Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          HJ67Agd6uXsCnOjNS6INFJGkcr9lNB0QRhWCKnxZMZI=
Subject key identifier:   36:69:1C:29:1D:AF:4E:E3:81:C2:27:35:DE:15:9A:A7:4D:3B:89:C1
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       01A0D8A81EB77A79D07510FBE07FD7C4D4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          1A01
Signing time:             Fri 25 Sep 2026 13:01:31 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:31 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:31 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: 83AoWE/GwwFbvbSjKaeQBcbMHFSG8pgrUMVG2zSL9+k=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:1e:b7:7a:79:d0:75:10:fb:e0:7f:d7:c4:d4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Sep 25 13:01:31 2026 GMT
            Not After : Sep 26 13:01:31 2026 GMT
        Subject: CN=36691c291daf4ee381c22735de159aa74d3b89c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:cd:b9:eb:26:8e:a8:75:90:66:a6:2d:71:
                    3b:ae:e1:27:b5:3a:ce:4e:a2:77:2c:32:3d:51:16:
                    75:23:ac:af:7f:3d:93:4e:09:64:a5:71:63:ac:50:
                    bd:82:d2:fd:82:d8:9e:6b:c5:6b:27:c3:f2:6a:f7:
                    9f:cf:4f:7f:79:f0:03:31:2c:fc:d7:95:28:1a:1b:
                    7c:7e:9b:9d:10:5e:98:59:e8:0b:28:18:71:03:ed:
                    db:96:b2:8c:f1:4c:e3:91:81:3a:79:bd:82:d4:8f:
                    58:2c:c0:67:50:ec:71:14:47:cb:a2:48:2a:f8:e9:
                    4a:c6:79:97:9c:1e:b0:89:01:75:e1:71:a5:ed:18:
                    ed:cf:ae:06:b9:1b:c6:2e:de:3a:ad:9f:0f:2a:d4:
                    a3:a7:4e:a9:88:a2:6a:fc:54:1e:2b:79:4d:91:56:
                    4e:de:ba:ff:73:8f:f6:bb:54:73:89:91:d5:69:18:
                    09:11:5f:a1:90:39:68:52:1c:3a:df:1a:7c:fa:2d:
                    70:cf:b7:17:83:9a:79:23:c7:86:c7:b6:98:4b:62:
                    6e:c4:36:21:53:91:eb:38:7a:50:50:b0:cd:06:82:
                    20:85:8b:d1:39:05:df:a0:80:5e:12:86:66:a3:9c:
                    2a:82:9e:c4:cc:7d:34:e7:89:58:68:5c:25:98:06:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:69:1C:29:1D:AF:4E:E3:81:C2:27:35:DE:15:9A:A7:4D:3B:89:C1
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:e5:78:43:54:89:72:da:65:d0:7a:7e:d7:6d:e1:cd:d0:
         6c:84:33:0a:6a:f4:54:ad:fe:d8:53:f4:8a:5f:81:fa:f4:34:
         ed:4e:fe:51:82:82:0f:25:82:82:ec:d2:06:81:0e:32:44:c5:
         bd:43:6c:0e:1e:a8:28:3c:08:29:c1:83:f7:ef:2f:ec:92:c7:
         c8:5b:fb:09:99:3e:23:19:b4:64:fa:5f:55:b9:ca:4c:e7:8e:
         6f:85:4d:6c:bd:a8:62:9a:f4:01:f4:af:c4:ee:01:23:1b:44:
         c0:d7:7d:88:04:e8:fa:bf:82:35:87:2d:a0:86:4b:a8:4b:12:
         2f:ca:4c:51:81:52:b7:be:fc:1e:ad:94:86:fb:d6:d1:a3:5d:
         a5:aa:d5:cd:de:2b:a6:d5:af:68:6f:c5:04:b4:2a:93:e4:aa:
         dc:93:7a:bc:d0:3e:76:8a:48:01:96:d3:ec:be:44:b9:ce:0f:
         e5:30:89:7b:c5:a7:5b:5a:27:92:f0:b7:f3:40:f7:8d:75:22:
         fc:86:e7:77:e6:ee:d1:44:fe:6d:6c:a9:82:99:a0:3a:09:5b:
         fb:cd:d0:6a:a5:a9:2d:0b:85:ac:d7:fd:97:8e:b7:2b:db:ce:
         77:38:23:a1:fb:09:5b:ec:8d:c9:33:62:27:f7:71:ab:47:30:
         0e:e9:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:41:35 2026 by rpki-client