Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
File:                     6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft (raw, json)
Hash identifier:          aM2dtWainzC8UGGMzGDP+HMh4IePatVKS9pMKlW+TVY=
Subject key identifier:   CE:FB:BE:FF:26:15:E7:88:E3:CC:A2:CA:61:35:00:06:CA:7B:69:7F
Authority key identifier: E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96
Certificate issuer:       /CN=e82befec706eed277a9d98f70bb3fb66849bf296
Certificate serial:       01A0DCBBA87F4062A5851831C9DCB2E7F2E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
Manifest number:          1389
Signing time:             Sat 26 Sep 2026 08:01:20 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:20 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:20 +0000
Files and hashes:         1: 6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl (hash: ToCzamjuc6oYWUVy1lQ2MYXVGZLILPG6nUt8kYDBNKY=)
                          2: oBzHyyxslIWYAlgzEZmuiGQNdh4.asa (hash: SArG3TIu0q9Uc8eXHUWtZtgsSxdPEklj/U/czLGX10g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:a8:7f:40:62:a5:85:18:31:c9:dc:b2:e7:f2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82befec706eed277a9d98f70bb3fb66849bf296
        Validity
            Not Before: Sep 26 08:01:20 2026 GMT
            Not After : Sep 27 08:01:20 2026 GMT
        Subject: CN=cefbbeff2615e788e3cca2ca61350006ca7b697f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:97:bd:29:41:1a:32:4f:fd:de:31:40:6c:
                    a2:af:26:18:0a:12:15:96:22:81:1e:39:30:1b:b5:
                    84:90:25:58:39:0f:4f:c5:8a:c2:06:e9:3d:d9:8a:
                    cd:64:98:18:f1:23:7c:a5:84:dc:dd:86:56:08:35:
                    88:24:63:28:7e:9a:75:c1:86:f7:4e:c7:9d:70:ef:
                    5e:16:d5:18:b5:03:48:35:9a:90:b8:1a:90:32:82:
                    56:1d:1d:ba:94:1e:87:93:96:87:52:8f:e5:39:31:
                    0a:a1:e6:4b:3e:3b:e9:95:c5:79:a9:84:03:11:3c:
                    90:2c:47:7b:b6:d6:5a:95:92:64:89:d7:42:25:d4:
                    33:ba:2c:7e:44:21:89:88:96:f3:76:55:10:a1:44:
                    7d:ec:2c:cb:8d:be:aa:ae:5f:1f:71:af:da:74:af:
                    03:d5:ee:47:92:ed:53:92:40:cf:31:ea:60:aa:cd:
                    08:41:5a:e4:48:82:7c:cf:89:7b:66:05:4c:a1:e2:
                    6d:18:5c:13:dc:0e:79:f3:e2:e6:bd:72:36:66:28:
                    df:8f:a2:59:e0:b2:02:bd:27:9d:34:b2:3a:ba:55:
                    70:6f:fa:35:2f:c7:9d:0d:04:bb:33:44:66:98:d8:
                    ec:7f:3b:5a:5d:f3:e4:33:24:c9:0f:01:d6:3f:0a:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FB:BE:FF:26:15:E7:88:E3:CC:A2:CA:61:35:00:06:CA:7B:69:7F
            X509v3 Authority Key Identifier:
                keyid:E8:2B:EF:EC:70:6E:ED:27:7A:9D:98:F7:0B:B3:FB:66:84:9B:F2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9efbc2-fc19-4aea-99ac-25d6bb929278/1/6Cvv7HBu7Sd6nZj3C7P7ZoSb8pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:dc:9f:45:5f:fd:5b:ca:01:83:70:89:08:05:52:9e:d3:
         d7:18:1e:8a:52:94:16:85:7e:ad:ad:3b:d9:f5:44:62:77:97:
         a6:8a:bc:38:b9:d4:72:ea:cb:95:b6:43:2c:4f:2c:e3:0f:f8:
         24:66:24:de:27:c7:06:52:b0:b3:de:1d:0f:0a:a5:4a:e5:92:
         f5:15:f2:0e:bd:d5:84:09:a9:2b:e4:8b:73:2e:64:a9:b1:9f:
         27:68:8b:f5:6d:5f:86:f2:9b:bd:63:f1:1e:59:ab:bd:75:51:
         c7:f3:4e:1a:b8:ed:b6:2f:2d:eb:bd:5f:1c:4e:3d:c8:6b:83:
         20:8a:e0:e0:78:8e:71:cb:7b:29:52:7a:5a:be:27:84:84:c0:
         54:e1:6e:f6:2d:7c:2f:d4:a9:85:53:55:dd:e9:93:c6:4b:4d:
         a0:0d:73:4c:46:4e:9d:f6:ac:4c:d4:5a:21:c1:3a:50:b8:81:
         d5:42:72:78:a8:65:4a:89:99:51:7a:5c:fb:09:e8:ea:b1:13:
         55:a9:e7:14:91:23:f5:75:53:1c:fa:37:2a:db:62:84:0d:5a:
         0d:19:0f:b1:14:d1:d6:2a:1c:ef:f5:48:43:14:25:ef:36:9d:
         77:01:d6:56:1f:dc:7d:33:e7:9f:33:5f:81:c0:1f:4f:5a:b0:
         99:bf:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:06:41 2026 by rpki-client