Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
File:                     gWsWnRn6OVDRRdWEr6YXAfzatdE.mft (raw, json)
Hash identifier:          zL8W6ZgDqHXbxsPMehllqep3V30rQd0ZsbZWXr6L0M8=
Subject key identifier:   E6:04:63:B6:AA:A6:BD:95:AD:55:E0:B3:21:32:D6:4F:3D:93:A0:45
Authority key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Certificate issuer:       /CN=816b169d19fa3950d145d584afa61701fcdab5d1
Certificate serial:       01A0C669CCEF103E9D03406108938A3A5D72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
Manifest number:          E0
Signing time:             Tue 22 Sep 2026 00:00:17 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:17 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:17 +0000
Files and hashes:         1: NStI2c33ELu1MdgMNr4ASro5yxg.roa (hash: DGIV6y9JcITViqGIDqZJzNdiLNbdNYRRHPqeCBc+BJY=)
                          2: SzV7YXB0I-v32buFZVhcBfuK4b8.roa (hash: 9Bg/sMGFQWNrP6cNVtWMxuP3OzfvHUrPEKBcUfgdp5M=)
                          3: gWsWnRn6OVDRRdWEr6YXAfzatdE.crl (hash: rW1GArTe2j8VGar7UX5JUaC/UhROArS/jza2hY9UBqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:69:cc:ef:10:3e:9d:03:40:61:08:93:8a:3a:5d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b169d19fa3950d145d584afa61701fcdab5d1
        Validity
            Not Before: Sep 22 00:00:17 2026 GMT
            Not After : Sep 23 00:00:17 2026 GMT
        Subject: CN=e60463b6aaa6bd95ad55e0b32132d64f3d93a045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:19:7c:38:c7:40:fb:3d:73:5c:09:35:61:
                    df:47:9d:93:e9:b7:be:d8:10:82:e1:f2:f1:1f:2d:
                    64:d2:29:a6:42:10:3e:23:69:16:6e:dd:bd:11:53:
                    d7:71:2b:9c:b4:82:fa:9d:80:68:28:5a:11:98:d4:
                    a5:af:03:0e:16:af:d3:0c:81:1b:f6:53:f4:02:75:
                    78:b2:0d:88:8c:d1:12:e5:22:3e:a9:3a:b4:93:e0:
                    72:c3:2b:35:7b:38:d7:5c:ce:a4:8f:90:28:c2:34:
                    41:5f:05:4d:82:de:9f:1f:a2:9a:e0:b5:0e:af:4f:
                    fd:6a:70:a8:7d:23:6a:1e:0e:80:3e:ff:08:be:6a:
                    8f:65:97:0d:23:5a:96:dc:d9:24:7b:da:15:89:37:
                    10:ba:d8:f2:de:6d:bb:81:c2:c7:63:b1:85:02:8e:
                    8f:69:aa:80:d3:2e:7a:d7:43:f7:7d:10:98:8e:c1:
                    db:e2:09:72:49:14:7a:96:fa:f9:07:f4:d2:59:8d:
                    cb:ae:c9:c6:09:c3:e1:fb:d6:3f:0a:a3:ad:eb:37:
                    ed:4b:e1:80:2c:81:be:8e:de:48:ff:e0:9c:d7:5f:
                    4c:29:94:e3:4d:90:14:22:ab:88:48:85:a6:f2:43:
                    6e:05:09:02:de:15:01:46:33:14:d2:8c:8d:92:51:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:63:B6:AA:A6:BD:95:AD:55:E0:B3:21:32:D6:4F:3D:93:A0:45
            X509v3 Authority Key Identifier:
                keyid:81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8f:22:07:0e:3c:e1:db:20:d1:00:6e:24:36:40:3e:cc:34:
         ef:d1:a9:d8:e6:a9:40:92:34:9f:93:0d:fc:70:96:99:87:5d:
         29:30:6c:18:b8:6f:06:74:b8:0b:c8:85:12:fd:30:1a:9e:96:
         1c:19:25:84:15:4a:c7:76:cd:4c:fc:5d:5a:27:b3:83:28:8c:
         20:ca:fc:68:f8:f7:5d:04:8b:3e:14:85:99:18:df:94:6c:08:
         46:95:d0:db:fc:a2:8d:24:95:8d:cc:ba:34:06:a6:9a:bc:bd:
         ac:a9:83:5c:13:1f:cf:7e:2b:73:e6:2e:f0:de:33:10:a7:1e:
         ef:07:9b:20:a1:19:fb:93:48:2f:b8:10:a1:4f:c9:03:f8:79:
         b5:05:08:9e:d6:ff:f3:3a:0d:de:f0:fd:6a:76:4a:6e:da:a5:
         f7:d5:ec:e6:22:00:80:58:5b:a4:b6:e8:6c:c9:88:95:87:ba:
         ff:8d:be:2e:e8:54:02:b1:17:0e:88:3f:2b:bc:75:5f:8a:15:
         b7:10:60:4c:c4:49:c0:22:23:ee:09:ad:c1:75:fe:27:85:f2:
         84:bd:40:7e:71:47:a6:8f:f0:e2:a8:e0:25:09:e2:0b:c8:f3:
         3e:c1:24:ca:54:8c:32:21:b3:f5:58:5e:87:e8:48:f8:66:58:
         a4:6a:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:49:41 2026 by rpki-client