Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
File:                     r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft (raw, json)
Hash identifier:          CxuYl8tag2a46z8sag/UKKdZcpk8hOkg1yP7Jpxwz2U=
Subject key identifier:   F0:06:81:3D:D4:80:F9:74:D9:C7:31:1E:B0:57:A0:67:ED:2C:86:1F
Authority key identifier: AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A
Certificate issuer:       /CN=afac83e5677b11050dcecbc27730831c5e6f9c6a
Certificate serial:       01A0E73F2150844E9603DB395B7DDD57CE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
Manifest number:          0365
Signing time:             Mon 28 Sep 2026 09:01:09 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:09 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:09 +0000
Files and hashes:         1: 3FyU0x36g_92xZo6PjoVQ0pSzlY.roa (hash: N60hitRZnBFmF80ThdHlQ4FJpZTJ3gpcVo3+jeaVQ1E=)
                          2: r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl (hash: +4aXF+gcME7RrkYG6olF8vOodK7W0WOvDtRSVkLQ/3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:21:50:84:4e:96:03:db:39:5b:7d:dd:57:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afac83e5677b11050dcecbc27730831c5e6f9c6a
        Validity
            Not Before: Sep 28 09:01:09 2026 GMT
            Not After : Sep 29 09:01:09 2026 GMT
        Subject: CN=f006813dd480f974d9c7311eb057a067ed2c861f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:12:1a:1a:c2:16:3e:ec:47:79:20:24:5d:
                    27:36:35:01:a1:3d:13:36:09:ee:56:f7:b1:be:06:
                    8f:30:5a:76:5b:42:15:d0:12:c3:77:7d:0e:b8:b5:
                    b3:a0:0f:bf:7b:74:7e:d3:6c:b8:f8:c5:85:2b:3c:
                    5b:8f:a6:4d:1c:e2:b8:91:b7:d4:d0:7a:b3:a8:f3:
                    77:04:54:2c:54:f3:d3:04:dc:13:37:c6:71:b4:26:
                    92:67:82:e4:3f:73:94:2e:c9:74:3e:52:fa:a6:e2:
                    62:a8:e5:09:b6:79:f0:f0:a3:9a:3a:bf:1d:d4:fd:
                    83:51:c9:e9:29:02:00:89:6a:04:d0:a9:b1:b3:09:
                    1d:ec:4f:67:4d:ca:4a:b5:27:d5:f5:64:65:0e:a5:
                    80:aa:dc:e6:a4:42:23:05:e6:9d:07:fc:0b:48:83:
                    86:b0:d9:f1:9c:64:78:5a:b4:89:90:ff:b1:27:f8:
                    9b:e6:fc:56:d6:2e:b9:8a:8c:49:d9:56:da:75:c6:
                    26:f1:22:c5:9c:92:b5:ad:6b:93:af:03:ba:19:1c:
                    0c:55:7d:66:89:45:57:c9:60:8e:7a:48:14:64:3d:
                    fe:a5:c0:22:8e:90:25:f7:7b:84:9d:b0:91:4c:1f:
                    84:5a:4b:67:d7:f5:03:96:7c:18:89:fe:92:94:b3:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:81:3D:D4:80:F9:74:D9:C7:31:1E:B0:57:A0:67:ED:2C:86:1F
            X509v3 Authority Key Identifier:
                keyid:AF:AC:83:E5:67:7B:11:05:0D:CE:CB:C2:77:30:83:1C:5E:6F:9C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2357a-c3e5-4173-bc41-a0646762d567/1/r6yD5Wd7EQUNzsvCdzCDHF5vnGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:ee:bc:7f:1d:e4:c6:86:87:59:3d:6a:a5:d3:f2:e5:50:
         bb:45:8a:bf:84:7a:42:ec:b1:9c:6e:a1:74:3c:4f:36:47:cd:
         79:f5:4d:72:91:2d:84:3a:bd:c1:7f:8f:de:f9:b0:c8:0c:e8:
         18:cb:27:59:dc:6f:54:92:0d:a1:39:17:07:ac:09:b9:77:02:
         e5:46:5d:db:2f:42:f3:96:4f:6d:21:93:aa:1e:f3:a0:48:18:
         03:bd:77:29:e8:ee:47:ff:f2:fa:c8:db:08:8c:33:bd:2e:be:
         4f:3b:90:6a:97:30:d2:6f:c6:7e:93:cc:d0:47:90:7a:a0:fd:
         5b:b5:3a:1e:50:a6:cb:d8:6d:0b:dd:9d:1c:ba:3a:41:d4:18:
         4c:1b:e2:96:44:e4:d8:84:17:6e:9a:3a:3d:13:e0:09:90:6b:
         02:87:4e:93:9f:9b:22:be:8a:0c:79:67:e1:be:9d:ef:15:fc:
         57:82:4c:c5:cb:67:c6:2c:63:35:0a:72:fc:b3:0b:8f:cd:e5:
         b3:8c:f7:b2:14:47:d0:43:e1:e2:97:3c:5e:9f:99:b5:3f:e6:
         15:27:5a:52:7a:24:b8:6a:6e:76:1f:30:d2:3d:fc:2c:5b:7c:
         9c:47:88:5a:d3:c6:e6:d0:71:6e:c6:b0:f5:86:67:1b:a2:97:
         70:92:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:02:55 2026 by rpki-client