Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          pXN4vahvt0F8vy/HalHqO6XmP56TN9GOt/K/TAfXNaQ=
Subject key identifier:   A5:F7:8E:46:1A:52:60:28:8C:9A:0E:85:4E:A5:0D:68:0C:AD:39:11
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       01A0DB71AAA4E6B48A11E80D8EFEDED6E3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          08F2
Signing time:             Sat 26 Sep 2026 02:00:54 +0000
Manifest this update:     Sat 26 Sep 2026 02:00:54 +0000
Manifest next update:     Sun 27 Sep 2026 02:00:54 +0000
Files and hashes:         1: 1-W0WucTf2e7MzRTHEWXyGbOyjKY.roa (hash: HK0T1idnRlHMenIEf+1HtX704o9MA+zk5Uce2Rn+7+s=)
                          2: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: YPOjbl58ZjcBEePvhioTCCP+EaqHOVjRTvTuEkDiSaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:71:aa:a4:e6:b4:8a:11:e8:0d:8e:fe:de:d6:e3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Sep 26 02:00:54 2026 GMT
            Not After : Sep 27 02:00:54 2026 GMT
        Subject: CN=a5f78e461a5260288c9a0e854ea50d680cad3911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:65:92:f7:df:68:ac:b3:20:ce:9f:f8:8b:8f:
                    1e:6e:61:63:b9:ce:de:a9:d1:58:7a:da:ff:a1:cf:
                    dc:72:6f:3f:7d:e1:e8:c0:a7:da:bc:5a:a3:27:19:
                    d4:bd:bc:04:f1:cb:40:d4:38:ec:02:3d:a4:c4:46:
                    04:75:92:ed:d0:37:18:f7:d0:a3:4b:0d:70:23:da:
                    4a:6a:c3:83:bc:04:3f:5a:7f:16:71:50:f7:25:35:
                    a1:fc:aa:f6:ce:e4:87:3b:3f:39:b6:ca:41:f2:ee:
                    0b:02:6a:c1:1b:e3:cd:00:91:5e:e0:60:3f:a6:fc:
                    03:f5:81:3f:98:eb:3a:fe:25:34:20:dc:59:de:8b:
                    57:25:db:f0:81:57:21:94:5b:3b:86:d4:29:ef:c1:
                    16:82:a2:9c:51:03:18:f1:17:f4:c6:df:8d:fd:fa:
                    a6:ba:ec:81:d2:7d:88:c9:bd:c2:c0:7c:7d:f7:06:
                    d8:e7:eb:59:71:27:d8:df:2d:9b:92:d9:e0:f6:f8:
                    c1:0f:e4:6c:62:0b:41:ff:6c:58:b9:e6:b9:2b:c6:
                    03:71:6c:0e:f0:60:13:2d:e7:bb:00:5a:22:ae:bd:
                    64:9c:06:4e:63:69:5e:13:14:9c:3f:fa:97:64:7a:
                    ed:56:bd:20:b6:28:08:c2:d9:8c:66:6a:3d:de:3e:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:8E:46:1A:52:60:28:8C:9A:0E:85:4E:A5:0D:68:0C:AD:39:11
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c7:80:e6:b3:c4:b9:0c:4a:12:24:b5:ca:6f:39:8e:b4:5e:
         1c:d4:0e:fd:02:9b:0c:4f:26:ef:83:83:1c:bd:1e:f0:19:d7:
         23:ee:29:f0:c8:98:00:bd:21:fe:1e:ab:2a:83:ec:b4:0b:9d:
         d7:d9:35:6e:f3:3b:cd:e6:9a:8b:29:8c:12:f3:cf:ec:f3:d8:
         49:c4:13:3f:26:0b:38:a9:4a:9e:54:fb:ae:c2:33:a4:94:83:
         59:a5:78:86:14:a7:e4:42:24:26:75:93:8a:41:61:8f:18:f5:
         28:b0:d2:0d:a9:22:64:cb:a0:36:c8:09:d3:90:ca:8f:1a:3c:
         80:2b:e9:36:1a:b6:21:54:09:04:20:aa:7a:f3:72:9e:f7:67:
         69:dc:ab:2c:b4:36:47:4c:f6:e7:09:bd:8a:68:93:98:55:3c:
         45:60:9f:50:af:80:f3:4b:71:e8:a3:88:9f:05:86:1c:f3:06:
         6e:84:4b:a2:1f:d1:dc:37:21:bc:f4:0a:ab:27:07:53:8a:eb:
         97:be:49:24:ad:3f:5f:f2:20:d9:8a:56:f1:3c:59:c4:62:1e:
         a9:bb:24:0e:cc:d9:34:99:a7:c4:9f:15:16:09:1c:bf:ee:a4:
         c0:00:ed:d7:94:56:73:6a:3d:c0:b3:75:2c:8c:47:21:f2:1c:
         38:e8:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:14:04 2026 by rpki-client