Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          URFEtqarJwQhEYMg0zA5hkWeGt0dRAgCcIb//944Fq4=
Subject key identifier:   51:9E:C3:1B:3C:D6:34:9A:BB:32:AF:16:79:88:79:51:7E:64:D9:A4
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       01A0D0EE5D600652BDA964732F33D838207D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 01:01:17 +0000
Manifest this update:     Thu 24 Sep 2026 01:01:17 +0000
Manifest next update:     Fri 25 Sep 2026 01:01:17 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: j82EahpZEPwTDRmqeKeyq9QQ084KiyjNHltyd4gEIUg=)
                          2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:5d:60:06:52:bd:a9:64:73:2f:33:d8:38:20:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: Sep 24 01:01:17 2026 GMT
            Not After : Sep 25 01:01:17 2026 GMT
        Subject: CN=519ec31b3cd6349abb32af16798879517e64d9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:c2:d2:8b:b2:f9:14:c6:14:d9:1f:2b:41:
                    18:3f:ab:b2:35:e9:e8:bf:bd:19:43:de:98:34:8c:
                    7d:00:b1:a6:48:3d:85:61:bf:23:e3:d8:8f:f8:5e:
                    57:61:f4:49:7f:d6:db:9e:25:96:02:96:cb:75:77:
                    91:1c:f5:38:b6:7e:80:3b:cc:88:52:bb:aa:4a:f5:
                    ff:fa:7e:85:e8:54:70:8c:03:e6:42:5a:5b:d2:a3:
                    e7:ff:b1:14:7f:8e:a6:5f:92:7c:b9:db:fd:ba:6e:
                    79:fc:16:8d:f9:3f:5b:3f:ac:78:3a:c2:5d:ff:be:
                    1c:c7:07:44:7f:29:b5:ee:18:9a:0a:bb:bd:90:15:
                    0a:7c:85:d5:bc:3b:25:c3:ec:55:42:70:e2:09:d6:
                    d2:3b:91:c7:87:62:4d:ff:fa:80:5c:11:b7:9a:b6:
                    5c:21:a9:2e:08:c7:ac:a0:9d:3e:19:92:21:2d:97:
                    54:04:e8:82:d5:40:f6:82:31:7f:03:ea:10:c9:45:
                    b6:7a:cf:51:55:f0:98:7b:74:5d:a1:e7:3f:49:f9:
                    bf:08:db:0a:8e:b5:fa:ba:4c:ba:ef:8b:44:d6:ea:
                    ee:cf:5a:54:7b:a6:34:7c:29:17:8c:12:cf:7b:8d:
                    ae:62:23:39:55:1e:49:9c:5d:d3:b7:50:bd:21:45:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:C3:1B:3C:D6:34:9A:BB:32:AF:16:79:88:79:51:7E:64:D9:A4
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:23:fe:01:ce:fa:71:41:30:5a:77:db:91:65:1b:ef:d4:
         42:fe:ce:7f:d0:83:e8:38:fc:26:58:8d:81:c3:21:85:42:d5:
         65:b1:13:78:20:45:4d:c6:f8:a8:79:9a:33:9c:a1:15:c6:ac:
         22:3b:58:21:e8:f6:3a:93:ec:30:72:b1:c2:83:ac:43:07:b6:
         6f:6a:7e:85:da:44:ee:e4:51:7e:02:a2:3b:66:ca:3d:6e:dc:
         1a:94:80:82:99:ae:4d:86:89:76:24:f6:a6:b0:d4:52:6f:c4:
         ed:58:78:31:fd:d6:13:5b:c2:91:bb:a2:fc:a3:a0:db:f6:85:
         85:40:09:4f:d8:9a:7b:a7:15:9b:af:48:59:cb:f5:aa:fe:cf:
         56:1d:6c:2a:7a:71:21:04:3a:f9:9a:4e:c9:8e:22:0f:ee:30:
         d7:13:49:42:01:7f:2e:26:ce:0c:df:f2:c3:7c:34:33:44:e0:
         64:40:24:1f:9a:37:57:00:a2:a4:55:ab:ad:d0:9b:8f:c7:77:
         e6:00:84:74:2e:ed:20:be:c1:7f:72:ae:f3:02:42:c7:bf:5c:
         8d:b3:96:91:50:bc:fe:64:5d:cc:86:37:d0:95:ef:1a:64:59:
         40:2b:6a:f1:7c:4c:1d:f3:8f:fc:9a:88:4b:af:ac:03:03:8c:
         45:a3:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:48:49 2026 by rpki-client