Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
File:                     6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft (raw, json)
Hash identifier:          95NvuU9WpC9EtTnt2sDMur/UaBk559aGnzeAKVbQ4f8=
Subject key identifier:   FA:DA:0F:28:D8:46:53:7B:CA:76:42:D6:39:43:C1:69:1B:CF:E5:74
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       01A0D5A6CC6094AD9F7A8E1CB5990075AE46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
Manifest number:          141A
Signing time:             Thu 24 Sep 2026 23:01:13 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:13 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:13 +0000
Files and hashes:         1: 6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl (hash: SzOvZIeF7oGmabYEjYFnJtNf9L74+V9EnJxSijDw7E8=)
                          2: EeCRzoR4nazEsh_3JHs5ATYajN4.roa (hash: OfDGT87U4vjn+M5c9D5VS04RxDEM9rWVa6tSfAOjeLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:cc:60:94:ad:9f:7a:8e:1c:b5:99:00:75:ae:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: Sep 24 23:01:13 2026 GMT
            Not After : Sep 25 23:01:13 2026 GMT
        Subject: CN=fada0f28d846537bca7642d63943c1691bcfe574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f3:2c:52:9a:1e:d1:6f:29:f4:d1:7a:7f:ed:
                    5f:5b:04:e7:4f:3b:b0:f6:e8:8b:a4:05:32:c8:2f:
                    ad:67:cb:52:18:91:63:81:a2:0c:2c:e8:0a:d4:bb:
                    8b:5a:37:cf:1e:99:21:42:10:31:f8:8c:dc:63:fe:
                    a3:ab:b5:0d:cd:76:70:71:2c:ef:58:bd:91:96:bc:
                    3d:b7:06:c7:a7:65:c5:0e:20:f1:9b:77:c9:41:f4:
                    f8:27:a3:af:fa:57:4f:3f:6e:2d:6c:94:29:ea:d9:
                    08:eb:8d:a7:08:ee:1b:15:ff:5a:af:87:b4:99:8a:
                    66:9f:9c:6b:86:07:c1:0d:0a:2c:3e:ae:5f:c4:64:
                    f2:3c:fa:1d:4c:52:a5:f5:4d:f8:10:17:3b:d1:ee:
                    3e:e3:45:e6:ba:6d:ab:00:e5:4f:96:07:af:54:a7:
                    c7:e8:f7:14:c9:b3:c9:99:c7:a9:a6:54:3b:50:03:
                    a7:4c:6a:70:30:0d:0a:d4:fe:83:ab:73:86:28:28:
                    c7:b8:5e:e3:52:72:cc:24:42:f8:98:76:b0:6e:ad:
                    b5:b0:5f:c2:26:fd:8d:12:2b:10:1b:db:a7:3c:65:
                    68:35:bf:46:79:79:21:ed:78:88:6b:da:d0:64:97:
                    9d:0f:e8:78:5b:25:d1:db:3f:66:3a:7b:dc:e5:e4:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DA:0F:28:D8:46:53:7B:CA:76:42:D6:39:43:C1:69:1B:CF:E5:74
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:53:b5:40:3d:de:b8:70:9d:79:06:c5:2c:6c:6e:f5:c5:
         df:04:71:a5:6e:32:e4:46:69:43:43:48:a9:19:d2:cb:eb:78:
         2d:70:ec:28:2a:32:85:0b:a2:36:2c:92:da:9f:6e:4f:88:ae:
         91:d0:96:78:c0:4a:1c:3b:62:71:58:46:74:70:6b:81:57:86:
         e3:92:e5:76:4a:99:4d:92:4b:be:50:6a:82:6e:c5:bc:91:a8:
         b3:80:c3:cb:f3:22:72:0d:a5:60:77:67:18:73:a2:52:11:ac:
         cb:48:8c:ec:e9:10:a9:f8:8d:6e:7b:9e:8f:86:56:07:fa:03:
         ab:7e:ef:9c:bc:af:e5:70:4f:08:c0:49:0b:0e:16:5e:75:bc:
         eb:b9:70:aa:93:b9:e4:4a:5b:55:5f:53:79:b2:11:5e:0d:5a:
         4b:ed:cc:67:0f:a3:6c:48:df:37:88:39:ed:32:d8:4f:25:d8:
         1e:79:3f:00:0c:cc:18:1a:1e:cc:52:31:30:6c:34:6a:3e:10:
         31:17:f3:7f:bb:e4:89:b4:cb:29:af:20:e8:0e:f9:b5:a3:6e:
         43:db:e2:bb:78:9c:47:75:da:84:1d:d8:73:d9:38:07:24:77:
         f4:24:74:ee:33:49:3e:5a:42:22:50:00:f9:be:30:b8:28:c4:
         c4:20:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:36 2026 by rpki-client