Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          NP8ydunhJf7hYOjvRgrDeiq3BOGGgUqt/Mhg2EmBGYU=
Subject key identifier:   4F:A3:0C:5B:67:F2:69:1F:F6:6F:8F:26:79:DA:4D:D2:EA:5A:99:27
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       01A0CB900A105F4D53F6E158C4F51BD5F757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          1139
Signing time:             Wed 23 Sep 2026 00:00:09 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:09 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:09 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: yLU6KtX9denfBpUrltvj7bhe6S3bHdmyWsv82DwJjnM=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:0a:10:5f:4d:53:f6:e1:58:c4:f5:1b:d5:f7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Sep 23 00:00:09 2026 GMT
            Not After : Sep 24 00:00:09 2026 GMT
        Subject: CN=4fa30c5b67f2691ff66f8f2679da4dd2ea5a9927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:bf:f7:6d:bc:03:93:ac:1f:e2:b6:9c:d0:
                    00:a9:91:0c:14:93:6b:1b:3c:d2:2d:47:91:d7:c7:
                    63:b0:12:87:74:bd:23:78:49:8e:7d:01:28:41:71:
                    24:42:24:1e:51:3e:f8:97:c3:de:78:ff:55:70:ce:
                    70:f6:62:6c:43:58:b8:4f:23:d7:af:65:69:a6:c9:
                    75:06:ed:34:fd:ae:0f:ef:5e:76:55:12:50:66:a6:
                    9f:de:3e:d8:be:16:53:fd:63:b3:51:34:d0:45:98:
                    f6:9b:a8:c5:e0:dc:db:3d:20:52:8e:7d:aa:f2:8f:
                    88:00:4d:4b:0f:bb:0d:98:71:7b:fd:d5:ec:51:46:
                    f5:4e:1d:51:17:0b:35:ec:f3:24:04:4e:b6:93:6a:
                    bf:4e:a6:3b:d3:f0:af:b6:ad:7a:28:e6:bb:1b:95:
                    e3:2f:8c:b8:c1:58:df:0f:2f:9f:23:06:ee:2b:18:
                    aa:0c:47:92:87:79:a6:b0:00:39:7d:4a:09:52:c9:
                    9d:50:52:e2:9e:64:25:72:c3:4e:ad:23:8a:32:a1:
                    1c:54:21:e4:eb:0e:66:dc:bd:52:12:76:da:61:d7:
                    fb:83:48:7e:9c:65:e5:12:52:3c:4c:09:e1:db:ea:
                    de:fb:99:ef:09:fa:df:b3:6c:28:d4:2a:8c:78:cf:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A3:0C:5B:67:F2:69:1F:F6:6F:8F:26:79:DA:4D:D2:EA:5A:99:27
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:26:30:86:65:bd:6e:93:df:0f:15:41:4b:34:00:a7:0e:
         5f:96:51:bb:a7:95:9a:9a:34:d7:b7:85:16:22:a5:2e:33:63:
         87:df:d9:e0:5b:bb:49:c5:82:d4:e6:89:ae:c1:0f:a3:f8:e3:
         07:a3:b9:55:41:93:b5:55:04:13:b4:7a:0f:fa:90:95:43:55:
         8d:70:29:e9:d0:21:24:d8:09:d5:da:88:04:98:7c:cf:28:82:
         1a:22:0b:aa:80:b1:cc:4c:6b:3d:4c:dc:b5:9b:17:35:d4:ae:
         69:84:21:70:1c:26:be:cd:cd:0a:18:9c:84:5b:76:ba:fa:56:
         ee:0e:2e:77:c8:bd:7f:2c:fc:3f:10:9f:66:24:d7:90:e0:6d:
         b2:cd:da:60:26:c2:28:41:34:e5:ac:05:8b:04:c4:e1:7f:f5:
         30:e8:c0:cb:73:6d:14:89:47:ca:cb:79:54:01:e0:af:a1:cb:
         e0:39:ea:d3:9a:c8:8c:2f:50:00:ee:c3:cd:ae:3b:38:d8:fb:
         7f:67:a4:85:98:dd:61:dd:7f:6f:2b:25:19:22:13:a8:6b:3d:
         17:53:24:c8:04:55:44:dc:20:f6:b4:03:34:6e:51:1f:16:06:
         d0:1c:02:7f:cf:bc:82:bd:63:f6:55:f4:a4:61:39:49:94:c5:
         d2:c3:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:13 2026 by rpki-client