Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
File:                     a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft (raw, json)
Hash identifier:          J++dPYfSSeGeblZNhth7biHCHHGjdJTRvnYNYIdBwSQ=
Subject key identifier:   16:A9:0D:B9:DD:43:19:B5:62:A8:40:B5:8E:21:C4:91:CA:E9:5B:D3
Authority key identifier: 6B:A9:AF:8C:1F:5F:59:94:53:A6:07:72:21:83:6F:BA:A8:10:BD:78
Certificate issuer:       /CN=6ba9af8c1f5f599453a6077221836fbaa810bd78
Certificate serial:       01A0D53964A70943377985A7B774D765943A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
Manifest number:          0163
Signing time:             Thu 24 Sep 2026 21:01:43 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:43 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:43 +0000
Files and hashes:         1: SuLs_JmSCQ9hnQLRMQSEc9KfjKE.roa (hash: q61fVl8G0xd8YOxD/9y87v0yu9OdiosdP3gG41Oey+8=)
                          2: a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl (hash: 3iSasFycUp4ja6W3SRJmAMFOvRKFHFCGVHTTv+4asVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:64:a7:09:43:37:79:85:a7:b7:74:d7:65:94:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba9af8c1f5f599453a6077221836fbaa810bd78
        Validity
            Not Before: Sep 24 21:01:43 2026 GMT
            Not After : Sep 25 21:01:43 2026 GMT
        Subject: CN=16a90db9dd4319b562a840b58e21c491cae95bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:57:8b:92:81:4c:ac:d5:9e:54:2d:ba:2f:
                    de:82:d4:f1:57:14:99:71:ec:97:15:de:23:5c:4e:
                    2e:a6:81:46:7d:81:fe:46:3a:d8:b6:07:ed:fe:a4:
                    f0:b7:20:27:3d:18:b7:c3:35:c2:b8:ff:16:ad:73:
                    4e:49:5a:8f:8a:1f:47:be:18:be:1d:8c:01:2d:6c:
                    db:92:69:ec:ee:7f:53:41:63:10:64:3d:fe:2e:26:
                    9b:3f:ef:be:13:b5:46:db:7b:9a:7d:cd:a9:22:8c:
                    6f:0f:e9:9f:ef:c2:09:c0:1c:91:7a:66:d9:83:38:
                    7d:a3:fd:de:f7:8e:a9:14:f5:0e:8e:1a:af:48:88:
                    30:67:b3:97:92:1d:d2:58:62:49:59:7e:19:a6:e8:
                    57:af:45:fd:eb:51:74:f4:f8:ea:1b:55:cc:37:29:
                    b4:a9:fa:8b:2f:76:da:1d:af:98:b1:76:57:7b:c5:
                    22:10:d1:14:01:df:13:b0:cd:11:17:c6:a8:68:3e:
                    84:5b:29:6c:34:22:56:b2:f1:67:89:df:63:c8:63:
                    65:9b:de:55:b7:fa:36:a5:ff:e0:a6:d2:e9:99:78:
                    93:79:2a:75:ee:d8:ce:67:9b:48:f9:12:d1:a1:e5:
                    05:58:48:b6:d5:e9:7f:5f:c1:87:71:14:8f:76:1b:
                    f8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A9:0D:B9:DD:43:19:B5:62:A8:40:B5:8E:21:C4:91:CA:E9:5B:D3
            X509v3 Authority Key Identifier:
                keyid:6B:A9:AF:8C:1F:5F:59:94:53:A6:07:72:21:83:6F:BA:A8:10:BD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:54:4a:49:df:87:54:35:29:c8:fc:8f:69:d9:a0:3f:7b:4c:
         8f:15:28:ff:c1:f5:07:0f:e8:c9:10:0a:79:12:ad:9a:f4:67:
         6c:ea:b4:30:b7:dc:c8:bd:8c:d5:6f:ff:4a:54:79:33:7e:54:
         41:68:9d:e0:b0:d1:b0:63:e1:58:f8:19:c7:39:ea:93:33:b1:
         44:8b:0c:c7:9b:5b:1a:03:1a:8b:97:50:eb:44:bf:40:33:43:
         35:cd:04:65:81:60:e4:18:99:aa:5c:5e:7c:31:42:6a:40:b1:
         28:88:c2:42:3c:44:24:13:a1:bc:ec:e6:af:0e:63:19:dc:e6:
         5f:ce:84:c9:42:4d:b2:55:3d:8a:61:3b:11:59:c3:30:fa:b3:
         e3:52:b1:32:a0:ee:ff:d8:a6:d1:50:76:b7:8a:52:24:f3:9f:
         ef:e7:f0:92:f2:7c:6e:ba:75:d4:bd:90:25:eb:91:e2:fa:47:
         1b:9e:27:09:20:ac:55:79:2c:9a:4f:a4:53:10:dc:18:95:45:
         8a:46:ea:22:86:fd:7e:d8:77:c2:0a:e8:7a:ab:de:ea:88:68:
         5d:e4:6f:54:7b:be:bb:2c:8d:be:c3:a6:ef:0f:22:05:27:00:
         01:98:3c:5f:67:f8:1c:00:64:84:09:ce:96:07:43:6d:96:16:
         d4:b2:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:16 2026 by rpki-client