Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File:                     a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier:          1/s7CbCRtrJbUoyDAE+L/Yt53O7BdvrIYjMpB8+w+eg=
Subject key identifier:   0C:00:72:5B:70:CE:33:1D:8B:99:AE:8B:8B:5E:B5:09:E9:3C:9F:FD
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer:       /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial:       01A0D4941696786C25196A830D757A7E4898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 18:01:09 +0000
Manifest this update:     Thu 24 Sep 2026 18:01:09 +0000
Manifest next update:     Fri 25 Sep 2026 18:01:09 +0000
Files and hashes:         1: UB7uA7qZY4hotmQ_gspaCGyzzn0.roa (hash: rFiUkvV2QoRGRwKB4Ob/3EoVrYVbZPcUNtTj1otQ3PQ=)
                          2: ZthW5Kx3nnyHShrf3oe0_B7fMkE.roa (hash: 6QVqgqpQ7L5V1ofPTuomvtP1OHn9ZAgQxlpd3xTRTEU=)
                          3: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: 4cTfyQDH0lJ52I724kbefJoFrMu15HoiMiidMjEODGM=)
                          4: woWrtfbpVBQC0d9nYGwEpRD6cSA.roa (hash: LNM1xNCNG/q1EK1QvoIE7h4vxMboHIOphEup0ou6cwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:94:16:96:78:6c:25:19:6a:83:0d:75:7a:7e:48:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
        Validity
            Not Before: Sep 24 18:01:09 2026 GMT
            Not After : Sep 25 18:01:09 2026 GMT
        Subject: CN=0c00725b70ce331d8b99ae8b8b5eb509e93c9ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:58:54:c9:71:4b:9d:1d:c9:43:20:23:01:63:
                    9a:2a:be:de:99:ea:3f:55:54:64:b4:c9:eb:08:c3:
                    7e:b2:8d:5d:e4:15:93:8a:64:1f:c4:2f:63:e5:94:
                    a6:cd:85:5e:a4:37:aa:96:9d:76:8a:37:c9:fa:67:
                    44:19:30:fc:a8:74:ad:de:c6:30:5b:95:51:d3:d0:
                    0d:10:a0:9d:ca:05:21:1f:1b:86:3a:bc:72:89:e7:
                    0e:d9:6c:c3:53:40:9e:4d:bc:d4:be:9b:4f:6f:cf:
                    03:1e:67:01:45:01:8b:e1:77:df:eb:10:25:f2:5b:
                    99:1f:23:a5:5f:d1:6b:18:eb:df:fa:5f:63:9f:12:
                    35:9d:59:06:19:e1:3c:33:ce:c1:3b:8d:ef:56:c1:
                    58:65:29:2d:b8:39:75:1b:1a:b3:59:61:79:8c:de:
                    8e:4e:d1:89:73:02:49:c5:5e:b6:8a:58:df:44:34:
                    c5:df:31:71:1b:87:59:d7:c8:b6:f2:c9:59:92:e5:
                    cf:4e:f6:54:d7:39:78:19:10:97:be:79:c0:a9:07:
                    f2:1e:aa:9c:e9:87:26:a0:0a:7d:7d:03:aa:cf:cb:
                    c7:2c:57:d0:66:06:7b:ca:0c:14:95:89:e0:c5:c7:
                    27:ed:85:f0:3a:fa:16:26:cc:54:4e:9f:9b:e9:25:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:72:5B:70:CE:33:1D:8B:99:AE:8B:8B:5E:B5:09:E9:3C:9F:FD
            X509v3 Authority Key Identifier:
                keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:db:ee:84:00:86:81:01:d0:39:e6:48:56:6e:93:9c:80:4c:
         91:7a:e1:ee:9a:2b:f9:54:4b:2f:aa:b8:15:b4:ed:4d:a7:04:
         59:91:fc:2a:0f:b3:93:9c:5c:93:7f:11:5d:97:77:d2:b1:b6:
         c2:56:e8:c2:45:c5:a2:ed:51:83:0f:87:7c:a8:4b:5a:6b:15:
         e3:8e:78:f1:50:d8:10:9c:7c:a4:f5:20:c5:5a:fe:0e:e1:6a:
         c8:da:b2:fb:54:36:08:cc:19:6c:a7:e0:db:e2:0e:f3:20:61:
         c1:3e:68:3c:6c:68:91:e3:eb:fb:eb:d9:1f:b8:22:60:fa:6a:
         db:ad:69:84:2e:c0:dd:41:9e:31:fd:94:96:ca:6e:0e:78:12:
         3c:a9:ca:48:56:a1:68:e4:01:01:ef:3b:d1:89:1a:75:db:e7:
         aa:a3:a6:88:25:94:b0:29:2c:b1:c6:25:b6:6f:2f:c5:b6:62:
         e1:0e:05:56:5a:73:df:54:60:cc:84:e6:40:34:2e:a4:e6:4f:
         9a:fd:9e:24:db:20:cd:05:42:c3:a5:bc:47:52:95:d8:29:34:
         7f:5b:ce:a4:c0:13:3f:5c:80:97:4b:1d:53:6c:8a:f4:eb:cc:
         d3:ee:25:9e:4d:14:ba:91:9a:1f:e7:9e:a6:ce:3d:f5:76:de:
         18:9e:bd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:41:49 2026 by rpki-client