Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File:                     S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier:          UzlNgNy8BJDEnQ3UcJKYXuLImULbGY0YKHwseBvErBs=
Subject key identifier:   B3:A8:50:73:87:03:1F:2C:ED:4C:C1:7D:D4:A1:3B:29:E8:1B:C9:15
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer:       /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial:       01A0CB596726364B0D71E7978139F4620DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number:          1A6B
Signing time:             Tue 22 Sep 2026 23:00:28 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:28 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:28 +0000
Files and hashes:         1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: o6ZXX7a+ci5N48DbhP7nQix6fmRu5xVuTYYL9TRBiB8=)
                          2: nPrrHTYTNDyw_L1eEGSJYuwqgp0.asa (hash: rMc0Aj00lJIniIoH5S83QDg35h6VGczGqXsIv4euxXE=)
                          3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:67:26:36:4b:0d:71:e7:97:81:39:f4:62:0d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
        Validity
            Not Before: Sep 22 23:00:28 2026 GMT
            Not After : Sep 23 23:00:28 2026 GMT
        Subject: CN=b3a8507387031f2ced4cc17dd4a13b29e81bc915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:e5:00:23:d9:e1:3e:a0:3f:2a:39:0c:14:
                    7e:82:92:53:6f:06:be:0d:d6:61:a4:75:08:b9:a6:
                    af:e6:65:17:89:d4:3c:8f:41:bd:2a:63:4b:a9:1e:
                    78:ed:b8:e6:e3:00:dd:ab:ff:60:48:f0:ad:b0:c2:
                    4e:69:00:2a:68:4c:0b:4c:d2:7b:a5:e9:66:ba:af:
                    5c:03:92:0c:1c:35:6c:a0:e3:4a:69:e4:c1:fd:26:
                    ac:47:de:7c:56:39:f8:08:69:34:0a:a0:8f:6f:a7:
                    2e:97:83:f8:00:ba:ff:e1:e4:bf:98:b3:ef:a3:e4:
                    e1:59:da:9d:b5:48:fc:41:ae:02:2e:5c:f2:20:70:
                    4e:9b:8a:8d:d0:d1:53:23:25:bb:29:8f:cb:e8:f8:
                    47:57:5b:98:ef:cb:91:a5:8e:79:ed:f9:50:6d:ca:
                    26:9d:30:a6:18:8f:68:e5:11:ea:aa:8d:3e:d5:47:
                    16:71:f8:83:a1:4b:af:fc:70:a5:c3:c5:a1:26:ca:
                    b9:c8:bc:ff:82:82:2b:15:2c:93:d3:d0:57:0e:5f:
                    ac:8e:0d:7c:53:ba:1e:44:17:d5:aa:08:dc:6f:5b:
                    73:33:84:f8:b8:0f:af:a4:ad:f5:24:eb:2d:9f:2c:
                    79:4d:fc:1c:c6:7c:05:1d:e9:aa:3b:d6:96:f2:59:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A8:50:73:87:03:1F:2C:ED:4C:C1:7D:D4:A1:3B:29:E8:1B:C9:15
            X509v3 Authority Key Identifier:
                keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:56:94:da:6d:68:4c:49:c2:d6:be:e2:a1:96:49:87:e8:
         b0:cc:ff:bd:14:f1:00:39:5d:15:0a:0f:4b:1d:9c:2f:e9:67:
         0f:b2:24:5a:3b:5b:a8:13:53:0c:36:02:24:03:91:6d:8f:15:
         ee:43:f6:4f:b7:e4:cc:8d:4d:5c:c5:ae:3d:16:7a:aa:f6:dc:
         77:b7:9d:86:fa:93:8e:9c:6d:b8:44:cd:1a:9b:de:db:07:78:
         12:82:8b:ca:6e:d6:fa:c8:62:ef:44:0f:95:6c:a1:3f:6b:45:
         f0:ee:b8:d0:a2:7c:27:51:f6:2a:cd:3a:e1:db:56:2e:d1:6b:
         29:c1:ad:5d:62:07:3e:65:38:28:fe:f2:48:42:92:43:76:83:
         49:72:e0:60:cb:4e:1b:f8:31:19:dd:64:19:23:f7:b1:fc:1b:
         99:b1:9c:51:bf:dd:aa:80:fa:de:70:38:c7:bc:cb:b7:08:e6:
         d3:1e:18:e6:db:0f:21:cd:49:24:72:1a:86:c8:9a:4e:09:b5:
         b6:15:a8:17:4b:e8:07:01:46:3d:76:58:9b:6b:2d:a2:ad:8f:
         d7:d8:3b:0c:24:2c:19:72:49:f6:31:eb:b6:d6:c0:36:c9:b3:
         9e:3f:80:f2:55:10:78:7c:20:05:c0:a5:1d:4d:47:25:81:d5:
         28:97:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:44:20 2026 by rpki-client