Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          7hvUDfNaHKJvaz9yiGEUH+UyiV8gXl32khCFRIfu1nA=
Subject key identifier:   06:00:E6:36:79:B4:B1:B9:B2:9C:1A:50:EC:D1:09:8F:25:F9:59:95
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       01A0D983AF78569BC2CEB57444B0474393F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          09A9
Signing time:             Fri 25 Sep 2026 17:01:21 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:21 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:21 +0000
Files and hashes:         1: 8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa (hash: CzDXuVFvOpgIjJyo8JK5OTAHeeCyIkIfuyxNLXuiD4w=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: nLrZt45sCxJ76ErvfkuwnjMNuqOi+ZQWqhjmUNFlbpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:af:78:56:9b:c2:ce:b5:74:44:b0:47:43:93:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Sep 25 17:01:21 2026 GMT
            Not After : Sep 26 17:01:21 2026 GMT
        Subject: CN=0600e63679b4b1b9b29c1a50ecd1098f25f95995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:5d:e8:cf:b0:a9:99:2e:bd:8f:aa:2f:ce:
                    70:a6:ff:ae:00:0d:d5:59:ea:f2:02:14:a5:e2:34:
                    7e:fc:d0:67:28:ab:e8:9a:42:4c:6d:98:88:22:fe:
                    a9:ff:2e:0e:7c:05:b1:b1:3f:76:9c:10:ed:9d:1c:
                    07:1b:cd:5b:15:25:b9:2f:bf:c9:4c:94:dd:3c:2e:
                    80:c3:c8:43:83:0e:56:2b:a6:4f:7f:66:bc:4d:29:
                    0c:9d:77:f0:f3:7d:a1:28:48:2d:4a:ae:8b:2a:cd:
                    0c:40:6e:8b:fd:5e:31:ee:8d:2a:d9:1c:8c:4c:a7:
                    78:f3:d8:be:14:9b:1c:9d:09:b3:94:a8:37:96:09:
                    63:c5:27:3d:30:ef:31:f2:bd:0e:c3:b9:b0:7e:7d:
                    97:30:8d:3b:df:e3:b6:28:7f:50:db:68:43:40:1f:
                    88:44:57:c3:d5:e8:7e:d9:4a:bb:37:83:22:ce:b1:
                    9e:c7:a4:40:42:4a:68:44:46:ea:41:e1:e8:56:aa:
                    d3:0d:ce:9b:46:be:cb:86:f4:fc:9f:67:96:bb:88:
                    59:ca:df:5d:79:88:01:d9:3e:c2:14:fe:7a:ea:53:
                    53:28:22:8c:42:ae:ec:2d:05:63:13:76:75:44:fe:
                    7e:d5:20:11:fe:fd:57:7d:fa:62:3c:f3:f8:c7:77:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:00:E6:36:79:B4:B1:B9:B2:9C:1A:50:EC:D1:09:8F:25:F9:59:95
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a6:84:b2:bf:67:11:81:1d:1c:41:02:76:31:90:d3:7c:ae:
         ed:13:93:94:02:9d:04:10:22:28:ee:2f:85:ab:05:30:c4:5d:
         b5:73:e1:2e:04:96:cd:76:4d:cf:cc:5c:3d:ed:79:fc:18:58:
         a7:f5:6c:2a:e0:3a:75:ad:ed:0a:38:7f:f3:93:4d:aa:3b:ef:
         9f:35:9b:ed:fc:25:e4:75:7b:16:5b:10:43:21:cb:88:27:d0:
         a0:b6:7e:19:b7:3b:9e:16:03:2b:b7:66:5b:e8:8e:3b:06:21:
         22:87:90:95:78:96:8e:f2:71:c6:6c:86:cd:dd:7a:42:d8:98:
         ec:7a:7c:38:db:4f:7f:43:4e:6a:9e:6d:61:25:60:09:58:a7:
         a5:e4:a7:f8:7b:e2:c2:5d:a5:f4:43:08:13:25:44:35:ee:b1:
         9d:52:d0:80:df:04:18:d9:cb:2f:b2:9f:dc:63:7d:1a:57:c7:
         ae:05:ae:30:ed:62:4d:93:9b:65:ea:4d:f1:1b:b4:65:d0:52:
         68:1d:ad:85:a4:92:3d:55:16:4c:72:35:e1:3e:e7:f0:1e:20:
         c0:1c:53:8b:cf:4e:03:f3:ab:3f:5e:e7:90:87:55:da:82:33:
         3d:dc:e7:ff:50:55:b6:0d:fc:bb:5f:6f:d4:28:c1:4a:d5:86:
         21:be:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:59:46 2026 by rpki-client