Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
File:                     6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft (raw, json)
Hash identifier:          TmCxQ9FicVIehlvh9/BZYG7upHpn0AVG30dB8qRwC6c=
Subject key identifier:   72:C5:2A:18:A2:4C:4A:C3:43:0A:2D:A6:A5:8A:ED:ED:07:64:A7:B2
Authority key identifier: EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
Certificate issuer:       /CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
Certificate serial:       01A0D3EFE58285C940D3CD104A62E962D9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
Manifest number:          03F6
Signing time:             Thu 24 Sep 2026 15:01:49 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:49 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:49 +0000
Files and hashes:         1: 6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl (hash: eWgUiPFBzirO9rcRFWpdh4a2HSxz4qS1gDXXQ07kqqw=)
                          2: vwkWycVdom3nvYeKOf0XRuXuyg8.roa (hash: GQTFaeIhIDJqGTNfp3g118208VXOEiHmD7gFsTFKtRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:e5:82:85:c9:40:d3:cd:10:4a:62:e9:62:d9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
        Validity
            Not Before: Sep 24 15:01:49 2026 GMT
            Not After : Sep 25 15:01:49 2026 GMT
        Subject: CN=72c52a18a24c4ac3430a2da6a58aeded0764a7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:4e:09:aa:77:d3:66:45:bd:9a:fc:84:d2:
                    e5:28:0c:84:64:9b:3c:77:b0:04:5b:e5:e8:39:1e:
                    40:ca:2f:81:e5:27:61:5b:93:3a:4a:68:4c:d2:d7:
                    c8:47:33:5f:53:39:df:bd:2c:7c:ec:65:51:85:34:
                    90:14:02:fd:aa:de:95:24:ea:fe:08:2c:a8:7c:69:
                    f8:be:2c:aa:85:14:b2:95:a0:08:f3:28:30:2d:c4:
                    64:28:3f:3c:0c:ce:70:07:cd:6b:e1:45:d4:a3:2f:
                    e6:f4:2b:2b:64:b5:9c:a6:a7:59:55:74:45:f6:87:
                    8d:c6:83:a1:e5:37:70:12:03:b7:78:46:40:07:a8:
                    70:80:4f:08:76:8e:70:b4:22:21:48:73:11:65:d6:
                    fb:9c:d0:f5:b7:d7:9e:4d:56:3a:02:d0:83:23:7b:
                    b6:b6:d8:59:d3:33:87:1a:05:cb:04:6d:22:8c:1d:
                    51:93:dd:db:64:77:0c:fe:99:1a:59:87:c0:51:c0:
                    21:f7:3e:2d:54:d9:8c:56:1b:95:73:dd:e2:f6:6d:
                    ae:fa:88:5e:ba:ce:ac:06:2e:b3:20:84:00:8f:1e:
                    94:42:2d:52:45:23:0e:ed:48:b0:a6:36:a5:72:cd:
                    b7:9b:6e:aa:8e:c7:7c:d3:1f:c8:32:47:50:43:94:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:2A:18:A2:4C:4A:C3:43:0A:2D:A6:A5:8A:ED:ED:07:64:A7:B2
            X509v3 Authority Key Identifier:
                keyid:EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:25:7a:fe:5e:12:22:5c:1f:bf:b9:f8:0f:82:1f:a7:cd:29:
         db:82:1f:82:ab:9e:0c:58:04:6c:77:03:e2:88:6a:43:c1:d2:
         bc:16:c5:46:db:be:9e:98:35:85:43:26:64:af:d9:c8:bb:74:
         d0:3a:22:e6:01:f1:1d:94:2c:12:30:a9:cf:3e:72:d6:52:23:
         a6:84:18:f3:95:9d:70:f7:13:16:37:9d:97:e5:69:bc:9a:e1:
         2c:93:05:36:54:1a:d8:8d:8e:42:5d:32:45:2d:42:48:01:47:
         9c:4b:28:ef:48:88:6f:c1:f4:10:42:c9:e4:9a:ad:1c:2f:e6:
         3c:e1:66:4c:61:30:f1:51:2b:0c:60:c1:4e:ae:88:94:06:ed:
         92:ab:b0:60:f2:cb:89:6b:a2:6c:d5:6c:4d:bc:f8:7e:fc:6e:
         4d:d4:26:a3:a2:e6:1e:f9:d5:35:7d:4a:d9:56:06:7c:3e:2b:
         cc:49:aa:4e:92:08:b9:86:25:6f:14:16:fb:35:2f:c5:1b:3e:
         d5:21:5b:22:f6:86:8d:2d:4b:61:74:e4:18:2d:83:ee:4c:47:
         b8:1b:a5:e2:f5:a7:f4:6f:87:61:4d:72:b9:7d:dd:5d:0b:0d:
         ef:a3:27:49:2e:23:2d:d4:0a:e7:4b:de:fa:e6:d0:b1:ad:bc:
         66:a4:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:39:44 2026 by rpki-client