Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File:                     6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier:          GbTNxVPMWYqUYqZf7ZkJGw3D+4xWoZdtyi4nNtjuXuM=
Subject key identifier:   0C:7C:0F:0D:FF:37:C3:DB:19:B8:17:4A:A9:40:18:AA:5F:81:FA:81
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer:       /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial:       01A0DA28BA6A177EA1EBB60FF581ACC84143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number:          083B
Signing time:             Fri 25 Sep 2026 20:01:37 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:37 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:37 +0000
Files and hashes:         1: 1-hCFLvXnlcGeRkLLraBxfeqwVKQ.roa (hash: yaa7MHl2uq4KHtwM7wFgaYaK3uWGCIuI9HybZXAG2wM=)
                          2: 3Ez-EhZpn71NbxDAUA0jy4ec8G8.asa (hash: caKymZGkDDUuzDgk4rI9CXZLSDx0iBS4U0dsvSmEljQ=)
                          3: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: 3L+KidTv1P7Qv2UHy6ksB0Nvoj4ZtThLd3ffqWgNysU=)
                          4: C8ER0RRJQnuzfF0-8I_ZWFmJWH4.roa (hash: YzvZzOnFDMIuCSDyv65Ylm05a00Y7llux3gDDzFYJ0w=)
                          5: EQk94cHvnErnoie7u844D3sVCWo.roa (hash: H4OWSOagFUNX4MuWTQWafvSfmnsnQWIg36VdYvJq/wA=)
                          6: NN0QHkAo8YjbrqzfVegC-uPDydo.roa (hash: LNKR2uGp+5Bgg5S1vn+NiLyxeC2w80ohFJfAfQHeysY=)
                          7: X-_TS1I4t-DVqUxoc-khUSm_viU.roa (hash: ODLd3VbptYoQMKlYYBjJpRqUDy9+T6ytXSUAIjxuWLg=)
                          8: k4uRfVLkiFx02imsmzFdIo0Ou9I.roa (hash: 9rPMDuoX5kSVG70I/Za6IhaLgJW41gakMpsQjx7kJlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:ba:6a:17:7e:a1:eb:b6:0f:f5:81:ac:c8:41:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
        Validity
            Not Before: Sep 25 20:01:37 2026 GMT
            Not After : Sep 26 20:01:37 2026 GMT
        Subject: CN=0c7c0f0dff37c3db19b8174aa94018aa5f81fa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:78:27:9e:50:ec:31:81:0f:eb:74:9e:b1:
                    7e:39:41:d8:0d:94:44:01:4f:69:be:9e:8d:d3:dc:
                    6a:a0:34:78:da:cb:9f:ea:39:d5:d4:d2:b7:44:25:
                    c6:7e:3d:03:7e:46:9e:4e:08:da:d1:30:33:95:bc:
                    28:c6:cf:f9:2e:97:8b:47:f4:48:f3:3d:2a:5f:51:
                    6a:5c:ea:d5:99:fb:54:12:c2:fd:a8:1a:79:5e:d7:
                    0a:52:de:d6:33:1d:9c:8c:52:33:82:d4:30:66:fd:
                    ee:5e:5b:1e:33:ba:fa:da:50:69:12:f9:e6:cf:49:
                    1b:30:f1:5f:9e:40:8f:56:15:39:4d:07:0d:b5:b7:
                    03:b3:c5:ef:a9:e3:05:da:bf:15:10:19:10:27:f8:
                    3b:87:1c:3d:2e:1e:46:a9:22:57:05:4c:e8:80:b9:
                    f8:c5:e9:ff:58:1a:e6:55:c8:ff:78:15:08:fd:78:
                    32:95:56:03:d0:2b:b7:8c:42:89:d7:89:d5:44:c8:
                    07:6e:26:a3:7a:70:bb:ab:33:22:1a:f0:6b:a3:1d:
                    36:e5:af:33:ac:62:35:c3:8b:6b:6b:85:69:10:d6:
                    28:4d:26:2a:33:9a:4a:d8:ec:28:60:88:bb:a5:a9:
                    be:81:60:17:52:06:c6:37:18:15:bb:c9:8a:1d:5e:
                    6e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7C:0F:0D:FF:37:C3:DB:19:B8:17:4A:A9:40:18:AA:5F:81:FA:81
            X509v3 Authority Key Identifier:
                keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:89:a3:5e:a6:c7:88:97:64:fb:fc:a0:23:6e:eb:e1:09:
         3b:a4:ce:14:02:2b:4c:18:9e:18:1d:2a:e4:93:90:25:ed:2a:
         08:54:82:e3:7f:25:dd:c3:49:0a:cd:3c:4f:66:c5:c1:8f:e8:
         90:26:a1:89:41:eb:b6:46:aa:ed:a3:b0:c3:4b:4e:30:2d:d6:
         4f:21:b2:bb:aa:68:ae:f8:ae:51:bf:c4:a8:cd:8c:84:c5:f2:
         6d:8d:e7:8c:07:df:15:b4:ac:db:27:99:f0:4b:f2:e2:72:06:
         40:54:60:dd:86:5b:3a:03:81:c6:93:1d:38:4b:8c:2b:55:e9:
         f1:48:ab:ce:18:4b:b7:11:52:02:07:8e:29:f2:57:1d:47:c8:
         33:c7:b4:fe:38:52:32:a8:c2:40:0b:07:e8:69:c5:6d:a2:ad:
         f0:19:68:fd:25:33:b8:93:80:fa:90:98:b2:54:cd:e7:a8:77:
         32:2c:ca:00:e5:7a:b2:cf:bc:b6:5f:4f:7a:70:cc:96:62:44:
         bd:2a:47:1b:8e:dd:c4:09:8c:88:a6:38:bb:78:8a:55:f0:9c:
         07:f0:c7:5a:f7:31:07:dd:99:3c:c8:ba:a6:37:ad:64:e9:58:
         11:6e:ac:c2:89:16:e2:06:e1:85:19:7d:46:6e:ed:fc:7c:b4:
         be:69:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:36:26 2026 by rpki-client