Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
File:                     6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft (raw, json)
Hash identifier:          RUtuCM89+bBnTxaCFiqW518j/vagSyyYAUkxmf3LdxU=
Subject key identifier:   4B:8A:58:25:87:0C:51:D5:2C:4F:30:94:A5:FB:32:85:09:9C:62:10
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       01A0E1743381884A3603C33E0AF95F598F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
Manifest number:          10F3
Signing time:             Sun 27 Sep 2026 06:01:23 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:23 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:23 +0000
Files and hashes:         1: 6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl (hash: iBxnV8CJg9ed/qtidB5dztAL3aOShXmVcyrb74D+h3c=)
                          2: 7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa (hash: 9/Cnn9Mz/GVeQ/OrX2MtzdspTFn1KWilYOYP/ODpG8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:33:81:88:4a:36:03:c3:3e:0a:f9:5f:59:8f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Sep 27 06:01:23 2026 GMT
            Not After : Sep 28 06:01:23 2026 GMT
        Subject: CN=4b8a5825870c51d52c4f3094a5fb3285099c6210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:d8:6f:db:b5:b6:aa:99:a3:ae:98:9a:2d:
                    01:20:e5:4e:12:e9:3d:5d:31:27:22:54:db:3d:e2:
                    bc:80:35:0e:32:5f:58:d0:32:81:61:07:7e:4a:5c:
                    c1:f6:6a:d0:38:c1:5d:6e:4f:ab:06:22:52:27:3f:
                    8c:a7:ba:59:06:e5:f0:59:4b:d5:44:07:cd:36:2a:
                    15:a8:35:58:95:10:c4:0b:f6:b7:41:d2:39:3c:b1:
                    2f:60:48:00:0e:87:af:da:a1:ff:01:dc:7c:a8:4a:
                    8e:73:52:b0:77:ba:56:6d:05:93:17:90:b0:37:45:
                    3e:34:23:fa:b5:ff:01:b6:3e:77:75:6c:32:60:2d:
                    5d:85:41:fa:f6:30:1f:96:29:c7:dc:b4:97:5a:60:
                    6a:bd:9d:1e:3c:2d:50:23:7e:d4:5b:1a:19:d9:31:
                    ea:20:a9:d7:01:46:cf:2b:a7:f6:33:ac:5f:f6:be:
                    16:a0:37:05:33:a6:e7:98:70:3b:2f:ef:86:09:28:
                    c1:e8:d3:ad:a3:b6:e8:aa:88:5c:23:ba:a4:1a:8a:
                    2c:91:4f:6a:a7:f3:8e:a6:6e:a4:b3:f7:0f:6e:a2:
                    f5:a7:e7:cb:b2:1d:56:2b:85:73:59:1e:1a:f2:8e:
                    68:e9:f6:6f:91:00:c1:63:d1:41:52:c4:eb:7e:8c:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8A:58:25:87:0C:51:D5:2C:4F:30:94:A5:FB:32:85:09:9C:62:10
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:9d:34:da:f6:bb:ec:88:23:8c:23:f6:17:f7:43:db:8f:9e:
         9d:60:98:2d:77:6e:80:49:e5:eb:5b:6e:4b:a2:72:6f:43:88:
         09:c6:d4:fe:2b:b8:6f:3a:44:bc:e4:b9:a6:63:12:fe:7c:75:
         f8:3c:a1:ca:0e:88:12:d5:3b:46:e6:1b:ad:69:c3:12:b2:cd:
         7a:eb:16:d3:8d:30:f3:69:00:5b:5b:02:d5:96:fe:65:6c:3c:
         8e:c1:bb:b0:0a:e2:be:9d:b7:ba:94:a7:29:87:ea:70:3a:53:
         dd:5e:6d:d0:0a:8a:53:f6:05:0e:f1:54:35:5d:54:3f:4f:27:
         06:ac:c9:82:d8:18:cf:43:a7:4c:4c:3f:db:59:b7:a5:82:d8:
         02:be:4b:9b:5d:07:8e:9e:d6:7c:2c:fc:34:2d:d1:f8:83:db:
         f8:15:fe:c5:1e:19:50:a8:74:56:81:ef:37:2f:8c:fa:47:d0:
         d8:62:2c:c4:20:3a:98:67:f4:20:de:54:f3:77:1a:75:05:88:
         b5:4c:27:a1:61:cd:8f:4a:a6:fa:91:12:38:b9:3f:72:51:97:
         9f:6e:4d:6f:0b:5a:8c:fa:cc:c9:cf:71:62:cc:ae:42:4b:ce:
         8f:15:77:7e:c6:71:40:8d:89:d7:6b:d5:2c:6d:08:6c:24:58:
         a2:9d:24:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:25:52 2026 by rpki-client