Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.mft
File:                     6PlGdTWeFAur06Wr7qDGeA3736g.mft (raw, json)
Hash identifier:          vlFZzQecarwerBbSxCAACvWwzNbuJuA1UVlVd4lKFnY=
Subject key identifier:   6E:3A:FC:77:1A:FB:37:E8:FC:F8:18:44:42:D6:8E:24:7F:3C:F2:0C
Authority key identifier: E8:F9:46:75:35:9E:14:0B:AB:D3:A5:AB:EE:A0:C6:78:0D:FB:DF:A8
Certificate issuer:       /CN=e8f94675359e140babd3a5abeea0c6780dfbdfa8
Certificate serial:       01A0D383EC737414F00FAF42115FF6876583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PlGdTWeFAur06Wr7qDGeA3736g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.mft
Manifest number:          07
Signing time:             Thu 24 Sep 2026 13:03:53 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:53 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:53 +0000
Files and hashes:         1: 6PlGdTWeFAur06Wr7qDGeA3736g.crl (hash: dagytJISFlF8CIy8W4l+Jnst5uAfjtshfPnII1JGVvE=)
                          2: gC2yEttgaK9WM_wgYpr4JpIjBjE.roa (hash: c/9wsmhHYjQ00su38QvaK+8ZaBUh5jW6/FSPnfU/AXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PlGdTWeFAur06Wr7qDGeA3736g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:ec:73:74:14:f0:0f:af:42:11:5f:f6:87:65:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f94675359e140babd3a5abeea0c6780dfbdfa8
        Validity
            Not Before: Sep 24 13:03:53 2026 GMT
            Not After : Sep 25 13:03:53 2026 GMT
        Subject: CN=6e3afc771afb37e8fcf8184442d68e247f3cf20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:3b:3f:08:13:ab:c0:74:60:f0:ba:b3:30:
                    a8:1f:82:3d:7f:4f:c6:48:1e:38:37:6c:89:cc:6b:
                    83:b7:42:8b:74:01:67:58:1b:27:f9:d8:27:75:1f:
                    c3:23:4f:f5:1a:f3:7c:48:5e:21:91:3d:e2:56:fe:
                    6b:2e:84:3e:5e:57:76:1b:f7:16:54:dc:f0:8a:5f:
                    3b:26:6a:b9:71:f7:67:01:15:de:3c:68:e5:9c:19:
                    1a:7c:bc:86:de:54:6d:73:f3:7d:ab:dc:39:49:67:
                    46:ff:5f:c9:1c:90:14:3b:7f:47:27:af:8f:68:e4:
                    11:bc:43:fb:52:64:2e:98:d9:2a:61:7d:52:b2:28:
                    d9:b8:03:63:7e:41:2e:1d:2e:c2:89:3b:65:5c:d7:
                    72:0a:c6:13:64:d9:d4:4f:3b:53:df:8b:01:92:ba:
                    7f:b4:c9:59:35:7c:f4:bf:93:60:d5:d4:e4:93:9f:
                    9c:e5:5c:fd:2b:9f:82:c2:09:8e:3d:0f:eb:10:46:
                    90:37:3d:bb:6b:4c:ca:5b:81:ac:b1:e4:e5:93:d9:
                    b4:13:5d:e8:95:f4:84:24:fc:e5:12:47:77:62:bc:
                    33:76:c9:37:81:a6:5f:02:8a:f6:50:29:ee:51:7a:
                    e0:83:44:75:a4:06:ec:82:73:dc:a9:eb:65:6d:d2:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:FC:77:1A:FB:37:E8:FC:F8:18:44:42:D6:8E:24:7F:3C:F2:0C
            X509v3 Authority Key Identifier:
                keyid:E8:F9:46:75:35:9E:14:0B:AB:D3:A5:AB:EE:A0:C6:78:0D:FB:DF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PlGdTWeFAur06Wr7qDGeA3736g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/df8740-00ba-4dcf-9c77-b61d26d710e4/1/6PlGdTWeFAur06Wr7qDGeA3736g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cd:ad:f7:76:64:5c:97:ec:f6:95:29:2a:9d:d8:f2:94:ea:
         31:1e:80:48:49:48:4c:7b:68:f5:95:fb:8a:d3:64:ed:23:df:
         41:72:69:03:df:d0:0c:da:55:74:6c:2f:47:9e:7b:33:3f:e3:
         2d:9f:b0:f0:3b:5a:42:b6:70:82:53:03:68:69:59:31:7a:c7:
         35:01:3c:bd:88:dd:25:08:87:0c:9c:eb:42:4f:3e:ad:66:09:
         ef:85:3d:5a:ea:f2:fb:f3:9d:d8:80:c6:77:88:1e:0f:5b:83:
         16:4f:42:4a:9a:b2:61:21:41:34:e7:ef:e2:6c:27:62:07:47:
         c7:52:ec:a3:f2:a9:68:08:5c:5a:b9:94:74:75:8f:70:c9:d0:
         27:d9:17:57:a1:e6:5b:59:77:e2:0e:9e:dd:ab:28:71:ee:2d:
         22:11:eb:f5:25:2e:6e:22:e9:66:1a:ac:d0:a3:a2:4d:ea:64:
         87:44:2c:4c:67:a4:44:3d:d7:7a:e6:23:7b:a0:51:67:33:7e:
         56:41:a6:f8:1e:06:ed:fb:26:4c:e8:b0:85:5d:4d:75:37:c3:
         ea:90:a9:b9:6d:c8:01:37:56:9a:2f:d7:63:7d:b0:cf:ab:00:
         46:9f:b0:55:70:2c:c4:16:1c:07:07:fa:06:94:6e:d8:df:ce:
         f0:f0:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:01:44 2026 by rpki-client