Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          4fq62uDnYjlwcaSypVGmxP0baMJpM8i2r9QglJUGfIE=
Subject key identifier:   8A:0B:97:2A:26:B7:6D:43:71:F8:B3:6F:83:46:3C:AC:47:EB:FE:7C
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       01A0CF6D9CFE564D0E14C100893AA3962618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          1270
Signing time:             Wed 23 Sep 2026 18:01:02 +0000
Manifest this update:     Wed 23 Sep 2026 18:01:02 +0000
Manifest next update:     Thu 24 Sep 2026 18:01:02 +0000
Files and hashes:         1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: ftjg0XaFGqyrV2JBL/RqT+vgtRg65x53kbShY6Mz5bs=)
                          2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
                          3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6d:9c:fe:56:4d:0e:14:c1:00:89:3a:a3:96:26:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Sep 23 18:01:02 2026 GMT
            Not After : Sep 24 18:01:02 2026 GMT
        Subject: CN=8a0b972a26b76d4371f8b36f83463cac47ebfe7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:9f:d2:f2:7f:e7:34:10:0f:d3:1e:a9:12:
                    66:07:4e:b3:4e:40:99:15:bb:32:ff:05:e1:20:ef:
                    aa:5a:4b:3a:b3:99:40:73:37:cf:88:4a:84:35:5e:
                    0c:14:e6:4d:76:3b:6a:07:68:2c:97:2f:8c:a0:cb:
                    d6:52:90:ce:fb:2a:3d:8d:e6:5e:fd:93:95:07:65:
                    3c:c6:2e:54:cd:76:b0:c4:db:17:cf:18:91:7b:97:
                    40:5c:a7:63:b5:74:de:00:62:f3:d3:5b:ed:d6:05:
                    70:0c:82:50:c2:3f:31:1f:27:81:74:cf:a4:49:30:
                    14:29:f5:0b:bc:57:e3:0d:ed:c4:d9:54:b2:4b:23:
                    7b:91:8b:ce:8d:f1:ed:62:83:0a:2c:30:71:dd:ff:
                    95:4a:89:9a:ce:7d:28:2d:4b:dc:1b:18:71:5a:c0:
                    b1:f1:4a:78:0e:77:7a:cd:f7:7a:de:3d:43:b8:a8:
                    55:a0:d6:e7:21:66:f9:c8:71:fe:c5:5b:f7:d1:fb:
                    fd:40:c7:f2:e7:ba:0d:39:e1:7c:02:a8:d7:f6:c8:
                    8a:d4:8b:65:41:c4:1b:c0:68:ff:2b:b9:2f:af:a0:
                    fd:ac:b3:5d:f5:6a:2f:e7:c6:da:02:38:b0:4c:f5:
                    e2:25:0b:b1:81:6a:0b:cd:9f:fe:a4:de:39:62:e1:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:97:2A:26:B7:6D:43:71:F8:B3:6F:83:46:3C:AC:47:EB:FE:7C
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:73:eb:45:d6:0a:d5:5f:3a:b9:78:01:d2:6a:1b:5d:b0:
         75:bb:2a:64:04:5f:c1:92:74:1a:ef:4b:35:0d:0b:a8:2a:ac:
         1b:00:24:75:62:f4:10:3b:63:cc:71:7c:8a:63:21:8e:b1:e1:
         7e:46:ab:75:3a:1b:60:dd:05:81:4d:60:d2:0b:27:e5:84:d2:
         73:24:31:ec:36:b8:91:d1:0e:a5:d4:ae:b7:02:f0:fb:29:0c:
         64:cf:ac:f0:c8:95:26:07:3a:f8:a0:29:31:e5:c9:74:af:9b:
         43:54:be:89:13:c8:b5:e7:d8:0d:b2:6e:57:92:7e:64:fd:ab:
         e6:5f:8b:28:2e:92:7e:ca:b4:fa:36:5d:60:ce:e4:7c:99:ef:
         1e:67:3b:70:b3:18:8a:fc:53:45:10:dd:a6:dd:dc:59:8d:f5:
         b6:13:91:cf:88:0f:40:a8:1c:50:0e:d8:7c:f5:d9:6a:7a:e7:
         ba:dc:90:0f:0c:95:b4:df:95:fe:50:1b:24:01:07:f0:ac:4e:
         14:eb:4e:d3:e9:2b:2b:7b:c1:7b:dc:eb:f6:7f:81:92:71:21:
         30:40:45:15:f5:71:dc:e3:76:19:55:9e:90:86:d5:ea:23:a5:
         e2:dd:1a:34:de:70:e2:00:60:39:d8:48:d7:00:62:85:99:dd:
         91:58:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:30:36 2026 by rpki-client