Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File:                     W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier:          fgJAg4gUdU64VlyP/VLgevMe3za2TwSXREmLPrmnWXw=
Subject key identifier:   56:D3:95:91:0C:B2:AE:B0:7C:B4:79:28:BF:2D:FA:F1:1D:E4:C7:3F
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer:       /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial:       01A0EB1D17B14EF350463108A1E0AF1056B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number:          0E52
Signing time:             Tue 29 Sep 2026 03:02:27 +0000
Manifest this update:     Tue 29 Sep 2026 03:02:27 +0000
Manifest next update:     Wed 30 Sep 2026 03:02:27 +0000
Files and hashes:         1: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: 39zJ7AGD9Lr3kUPjd+9RmNRX45Usjhxjznd6v7Et+mM=)
                          2: hANHew_LKnwXLhQEqSyCSLozpjo.roa (hash: dvAoBldq4IsXBYE3jIxDiPUa2vvECDMQ4VTSUJ1/ngo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 03:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:1d:17:b1:4e:f3:50:46:31:08:a1:e0:af:10:56:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
        Validity
            Not Before: Sep 29 03:02:27 2026 GMT
            Not After : Sep 30 03:02:27 2026 GMT
        Subject: CN=56d395910cb2aeb07cb47928bf2dfaf11de4c73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:16:ec:ec:06:c4:33:8e:18:3a:a9:42:a1:
                    81:2b:0d:b3:d6:63:22:a3:1c:c6:57:12:9e:76:b4:
                    96:39:fe:3b:f1:28:91:51:a7:31:b2:79:74:a3:3a:
                    f0:d5:5e:c2:74:79:ec:e7:f0:67:2d:6b:70:ac:37:
                    cc:5a:b2:05:2a:58:b5:4b:ef:34:91:15:04:80:82:
                    55:e3:be:7b:b7:45:17:9a:06:aa:81:70:01:41:4f:
                    56:3f:84:16:8f:e5:c6:bc:f2:1b:46:0b:3e:f1:8f:
                    49:00:28:83:60:91:2c:d4:26:7d:a5:52:45:cb:23:
                    60:e5:c1:43:a9:3f:ce:2d:8e:35:d6:30:57:5b:73:
                    26:43:44:11:46:49:59:9b:35:c2:b7:45:7c:f7:09:
                    22:c5:56:9f:da:f4:6c:84:a6:fa:e3:5f:13:f7:51:
                    8c:80:91:24:69:70:1b:f1:28:e4:ba:2f:ce:6b:40:
                    17:2a:ad:83:09:3c:4b:f7:5a:da:71:e5:12:05:c3:
                    49:a9:b4:fd:b3:56:19:2f:f0:f4:b1:d8:45:49:b5:
                    37:6b:90:2b:11:68:bf:ac:ec:d3:c3:a7:56:09:6e:
                    dd:5e:e2:67:76:d5:28:54:3d:2b:d2:ae:cd:43:65:
                    3e:c7:4d:b1:a8:af:34:a6:92:4a:f1:4d:71:df:5d:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:95:91:0C:B2:AE:B0:7C:B4:79:28:BF:2D:FA:F1:1D:E4:C7:3F
            X509v3 Authority Key Identifier:
                keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:72:0d:97:84:df:24:f3:71:26:b6:8c:4c:00:93:ec:ab:0c:
         9a:2e:b2:60:4e:89:ba:ff:56:53:6e:8d:69:d4:70:f6:58:a4:
         5c:a7:69:9d:0f:17:a8:03:05:55:da:3d:41:89:fa:16:60:74:
         51:dc:20:46:e0:8e:c6:f5:34:92:de:58:0b:85:55:3b:38:0e:
         1d:10:72:3e:66:bc:19:95:d6:1f:2d:38:63:de:de:16:8f:4a:
         5d:1d:8b:73:bb:5d:8b:5d:6b:c2:6e:a0:98:0b:5a:41:37:5e:
         2b:bf:bd:63:ff:84:3a:9a:88:5e:91:80:a6:43:37:9a:1a:83:
         17:3e:0b:6a:80:b1:be:2d:88:3f:dd:27:ef:e7:10:c8:a2:8d:
         9d:64:3c:40:b5:75:86:d4:9d:73:ad:3b:e7:73:c0:35:03:42:
         44:34:09:07:b2:0b:b4:f1:82:4d:b3:0d:bc:a7:3a:06:f5:a0:
         fe:4d:cb:0f:47:35:6e:cc:63:63:50:2e:37:c4:59:64:04:39:
         62:56:56:59:b8:11:d8:71:e9:f5:40:6f:9e:5a:fe:5c:af:36:
         59:a3:97:c6:4b:f8:ce:b7:3f:51:38:71:ea:32:c7:8f:5f:9c:
         9a:6d:ea:6f:87:e6:6e:45:d3:6a:1c:75:f7:6c:47:6d:4d:89:
         03:0a:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:17:02 2026 by rpki-client