Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
File:                     6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft (raw, json)
Hash identifier:          TlCFTPZoxaBJOgCqDxdhmTOr+VRUuP2OqsdTVwSSrs4=
Subject key identifier:   16:62:6C:BF:5B:89:E1:0E:3B:B2:BA:E8:88:36:C0:D9:9F:2F:EE:0C
Authority key identifier: EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67
Certificate issuer:       /CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
Certificate serial:       01A0D9BA42E5A278AACA8FEEDF4ECC30B619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
Manifest number:          03D9
Signing time:             Fri 25 Sep 2026 18:00:57 +0000
Manifest this update:     Fri 25 Sep 2026 18:00:57 +0000
Manifest next update:     Sat 26 Sep 2026 18:00:57 +0000
Files and hashes:         1: 6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl (hash: RKORZwsD3KzeCzfyj2Rac5QlaK/sFHtLNRvbb6Mpp8M=)
                          2: n26cCYAcOhIFYAKn4bjFjFh7xRc.roa (hash: DPfOpP0A4iPdwjipLuqhqxwCuOKqp7u2xmFkTIq4Dqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:42:e5:a2:78:aa:ca:8f:ee:df:4e:cc:30:b6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaae5c09d9904eb744f906738cf9f07f23fb5567
        Validity
            Not Before: Sep 25 18:00:57 2026 GMT
            Not After : Sep 26 18:00:57 2026 GMT
        Subject: CN=16626cbf5b89e10e3bb2bae88836c0d99f2fee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c7:17:84:ab:4c:23:f9:1e:ca:81:64:13:90:
                    d2:c0:d3:08:f5:4c:f6:06:92:67:d2:5b:4a:82:1d:
                    73:a0:3f:9c:60:76:7e:de:18:12:46:c5:5b:ed:81:
                    1b:33:88:6a:da:8d:3a:bb:1c:22:b8:16:78:2c:14:
                    b2:0b:e6:94:06:08:23:6a:05:b6:51:18:53:ab:bb:
                    a5:20:f5:14:a5:3c:da:f5:94:87:cd:fb:93:26:1d:
                    ff:c1:66:bd:f9:54:72:b6:33:db:79:4f:5b:83:23:
                    ca:da:96:5b:90:8e:79:47:5f:ff:6a:05:28:1f:22:
                    4f:8b:e1:a6:be:4a:13:3c:9b:3e:c1:c8:50:3c:e3:
                    99:48:fe:2e:8d:2a:ad:8b:a2:fa:fd:01:42:19:93:
                    46:89:38:98:fd:66:b1:21:e8:9e:6e:01:71:33:24:
                    bd:d7:75:38:7c:da:a0:a2:ee:06:fd:05:d6:c5:df:
                    0e:59:68:3b:e4:c5:74:66:49:39:10:a6:82:ed:89:
                    f2:d3:2a:f6:c9:9e:d2:2f:63:66:52:22:b0:0e:21:
                    44:cf:14:23:f0:2f:ce:ff:b3:0e:b8:ba:2a:e7:63:
                    a1:e4:fe:37:c3:05:b5:78:30:b5:7f:cc:c4:6b:de:
                    55:67:34:1d:ee:17:94:47:86:d6:48:42:39:44:24:
                    3c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:6C:BF:5B:89:E1:0E:3B:B2:BA:E8:88:36:C0:D9:9F:2F:EE:0C
            X509v3 Authority Key Identifier:
                keyid:EA:AE:5C:09:D9:90:4E:B7:44:F9:06:73:8C:F9:F0:7F:23:FB:55:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6q5cCdmQTrdE-QZzjPnwfyP7VWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/29c6b0-b2ec-4712-b7c5-af3c8f583449/1/6q5cCdmQTrdE-QZzjPnwfyP7VWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:4e:00:d0:06:8f:d9:5c:6a:0c:06:b9:d3:14:e1:47:52:
         93:71:9e:37:84:04:18:ef:6a:bc:5d:6b:df:8b:7c:dd:b0:1d:
         23:5a:d7:19:d2:a6:22:15:d7:8d:9e:92:5d:51:fd:76:ba:b5:
         7f:72:2f:65:22:be:30:58:63:02:22:61:4b:ef:a1:54:e2:47:
         01:bf:6e:02:89:8c:d7:5a:aa:83:d4:d8:1b:e6:1d:37:9d:42:
         66:b6:aa:7e:40:96:99:45:4d:09:53:7c:ff:0c:03:f4:21:3c:
         fe:36:a6:77:65:87:47:de:2d:be:c7:d1:6e:d3:07:36:43:5e:
         74:b6:64:3b:a8:c1:f4:2a:8e:9b:39:21:b1:e7:68:4c:15:2c:
         e8:15:c4:53:c4:7a:c8:7e:d7:3f:47:44:15:14:22:2f:a4:09:
         83:22:cd:8b:7c:f9:84:ea:da:02:19:3c:8a:c8:0d:df:2a:a6:
         03:78:3d:e1:39:32:ff:3f:08:88:c6:ac:c1:15:60:18:37:44:
         0f:22:c0:fb:15:72:6e:4f:50:a5:0a:2c:d8:75:6d:e2:80:6c:
         e4:66:77:9b:c8:8c:00:e4:12:ec:1e:61:40:df:c7:16:3e:66:
         bc:31:97:65:83:5a:c1:dc:0f:a6:72:a5:4d:f0:a5:77:98:51:
         71:06:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:16:14 2026 by rpki-client