Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
File:                     0oFXratWiKzjVi4u_eWb61rhCKs.mft (raw, json)
Hash identifier:          JmqAhlayPKoCLmOAb/yuD9KEJIcDeZ+i45XcT3MTgl0=
Subject key identifier:   78:C3:26:00:60:15:04:81:AA:7F:F5:77:39:24:F2:F3:3C:94:F4:DA
Authority key identifier: D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB
Certificate issuer:       /CN=d28157adab5688ace3562e2efde59beb5ae108ab
Certificate serial:       01A0D2010383AFFCCCEDB73B5BABC8839A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:01:16 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:16 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:16 +0000
Files and hashes:         1: 0oFXratWiKzjVi4u_eWb61rhCKs.crl (hash: pPVqx4Gee4RlXoiUQQ/1a9QbqCHSn9H78TbtV40NMN8=)
                          2: Nt0mcB8A0d__UowWBxdSbWsaTd4.roa (hash: QVTiG0+ASuYbCz7n6L1CCp82a69UF3h6/hvCYlBXr9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:03:83:af:fc:cc:ed:b7:3b:5b:ab:c8:83:9a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28157adab5688ace3562e2efde59beb5ae108ab
        Validity
            Not Before: Sep 24 06:01:16 2026 GMT
            Not After : Sep 25 06:01:16 2026 GMT
        Subject: CN=78c3260060150481aa7ff5773924f2f33c94f4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:2f:0c:3e:2e:70:6c:64:3f:d4:61:e1:ba:
                    e3:a5:aa:c2:59:dd:65:c2:e7:bb:15:eb:8f:e8:69:
                    64:a6:8e:5e:9e:ce:56:fb:45:9d:78:c2:2b:3e:77:
                    14:c5:f5:5d:7f:ca:ef:e7:ae:86:26:6d:95:c8:d3:
                    af:d9:bd:8b:c3:6b:d4:30:cd:a6:dd:b5:1e:82:6d:
                    c5:50:63:fc:b4:cb:64:38:ee:df:e1:fc:b8:aa:34:
                    79:98:ef:4c:aa:27:f7:41:bd:9b:78:a5:0d:ba:74:
                    ed:13:af:06:d7:12:67:94:69:24:a8:85:ff:82:15:
                    11:34:31:c7:d5:87:0b:8b:5c:de:7d:04:55:fe:c8:
                    31:b7:7a:6b:06:28:54:f1:c9:11:c8:23:e5:b8:da:
                    39:eb:55:1b:e4:0a:ae:e2:4b:ca:b2:c9:64:da:4d:
                    c3:55:9c:e9:d5:f5:ad:98:08:6b:a1:69:36:16:b6:
                    b7:0e:be:37:aa:51:13:9f:e4:f5:0f:30:e1:0f:5b:
                    46:a8:f1:2a:19:e2:47:fa:ce:46:68:d2:3e:a3:84:
                    82:95:fc:4b:72:4b:bc:60:bb:14:f6:31:12:90:c0:
                    14:1c:87:d8:e7:f5:85:73:13:45:67:88:0e:e3:f3:
                    c1:27:f7:cc:b6:62:d0:29:a3:47:67:fb:60:61:f5:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C3:26:00:60:15:04:81:AA:7F:F5:77:39:24:F2:F3:3C:94:F4:DA
            X509v3 Authority Key Identifier:
                keyid:D2:81:57:AD:AB:56:88:AC:E3:56:2E:2E:FD:E5:9B:EB:5A:E1:08:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oFXratWiKzjVi4u_eWb61rhCKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/0oFXratWiKzjVi4u_eWb61rhCKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:85:e0:b0:c8:70:30:ba:36:62:21:ae:e6:22:20:a1:08:b5:
         01:f4:3f:ac:cc:5e:3f:4a:49:31:03:35:3d:14:93:ee:41:b5:
         53:a4:6b:c6:d2:91:ed:af:ce:64:7b:c3:2c:9f:d2:98:1f:e7:
         cd:ef:c0:03:d2:da:d4:1a:4c:b1:ee:a0:c8:9c:76:f6:e1:90:
         f4:fd:61:8b:a0:00:e6:3c:5d:3d:09:c7:8a:2c:dd:47:e7:46:
         b0:21:f3:10:a5:4f:a7:1c:e6:05:86:5a:65:88:14:d9:7c:47:
         36:98:43:74:7d:f4:81:d2:b6:a6:a5:5b:7d:a0:71:85:4a:77:
         c4:eb:68:8f:a6:90:ea:ad:f7:d1:26:ac:65:32:e0:b4:57:d9:
         3c:14:6b:cd:42:9d:c6:3f:be:6b:dd:23:43:4b:f6:05:9f:a5:
         cc:be:91:c2:3a:32:d8:e1:7d:ce:19:e1:48:f3:b1:e5:ef:55:
         0e:4e:70:67:bd:08:a4:98:a3:13:36:f6:3c:c1:1d:2b:43:ec:
         4e:b3:25:58:3f:d8:c2:87:15:1f:3c:e0:f2:97:d2:18:9a:27:
         c2:c8:95:99:2e:79:48:f0:87:8d:bf:22:b9:75:4d:e3:47:84:
         9f:33:b3:33:8a:c3:12:2a:c6:27:26:9c:b2:e8:e5:5c:01:b5:
         83:f6:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:14:42 2026 by rpki-client