Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
File:                     w6VSge-EuxEeM-zHwAiJSP1KjbI.mft (raw, json)
Hash identifier:          VnoU8sDHbPZebsEBbfSx/IPz9iKO1qhOKSH3RgI2M8E=
Subject key identifier:   CF:1F:86:C6:93:9F:CD:39:D9:D6:C7:2E:9B:0C:A8:6B:78:81:6D:08
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       01A0DACD8A61EEACD69270BCB931E349CC14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
Manifest number:          1A74
Signing time:             Fri 25 Sep 2026 23:01:38 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:38 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:38 +0000
Files and hashes:         1: GmCafxAEUvOXy6Xvita-Fy-S--0.roa (hash: Ifx+oHJPGcIANhZeyT+6sYmJnu849Sxqjk3P1GJE7vg=)
                          2: w6VSge-EuxEeM-zHwAiJSP1KjbI.crl (hash: /J69b7lIvFTRAtNixrkeJcXkNOc10+oQOtjI3IuFBi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:8a:61:ee:ac:d6:92:70:bc:b9:31:e3:49:cc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Sep 25 23:01:38 2026 GMT
            Not After : Sep 26 23:01:38 2026 GMT
        Subject: CN=cf1f86c6939fcd39d9d6c72e9b0ca86b78816d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:44:90:bd:ff:f1:f9:4c:db:ac:c0:21:09:
                    8f:41:74:36:d1:2f:d2:b6:fb:95:1b:4f:97:7a:d4:
                    68:b0:67:8a:68:16:b1:3b:5a:ed:70:73:88:87:65:
                    43:2b:fe:59:83:42:a6:07:37:e5:87:84:6d:d5:58:
                    40:19:77:33:36:fe:15:ca:b4:2c:1f:75:ee:00:04:
                    a5:30:79:62:54:50:67:f6:9e:66:6a:67:1b:b7:28:
                    ac:da:97:5f:f0:65:24:35:5f:31:49:e4:e3:e7:60:
                    e5:6f:38:f7:e8:b9:38:04:4b:17:f0:69:35:58:15:
                    71:76:ad:c3:65:03:a1:33:24:5f:e7:f1:20:ad:f8:
                    97:a1:58:ef:c1:8e:09:14:41:f7:7d:0d:a1:03:54:
                    de:d1:a9:4c:dd:fe:eb:93:14:aa:2e:d1:51:b0:57:
                    75:a4:e8:50:4d:96:e1:02:7a:63:34:08:ed:a9:cc:
                    8e:1d:43:0f:ab:1b:2a:2d:6c:fb:fb:a5:5a:33:7e:
                    a9:31:2d:97:86:2b:e4:54:e3:3f:8a:92:d6:ab:1f:
                    7f:2c:76:24:40:d4:3d:7f:47:cf:f2:81:d5:11:fa:
                    76:e4:e2:39:c4:ab:02:1c:52:ae:f7:c4:db:6c:69:
                    d2:d5:02:c2:86:a5:ee:77:3a:32:76:24:cf:20:ea:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:86:C6:93:9F:CD:39:D9:D6:C7:2E:9B:0C:A8:6B:78:81:6D:08
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:dc:f5:f4:7f:68:dd:d0:76:9f:c2:65:cc:fb:1e:3d:61:
         e0:c5:42:4a:8d:80:5f:bd:5a:25:16:9a:95:80:34:07:7d:10:
         ff:86:c7:5d:a8:9d:d4:4e:67:6e:d7:b1:9e:81:36:b0:d1:ec:
         36:44:1d:6a:75:05:66:40:77:d1:13:40:bf:f1:bd:e6:98:fb:
         a7:d6:32:ec:de:63:15:d4:8b:89:9a:72:b5:17:7a:d6:23:40:
         c5:15:17:3f:e5:04:e4:da:7b:df:c2:bf:20:74:f0:d5:04:96:
         4e:05:77:18:53:1d:7c:ba:35:41:60:0b:01:65:48:73:d1:86:
         79:09:42:fd:c4:08:fa:85:14:e7:b3:e8:72:46:5b:15:25:b2:
         2e:ff:44:f1:5b:7a:41:b0:3a:c4:f3:f7:5e:85:7b:79:83:31:
         1a:26:a7:f1:0e:af:6b:95:81:bf:17:ad:bf:84:76:e4:77:b6:
         83:6b:17:ac:86:86:51:f5:d9:85:04:f4:d7:be:d3:dc:47:56:
         96:5b:f1:ce:37:bb:b1:db:2d:c6:48:1b:02:ef:bb:ba:25:54:
         f6:7a:30:ed:b5:e9:16:f2:95:3d:01:d4:82:00:56:86:49:88:
         8f:48:49:2d:6b:4f:c4:c6:ba:41:88:a8:3b:6e:0b:be:bd:71:
         53:84:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:59:50 2026 by rpki-client