Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
File:                     C6XvqmwrvKGf6h_7abLZaQc7lc8.mft (raw, json)
Hash identifier:          XEiQfb9sVvHjU3XF8RKV9UClrt4JYdVm7EEMmzmDWTM=
Subject key identifier:   03:71:80:74:FA:CA:9A:C9:C0:94:27:C0:DC:D9:92:B2:8E:42:54:5B
Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
Certificate issuer:       /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Certificate serial:       01A0CA0FD0396D0AC06DB32B5E430B12158B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
Manifest number:          027B
Signing time:             Tue 22 Sep 2026 17:00:28 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:28 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:28 +0000
Files and hashes:         1: C6XvqmwrvKGf6h_7abLZaQc7lc8.crl (hash: uJAs/VsVhKh+isSYnTcA5aNkD0G2uSvGgFnhXuLuE+o=)
                          2: VCkp9PejXKJX1lKBEBDutAXVriI.roa (hash: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:0f:d0:39:6d:0a:c0:6d:b3:2b:5e:43:0b:12:15:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
        Validity
            Not Before: Sep 22 17:00:28 2026 GMT
            Not After : Sep 23 17:00:28 2026 GMT
        Subject: CN=03718074faca9ac9c09427c0dcd992b28e42545b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:a4:82:63:c5:04:9b:38:80:88:db:74:83:
                    97:56:bc:5e:2b:79:39:9c:4b:4e:ab:94:ab:ab:4d:
                    5f:13:ae:9a:be:11:86:0f:20:63:ad:e9:b0:b7:02:
                    90:32:8b:b6:13:57:10:d1:64:6f:7b:85:7d:93:82:
                    8a:d7:07:ac:9b:c1:7d:7e:b8:ef:ae:27:6e:35:fc:
                    bf:21:83:70:5c:09:38:5c:fd:13:73:4d:b2:bc:b4:
                    cc:51:6f:c1:6b:2d:c8:ff:fa:ea:26:b7:c4:9c:58:
                    7b:99:95:e0:4d:f6:68:6d:95:71:d9:ee:c7:b2:df:
                    bf:ce:b0:1c:f7:db:f0:bc:78:71:91:d3:dc:8a:01:
                    93:9f:8b:42:48:94:d6:91:f5:af:d1:ee:86:c4:ca:
                    19:c9:1f:c7:15:45:80:6a:98:b1:d8:f3:47:87:fc:
                    21:83:12:b6:f9:4e:0e:d1:c8:14:50:ed:a6:a6:d1:
                    b2:05:4a:98:3f:65:b2:c6:0e:16:42:4a:42:c6:b1:
                    db:d5:9e:3a:c1:ea:80:c8:2e:d0:1a:f3:e8:1d:30:
                    35:35:04:31:37:82:6f:6c:84:e5:bd:f8:37:df:9e:
                    63:a6:06:31:05:49:7e:f6:5a:1c:51:69:88:34:15:
                    2e:45:a5:5a:9f:ce:b9:e4:a6:c0:e3:9b:b7:10:7c:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:71:80:74:FA:CA:9A:C9:C0:94:27:C0:DC:D9:92:B2:8E:42:54:5B
            X509v3 Authority Key Identifier:
                keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:07:c0:d2:c7:71:4d:51:24:7e:2a:10:9a:9e:24:7c:fc:2f:
         3c:76:36:4a:e4:28:bb:ce:61:01:76:4e:d4:d2:a6:86:9e:d3:
         22:ab:30:c5:24:07:78:19:98:ff:e3:04:a3:24:2e:52:55:c4:
         6b:cb:0e:40:f3:07:23:dd:61:7b:a6:7c:e5:74:7b:6a:76:55:
         cb:d3:47:da:86:80:38:50:90:f4:35:85:8d:de:f2:7a:1b:90:
         cc:1e:c4:7a:57:40:1c:75:da:f5:ba:df:c4:d6:95:71:22:56:
         29:e1:bc:e7:02:2e:ce:b2:e5:d5:9d:12:f4:94:63:d6:ee:02:
         28:7d:4e:71:03:f0:90:38:b8:02:4a:ca:43:73:f5:2c:fe:93:
         48:fc:5a:8d:73:1c:4d:35:22:a7:5a:d5:c2:63:b0:9d:f9:1e:
         26:38:25:9d:f0:9f:e2:59:4a:13:3e:e5:71:d6:00:11:b5:82:
         20:8c:37:34:1b:ab:64:45:5e:50:16:45:09:cb:2c:8d:6f:cc:
         af:89:74:1e:aa:c5:33:b9:5e:fb:22:41:ec:95:99:ce:29:f2:
         65:72:33:d7:50:97:2f:46:ce:a7:20:8e:2e:2a:78:b8:b1:76:
         15:eb:41:ca:ca:61:42:84:d3:4e:4e:ca:ff:1c:f9:04:5e:4a:
         4e:b6:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:49 2026 by rpki-client