Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          cudwg3KU9RUiOaWwRZovfZXPaX6ccZf6rF/oiPsk6rk=
Subject key identifier:   04:63:0D:35:B5:68:FF:BC:F4:FE:D2:C6:0B:2C:B9:E0:EE:FC:C1:85
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       01A0D917353269F8DC0EBE53577266AA6F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          0583
Signing time:             Fri 25 Sep 2026 15:02:51 +0000
Manifest this update:     Fri 25 Sep 2026 15:02:51 +0000
Manifest next update:     Sat 26 Sep 2026 15:02:51 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: uAZSioaDXU+D0XVoRhd5BnjYEyIkjWl36DCqYGm+OAg=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:35:32:69:f8:dc:0e:be:53:57:72:66:aa:6f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Sep 25 15:02:51 2026 GMT
            Not After : Sep 26 15:02:51 2026 GMT
        Subject: CN=04630d35b568ffbcf4fed2c60b2cb9e0eefcc185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:4c:d5:1e:e4:2d:1d:40:ae:d2:af:86:be:
                    ba:73:20:6e:ce:ce:b4:4b:f7:fa:37:36:da:68:00:
                    38:2e:71:b7:f3:e9:d0:89:ff:28:a9:3d:fb:89:62:
                    03:2f:9d:7d:31:2d:e3:8b:0e:5f:f5:e0:81:8e:9a:
                    69:32:ea:f6:56:35:a2:76:8b:18:5c:55:39:d8:ff:
                    32:5b:10:b7:39:1d:73:84:5c:21:e1:6f:8e:22:40:
                    54:be:09:5a:5e:b9:46:86:9b:0e:9d:04:1a:ea:09:
                    dd:75:e6:f0:67:02:b8:79:a9:4f:9b:84:7e:da:40:
                    de:43:8e:1f:96:84:84:25:71:b9:70:76:ff:4b:9f:
                    b7:fb:59:b7:2f:93:19:b6:79:fe:f4:44:5a:96:d8:
                    99:de:51:bf:af:8e:65:91:8d:7b:fc:d9:37:32:4a:
                    63:64:77:cc:e7:9e:a0:69:07:65:39:aa:33:d2:b5:
                    d9:d1:fa:cc:48:1e:66:5a:78:37:8c:45:36:45:78:
                    ac:9b:a0:ab:76:93:b9:92:ac:4b:aa:9e:95:98:8a:
                    bd:d3:7c:b0:32:58:a8:bd:b2:15:f2:11:bc:b4:9c:
                    43:df:d4:a7:97:a4:c1:69:89:a8:67:65:c7:73:85:
                    a0:1e:85:74:13:57:af:4a:8d:a2:36:43:87:75:81:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:63:0D:35:B5:68:FF:BC:F4:FE:D2:C6:0B:2C:B9:E0:EE:FC:C1:85
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b3:24:7e:90:5a:31:08:00:ee:f2:69:8e:84:fc:86:b0:38:
         ca:77:ad:a0:5f:95:00:66:d3:67:1f:94:ee:92:00:45:bf:c8:
         15:7d:d0:cb:8f:ca:30:73:24:bc:55:54:5e:1b:29:e7:02:8b:
         17:9b:e0:9e:9e:de:3d:da:b7:b3:c2:a9:57:1e:fe:f0:df:88:
         b6:e2:1f:85:89:ba:ee:ad:34:67:1c:8d:79:bb:5e:12:87:ef:
         c4:bc:0e:e5:92:2a:c4:cb:6f:ec:aa:1d:55:79:7e:ac:7c:32:
         b0:f7:d8:37:b5:fb:81:15:a3:24:95:cb:06:c4:49:7a:e4:c5:
         7f:c4:e0:ff:9b:dc:87:a8:35:20:06:f7:38:b7:6e:41:dd:0b:
         b7:c1:a0:d9:8c:1c:7d:9c:81:c3:b1:5f:90:80:1f:f6:9e:c0:
         28:cc:40:59:3f:8e:4f:f6:b4:7b:b1:06:fd:d0:c4:74:11:2e:
         2f:6f:38:bd:fa:90:d0:88:ab:0b:50:72:98:f4:61:b1:6b:19:
         f1:62:06:f6:ef:1e:67:03:db:44:e9:52:8f:cc:7f:ff:70:2c:
         9c:68:10:5b:3d:41:5d:bc:38:6d:3b:35:86:4d:d7:8c:4a:27:
         d0:a3:ff:ab:96:ed:17:41:c7:aa:71:1f:91:28:44:9b:b5:45:
         87:34:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:48:23 2026 by rpki-client