26:35:02:f6:36:57:2b:de:7b:5b:92:c0:39:
         b7:f7:a8:da:cd:30:b7:f0:13:6e:b9:78:d3:eb:9d:2e:dc:ef:
         2a:4f:24:77:56:41:64:35:8f:c0:74:93:3f:92:cc:af:1b:dc:
         1b:2d:9d:e2:24:3e:ac:2a:43:36:1a:d1:7d:7d:0b:9b:c2:be:
         42:ed:b3:9a:ff:f1:2d:3d:6d:2b:ef:83:8f:42:3c:b9:73:54:
         3b:ff:40:78:7b:be:da:54:70:53:15:d6:7d:9c:bc:e1:6a:6f:
         4c:1d:94:59:c0:3a:9b:4d:eb:0a:a8:d1:ca:f6:74:b8:39:75:
         68:fc:35:ba:91:1c:8d:89:a0:8a:fa:26:40:ef:8d:7c:c7:fa:
         9d:15:f1:33:17:1f:16:61:a1:1e:7a:4c:ec:12:ff:48:35:31:
         23:df:20:f9:b7:ef:0a:29:3a:f5:69:72:64:33:e6:21:35:e1:
         df:f5:7d:83:c4:e4:c7:d3:04:c0:a3:22:c0:82:f4:4e:70:92:
         7c:71:17:ae:d1:35:6e:b6:e7:92:39:e6:dd:1b:43:78:51:de:
         f5:1f:e5:d0:97:c2:44:5c:d3:34:11:b3:0f:ea:46:31:2a:76:
         18:7e:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:08:39 2026 by rpki-client