Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
File:                     6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft (raw, json)
Hash identifier:          suE2w1dcEVPLKooJtYTttEvVKSYsLk23LMENYf3imBA=
Subject key identifier:   3E:F6:F9:47:8B:3B:86:60:21:20:29:41:FB:95:88:5A:DC:05:33:61
Authority key identifier: E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C
Certificate issuer:       /CN=e81ceffa7305fa6678897aedbbbd2164df008a9c
Certificate serial:       01A0DC1755CA71A0BD34D0EE41C2D2C68CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
Manifest number:          0378
Signing time:             Sat 26 Sep 2026 05:01:51 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:51 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:51 +0000
Files and hashes:         1: 6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl (hash: clFIPUB4wN3FMPE6F3eaugAr3rYcyuG5eK5FnMo3YpI=)
                          2: z0UfyMAo_7LR-LH3Jw8zf8UbLD0.asa (hash: QGDgWeH1kEe3DX+Xml/09V0FNXz92WKITaFTUaHDCkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:55:ca:71:a0:bd:34:d0:ee:41:c2:d2:c6:8c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81ceffa7305fa6678897aedbbbd2164df008a9c
        Validity
            Not Before: Sep 26 05:01:51 2026 GMT
            Not After : Sep 27 05:01:51 2026 GMT
        Subject: CN=3ef6f9478b3b866021202941fb95885adc053361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:f8:0e:20:b1:de:14:a9:85:a6:71:48:35:
                    35:ac:22:5c:88:3b:25:bb:25:8b:a7:34:be:fa:de:
                    db:31:87:a6:21:0f:2d:8c:82:7d:10:f7:5a:9c:83:
                    05:e6:22:72:07:9f:43:b1:87:a2:a7:18:87:1d:80:
                    88:c4:50:c8:d8:a6:26:f0:50:fb:62:fc:60:37:cb:
                    95:54:f5:c2:ac:4b:f7:fb:9e:c8:51:3b:fe:2c:2a:
                    7a:b1:36:65:87:0a:1c:81:fc:f3:2e:a7:2e:60:d4:
                    ca:b9:3f:4d:5a:87:8a:c7:e9:f4:2e:33:9a:62:5a:
                    98:ea:55:1d:e6:03:18:8d:31:81:ff:43:cb:fb:80:
                    32:48:c2:b6:bf:b6:20:e9:c4:42:3c:38:07:8e:e7:
                    67:68:10:4c:c2:19:bc:4f:0f:b5:f9:8a:2e:51:69:
                    d2:d1:81:58:9a:ee:9e:ca:1f:66:13:83:37:81:34:
                    84:51:3b:0c:6a:ab:27:19:0d:25:7e:e9:09:9c:72:
                    f5:a2:9b:5e:fd:c4:35:98:d4:2e:78:14:ea:aa:ca:
                    40:eb:0a:f3:b0:1c:3c:e1:81:03:2f:f7:f2:1a:6f:
                    2a:b4:65:2b:6b:1e:60:12:e4:9c:40:66:b0:f0:bf:
                    4e:f0:6d:25:e5:32:6e:e1:38:29:2b:de:0a:89:0f:
                    6d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F6:F9:47:8B:3B:86:60:21:20:29:41:FB:95:88:5A:DC:05:33:61
            X509v3 Authority Key Identifier:
                keyid:E8:1C:EF:FA:73:05:FA:66:78:89:7A:ED:BB:BD:21:64:DF:00:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a29d17-b598-4427-ba68-2aadc8631f2a/1/6Bzv-nMF-mZ4iXrtu70hZN8Aipw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:18:c1:ed:b4:92:27:e5:20:3a:49:71:fa:81:e1:fe:f8:87:
         f2:c8:5f:a1:5f:82:0a:54:86:89:e8:df:9c:eb:f5:64:7f:5c:
         da:85:d6:2c:26:58:a0:bd:5f:4b:3d:11:cc:be:7d:9a:5e:be:
         ae:23:22:b7:37:f0:0b:c7:b2:25:08:fc:e3:ba:df:f9:55:b0:
         45:ce:b3:df:b2:0c:c5:d7:49:ac:52:11:24:51:13:3a:f4:fa:
         e3:eb:2d:fc:11:df:d4:bc:17:cf:4d:3b:02:d7:1e:87:ad:2c:
         f1:a8:56:f1:3c:0b:cc:f2:24:bc:85:0a:a9:7a:0d:fd:fc:73:
         ba:d2:6b:0b:9b:40:2b:c6:25:d9:1f:c8:21:37:97:c9:97:f1:
         42:59:a0:5f:5b:d7:3f:3b:fb:d8:36:21:dd:fa:7f:8d:24:09:
         a3:39:e4:d9:87:f4:60:f2:f9:92:99:21:8a:82:8a:ee:76:71:
         73:c9:75:9e:ce:7e:a7:6a:18:52:e3:79:a8:f3:e8:78:60:73:
         58:c3:28:0c:ff:d6:ca:7e:3b:8d:5a:00:0f:90:b5:f7:60:7d:
         8e:f8:0f:56:6b:51:fb:be:00:be:1d:db:08:29:21:5d:09:82:
         95:52:04:42:b4:ea:a6:31:b8:34:1a:b8:83:bc:be:0d:d7:30:
         6e:66:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:37:56 2026 by rpki-client