Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File:                     6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier:          DVmusZFQytZzh8tQ8jfywMM98pCe3KlezT7b5JXjvfY=
Subject key identifier:   8E:30:E2:A2:B1:99:9F:8D:7D:83:90:55:B0:E2:18:A2:A2:70:C8:9E
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer:       /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial:       01A0E10644ADD04055851BEEF6B29758F691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number:          0DA6
Signing time:             Sun 27 Sep 2026 04:01:19 +0000
Manifest this update:     Sun 27 Sep 2026 04:01:19 +0000
Manifest next update:     Mon 28 Sep 2026 04:01:19 +0000
Files and hashes:         1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: T07ImQX2qE7cQS24qSMb5WsJLp8j3hAVuL46jWy34uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:06:44:ad:d0:40:55:85:1b:ee:f6:b2:97:58:f6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
        Validity
            Not Before: Sep 27 04:01:19 2026 GMT
            Not After : Sep 28 04:01:19 2026 GMT
        Subject: CN=8e30e2a2b1999f8d7d839055b0e218a2a270c89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:79:5c:52:4e:ad:f2:f4:4b:47:65:1e:35:07:
                    50:9a:eb:4d:d5:31:9f:a5:35:12:8c:99:35:3a:62:
                    6d:0f:01:94:07:68:44:98:79:ee:57:f4:5a:5e:71:
                    da:7e:f7:6b:65:a5:e2:f2:24:32:25:2a:1f:f5:79:
                    ee:b8:88:d2:40:cb:e6:7f:6b:d1:f7:a7:ed:3f:fe:
                    13:84:50:e1:34:76:38:ab:53:cb:d8:02:b4:2c:74:
                    85:30:63:8f:3f:bb:b4:8a:9c:86:09:27:94:c3:c5:
                    a0:19:45:bd:05:bf:d3:d9:a6:b7:7e:00:bb:5d:be:
                    08:64:e2:20:43:82:29:5c:08:6f:70:39:88:5c:b6:
                    b7:6a:40:f4:f6:e6:df:ed:e1:17:7e:7e:02:b6:f8:
                    1a:41:21:03:c3:9a:ef:84:8e:58:be:84:8f:34:25:
                    15:ad:4b:1d:7f:40:0a:b5:16:de:b1:c6:a9:6a:65:
                    28:70:9b:85:e2:66:6f:e6:a2:e1:f6:3a:5a:36:0c:
                    8b:e5:57:cd:65:79:35:24:d1:ad:1b:f8:7d:cc:23:
                    89:49:cc:8c:66:db:de:a1:05:29:c5:d1:64:5a:77:
                    f8:d5:0e:6b:f1:28:2e:65:5d:39:da:13:be:65:d4:
                    84:1e:b2:2c:a9:75:f7:f4:e0:42:45:af:be:64:f7:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:30:E2:A2:B1:99:9F:8D:7D:83:90:55:B0:E2:18:A2:A2:70:C8:9E
            X509v3 Authority Key Identifier:
                keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:87:e9:f5:ad:eb:a6:21:7f:9d:71:44:4d:ad:70:67:56:
         18:1f:91:45:0c:44:27:f6:ee:22:c7:63:6b:3d:23:bc:01:56:
         12:19:89:f7:04:64:22:6f:6c:08:4b:44:62:fe:13:ef:a8:db:
         7e:2a:96:3a:f4:b7:8e:fc:10:0f:72:bf:ed:f3:f0:8f:34:b3:
         4e:0b:e2:7b:90:9e:12:c8:6a:7c:86:36:93:fd:f1:69:19:4a:
         19:dd:55:6c:e3:dd:0b:e3:57:33:00:a8:8d:2c:9e:30:09:c7:
         d5:55:db:9f:2d:45:fb:0b:c8:2e:43:ee:45:c3:69:e7:ff:be:
         fe:ff:6a:68:59:6d:31:ae:50:8d:cb:42:8e:7a:68:07:2d:34:
         55:f0:52:b5:8b:6b:de:db:dd:90:63:8c:18:60:42:8b:b5:b2:
         ce:b9:34:53:2f:ff:9c:9f:18:89:55:b4:14:e4:66:86:40:f9:
         f6:f1:07:9b:db:bf:0d:57:93:67:2e:e3:b2:c1:ef:23:85:27:
         e5:4d:c1:4c:01:37:76:a1:a3:e9:6c:c2:db:13:f3:72:4d:17:
         1b:e7:cc:a5:e4:cf:27:09:2b:2c:ce:59:85:fa:3a:29:93:a1:
         98:e5:79:da:1a:f8:8d:14:c5:87:20:e5:d8:20:1a:b3:59:40:
         31:d4:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:42:32 2026 by rpki-client