Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
File:                     L6XwX5ngJQBApDHSvtyrf4ko6bI.mft (raw, json)
Hash identifier:          WTVpqrCXqB1rvbZN9+/+cxirTFkFtJ3/Kq/3vnbNddo=
Subject key identifier:   F5:EC:8E:29:4B:FC:12:79:3E:78:C3:6B:81:53:D8:E2:F7:3C:A3:FE
Authority key identifier: 2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2
Certificate issuer:       /CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
Certificate serial:       01A0D64C6958A3A77E8AE5F52057B2AC301F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
Manifest number:          19D7
Signing time:             Fri 25 Sep 2026 02:02:06 +0000
Manifest this update:     Fri 25 Sep 2026 02:02:06 +0000
Manifest next update:     Sat 26 Sep 2026 02:02:06 +0000
Files and hashes:         1: 3Td8_KpnCVMIwy0JMauQgrbBuQQ.roa (hash: ABEQh5NopDc0Mx4tEJaetYGzLjPCdMdfeYzfxLmWlSg=)
                          2: L6XwX5ngJQBApDHSvtyrf4ko6bI.crl (hash: Px/RXq462g3RKzEB+B1lHyv/p1qRIRgC67qLSTXtCI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:69:58:a3:a7:7e:8a:e5:f5:20:57:b2:ac:30:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa5f05f99e0250040a431d2bedcab7f8928e9b2
        Validity
            Not Before: Sep 25 02:02:06 2026 GMT
            Not After : Sep 26 02:02:06 2026 GMT
        Subject: CN=f5ec8e294bfc12793e78c36b8153d8e2f73ca3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:91:7b:5b:a8:ba:a2:b7:9a:f0:02:48:e8:
                    37:51:10:d7:9e:03:37:16:32:80:75:ef:07:9c:f3:
                    3a:1f:fa:a1:5a:8d:e1:b7:b0:72:27:af:77:ef:0f:
                    17:82:07:97:5b:02:f2:0c:b3:2c:39:f5:d4:10:d8:
                    e9:84:a4:a2:92:5c:86:81:80:48:f4:59:e7:c3:d3:
                    90:7f:df:89:20:4d:ab:b0:16:cf:83:66:7f:0e:92:
                    e7:6d:b8:d2:5f:ec:1a:a9:ed:82:4b:d2:22:7d:1c:
                    60:cd:7b:ff:a4:59:f7:30:54:fd:e6:25:e3:95:b3:
                    0e:36:6e:76:4d:1d:20:83:6c:51:99:8b:b9:cc:c8:
                    d9:47:d1:67:18:5d:7c:af:4e:ef:79:8d:e0:60:a5:
                    c1:e6:c4:ae:52:40:2a:da:9e:48:ce:b5:24:f0:12:
                    0f:4a:dd:1b:96:09:8a:03:04:41:05:f5:ce:6e:7e:
                    f4:9e:b3:dd:40:36:6f:0b:b7:4a:9c:7a:f1:67:14:
                    8f:95:e7:66:ed:02:33:40:81:1b:1c:be:48:34:75:
                    ff:26:75:64:89:42:57:74:7f:f0:8c:dc:ab:bc:5b:
                    8c:4a:ab:5d:f4:1e:3f:6d:70:a2:b8:e4:f2:17:5b:
                    4a:75:9e:e8:44:d3:10:fc:0f:7c:ab:0d:8d:a1:4e:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EC:8E:29:4B:FC:12:79:3E:78:C3:6B:81:53:D8:E2:F7:3C:A3:FE
            X509v3 Authority Key Identifier:
                keyid:2F:A5:F0:5F:99:E0:25:00:40:A4:31:D2:BE:DC:AB:7F:89:28:E9:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6XwX5ngJQBApDHSvtyrf4ko6bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/dc06bd-e834-405f-8c33-9e5f90538336/1/L6XwX5ngJQBApDHSvtyrf4ko6bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:3f:02:d5:82:a7:92:19:62:53:d7:0a:b4:99:b7:41:73:
         26:ff:e6:0a:3b:6d:7e:b8:d3:de:87:74:89:52:12:cf:00:82:
         ad:cd:b1:6c:04:a7:39:8b:ff:c9:94:9b:76:f9:dc:a6:84:0e:
         de:eb:46:3b:36:c1:de:dd:5e:51:1c:15:52:95:25:83:0a:32:
         6a:59:52:c0:02:0c:91:2f:1a:d3:bf:69:d3:96:b1:46:15:79:
         ce:34:ca:f6:4a:99:22:78:d6:43:21:30:f0:27:c5:92:59:c8:
         0e:a7:2b:ff:35:06:2b:f6:c7:9f:f0:a4:9d:49:1e:3c:53:73:
         1a:37:b5:9c:a8:3b:75:c5:4e:0b:58:df:4d:65:06:c8:c7:74:
         ae:c4:94:02:49:c9:a6:1c:d4:7a:2d:d5:df:71:c1:26:c8:e1:
         f1:f0:e0:19:1e:4a:97:b4:47:98:2e:8e:99:52:d5:04:be:26:
         aa:d2:95:f9:85:32:cd:76:1a:03:24:82:25:93:fd:64:57:5e:
         14:2a:de:6a:01:ad:34:cd:6b:f8:b2:b1:39:78:34:0b:26:51:
         ac:59:cd:f5:6c:f6:3f:0d:a6:67:47:a2:5f:92:84:35:e8:c4:
         11:60:57:73:64:cb:33:a7:4c:11:0f:8c:55:c2:21:fa:e9:36:
         31:29:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:38:15 2026 by rpki-client