Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
File:                     atlkHKRH6y4wxdtRkcFrzUdyids.mft (raw, json)
Hash identifier:          I91W4FRTKBFXSdkNGINvoE+BYevMnkkaJuyGzdI9NuI=
Subject key identifier:   EE:05:48:82:09:7E:45:2B:DC:40:1F:FF:73:95:83:51:DE:B3:BB:3F
Authority key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
Certificate issuer:       /CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Certificate serial:       01A0EB8A52356B00604B3945781E8ECAE00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
Manifest number:          19CE
Signing time:             Tue 29 Sep 2026 05:01:45 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:45 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:45 +0000
Files and hashes:         1: SaVujfTiEW7eIhJiwtzGISk3J7c.roa (hash: ojyOqfyhqMrakPrBeTa1q21z4BPjR20mz69yF35BNRM=)
                          2: atlkHKRH6y4wxdtRkcFrzUdyids.crl (hash: nAkSKx0b1Ab2F8EP3fFi5eM8fkyXZjk7lR4Tf81lSd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:52:35:6b:00:60:4b:39:45:78:1e:8e:ca:e0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
        Validity
            Not Before: Sep 29 05:01:45 2026 GMT
            Not After : Sep 30 05:01:45 2026 GMT
        Subject: CN=ee054882097e452bdc401fff73958351deb3bb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9a:36:c5:17:77:06:e6:9e:cf:83:b3:28:03:
                    42:43:22:a1:38:06:0b:28:62:ec:a4:37:9c:93:1d:
                    9a:68:6e:71:88:a1:05:e1:fc:df:06:40:b3:48:1b:
                    5a:85:41:37:3a:c6:11:c6:1a:98:7b:e4:a2:cd:e9:
                    4b:ea:f5:9c:5e:91:3c:6b:c6:ce:b3:84:80:b9:b9:
                    2d:ca:f6:f8:d2:52:96:f1:02:fd:44:1c:8e:78:9a:
                    e5:9a:7f:d4:70:b6:46:68:a0:72:5e:a4:e1:85:e7:
                    7a:b6:31:98:3c:97:3d:6e:92:6f:61:89:7e:62:4a:
                    04:88:8b:7a:e2:28:f9:4d:fc:3a:2d:dd:5d:03:f4:
                    67:38:f2:54:71:ae:3e:5e:b2:fb:86:38:b4:fc:e4:
                    1c:00:01:84:f5:7b:d3:b7:aa:ab:80:51:8d:c1:01:
                    56:ee:7e:f8:f2:ef:54:0b:a3:a6:36:f2:8d:cc:87:
                    f7:42:10:00:17:4b:e3:8c:54:71:65:fc:75:c0:5b:
                    2d:97:ba:e4:8b:a4:c3:0d:68:32:bd:e2:63:0e:f0:
                    18:de:65:fc:7b:e1:8f:61:f7:d1:ff:b9:17:a4:10:
                    2d:a6:33:6c:e5:80:13:84:27:56:61:3f:20:f3:0f:
                    02:9a:3d:91:2a:3c:81:52:82:29:03:ea:aa:2a:1c:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:05:48:82:09:7E:45:2B:DC:40:1F:FF:73:95:83:51:DE:B3:BB:3F
            X509v3 Authority Key Identifier:
                keyid:6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:36:3f:3a:39:e8:11:89:bd:9b:33:0e:af:de:a7:c9:e7:
         9e:99:9c:d5:f0:c4:7f:27:89:f8:0a:76:08:1b:15:4c:2a:1f:
         9f:03:6f:5a:9d:d8:be:0c:dd:e7:38:da:51:67:4d:4f:12:2f:
         ea:4a:f4:54:8d:50:0d:36:5e:7c:e7:66:2f:0c:8d:c0:40:fc:
         f0:37:5f:4e:f2:37:d7:9e:af:4a:cc:bc:b1:d3:93:b1:84:6d:
         a6:10:0f:37:3e:03:84:b8:c9:9d:0e:38:ee:9b:36:c4:99:cb:
         52:cd:ca:ae:41:22:ca:ec:6d:af:d9:a2:ba:40:51:69:4f:e8:
         aa:d2:aa:0e:e4:ef:18:2b:c0:ec:aa:9f:48:32:64:0c:c9:6a:
         5f:c4:9b:d3:ff:dd:10:af:b2:b0:4d:f1:25:5d:57:dc:f7:66:
         12:8a:3e:b4:68:ad:bf:b0:3c:7d:83:7d:11:35:c6:52:31:be:
         9d:30:d5:45:fb:6a:3d:88:9f:76:f0:66:86:9c:a7:41:3c:62:
         04:3c:4e:c6:81:ae:c6:20:91:94:62:ce:58:47:6a:d8:02:18:
         e9:54:10:94:c0:ac:a5:48:b9:59:b4:19:17:d4:4e:56:d5:64:
         ee:ad:ab:70:31:27:21:f3:6c:7f:9c:ea:ed:00:19:48:c4:01:
         9d:aa:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:22:36 2026 by rpki-client