Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File:                     n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier:          7J06rD2RiO+q4rRLBt8YHOX8Y3SxKRGFzLwl57dS+PU=
Subject key identifier:   DF:34:B0:0B:5D:84:CF:35:D6:9C:F0:72:B3:58:E3:79:5A:29:3A:9A
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer:       /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial:       01A0D872ACC6F5A8F61291514909ECEAD922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number:          1665
Signing time:             Fri 25 Sep 2026 12:03:08 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:08 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:08 +0000
Files and hashes:         1: XF1Nc0TElShdxgSlTTRramDytfo.roa (hash: 2x0djNsK99Aex80NEk4TpsPuhlZgzcphXHvm3HIeB7I=)
                          2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: rMm1O92CLA+eaqfd/G78GxmtDL4RGS8DgwLf2kiRv4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:ac:c6:f5:a8:f6:12:91:51:49:09:ec:ea:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
        Validity
            Not Before: Sep 25 12:03:08 2026 GMT
            Not After : Sep 26 12:03:08 2026 GMT
        Subject: CN=df34b00b5d84cf35d69cf072b358e3795a293a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:66:13:e3:e9:45:a6:63:e0:20:a1:11:57:aa:
                    c0:26:a6:28:a7:0c:92:85:9e:e5:68:d4:d2:85:15:
                    16:7e:04:c6:88:7e:a6:f1:cb:59:e2:a6:eb:82:04:
                    b9:3b:28:a1:92:f2:47:e4:07:f1:fa:26:78:57:8c:
                    2c:78:33:e7:db:f1:5f:9f:5d:a3:1f:91:b9:4a:b6:
                    a7:df:66:30:5d:66:f0:04:29:41:cf:f0:a8:fe:d2:
                    9d:b0:9e:cd:49:69:84:60:bf:30:89:95:f5:17:82:
                    b5:4d:66:86:ed:8f:37:21:38:07:82:b0:ee:9a:71:
                    dc:c7:7a:2f:d9:d1:66:27:ac:ea:33:db:6d:2c:05:
                    8d:0f:af:a5:2a:b5:aa:93:3f:32:ac:90:63:86:e3:
                    67:d1:e5:df:5e:c2:b3:7a:13:30:f6:d2:3f:fd:0f:
                    7e:73:e2:33:fd:80:25:df:c0:3a:3b:c1:9c:e6:88:
                    74:b1:cd:4a:4e:7a:84:c7:ca:97:8a:87:57:66:8b:
                    cd:c1:3d:1d:e9:26:ae:dc:aa:47:fd:26:d3:8a:46:
                    82:15:41:1e:2f:72:1e:56:8c:a0:4a:b2:ac:23:46:
                    16:99:2d:85:e7:f9:55:ff:d3:0e:23:c9:fb:47:67:
                    39:71:5f:05:78:5d:93:30:1d:9a:e7:ef:0d:43:5f:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:34:B0:0B:5D:84:CF:35:D6:9C:F0:72:B3:58:E3:79:5A:29:3A:9A
            X509v3 Authority Key Identifier:
                keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a2:45:7a:b2:cd:af:a0:60:1f:ea:ac:00:04:e0:0a:94:7e:
         76:e5:13:29:a8:57:1b:a5:b0:12:b3:80:26:29:3b:a0:84:d4:
         b7:03:39:76:2e:94:b0:a2:e3:07:20:02:e0:54:ae:5b:26:e7:
         55:94:3a:24:6f:2f:99:95:f0:f1:6e:e9:f9:e5:5e:00:c9:95:
         63:d6:f8:54:18:d5:2e:1e:13:1d:e6:6b:b2:01:4c:6a:bc:c4:
         24:1d:25:f8:af:63:c9:ab:61:3a:f2:5b:63:34:e5:70:ae:47:
         fb:57:50:d8:8d:dc:50:ab:9f:4c:91:be:13:af:91:b5:54:9c:
         f6:59:da:8a:06:71:3e:c8:e7:f6:c3:43:cf:13:4c:75:72:8c:
         44:9a:11:4c:e0:cc:29:46:ca:fd:ae:6f:ce:5b:38:c1:d8:05:
         4f:ae:0c:42:55:58:92:26:15:2d:b0:3f:e0:bc:0b:f7:ed:51:
         1b:68:c3:40:3e:59:b8:bb:d1:43:8f:4a:a4:ca:f0:8c:16:df:
         23:13:10:e6:69:ff:2f:7f:15:e3:ee:f4:a5:7a:c3:9e:ec:f7:
         3e:71:33:78:f3:18:9d:d7:71:11:4d:51:0d:5d:d3:9b:4b:e9:
         55:0e:6d:b9:f8:33:30:ea:ae:e7:75:1c:f5:b0:f8:56:ee:95:
         3a:d4:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:57:41 2026 by rpki-client