Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File:                     M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier:          5sT1uq9F/F95IaifQgCNHI/7vF5efhFSsMitUbgH0Zk=
Subject key identifier:   E3:8C:6D:EA:2F:7D:8A:7D:37:10:05:70:94:CF:93:07:DF:90:39:9C
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer:       /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial:       01A0DD295EE6879F5B41FC721B8F9064844C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number:          0260
Signing time:             Sat 26 Sep 2026 10:01:11 +0000
Manifest this update:     Sat 26 Sep 2026 10:01:11 +0000
Manifest next update:     Sun 27 Sep 2026 10:01:11 +0000
Files and hashes:         1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
                          2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: rQjdb0nobehTpZZl/qV9LGytDZ888jOAO5if/K6s2ok=)
                          3: X-2N1a5UxbTy8UiT9fJ_Ncm8URk.roa (hash: nD4QapFvX1Fl/0WBxavjE2vvK1teC2/+MXL6kQWr5E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:29:5e:e6:87:9f:5b:41:fc:72:1b:8f:90:64:84:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
        Validity
            Not Before: Sep 26 10:01:11 2026 GMT
            Not After : Sep 27 10:01:11 2026 GMT
        Subject: CN=e38c6dea2f7d8a7d3710057094cf9307df90399c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:13:d5:7c:4b:4d:98:db:8b:60:00:9c:29:4e:
                    db:13:4e:b8:2a:69:c5:94:61:5a:63:29:13:4b:ce:
                    7c:d9:c2:5e:47:ba:58:dd:85:c6:1a:33:9c:e4:fb:
                    d8:e1:d6:7c:cb:18:e3:b7:b4:a6:fd:83:e1:11:2b:
                    1b:44:a7:49:ff:13:d2:c3:17:d6:1a:31:88:ad:d8:
                    4c:68:dd:41:b2:f7:24:09:f9:4c:eb:87:48:dd:ca:
                    ac:6a:d7:b8:6d:ac:c4:6a:8f:c4:3d:0a:fc:12:e2:
                    3d:f2:9a:3a:55:c2:4f:f0:a2:d4:ce:37:eb:3e:ed:
                    f9:4c:37:16:7f:29:0b:60:a7:f6:f7:c2:86:b2:33:
                    f7:d2:71:ab:7e:8c:e3:16:4c:97:47:c0:85:c2:40:
                    79:23:e9:db:c8:51:b5:0e:36:d5:f8:ec:4e:af:2b:
                    3e:b5:11:ca:3e:fa:87:16:05:4a:6a:93:5b:2f:f5:
                    37:f9:8f:84:b3:34:82:18:f9:33:3a:cf:91:c1:1f:
                    28:7d:55:5c:6c:07:bb:60:d0:3a:ee:fd:81:18:41:
                    70:81:23:2a:97:fc:29:46:ea:ea:9d:05:7d:57:8e:
                    8d:4d:9d:3a:5d:39:5d:36:ff:1a:b6:ba:aa:2f:c1:
                    b7:06:26:c7:73:66:93:cd:c0:bf:8a:1d:d6:da:4b:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:6D:EA:2F:7D:8A:7D:37:10:05:70:94:CF:93:07:DF:90:39:9C
            X509v3 Authority Key Identifier:
                keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:88:01:0f:38:de:39:a9:a0:78:bd:3c:4b:24:ed:5a:1b:
         c5:01:61:4d:dd:bc:0a:4b:3b:92:4b:89:22:cb:60:e3:57:8c:
         28:ae:f4:54:ed:b2:d9:8b:2b:10:74:eb:7d:32:b3:25:c9:48:
         76:13:d1:77:88:f9:30:25:c8:07:51:3c:d8:34:ff:cf:e6:46:
         fe:08:5f:3a:c8:77:a5:13:2d:7e:51:86:1d:bd:90:11:5d:e2:
         52:b4:ba:32:73:8c:a7:3b:69:3d:09:7c:e9:0a:26:44:e3:1f:
         0d:ba:4b:68:95:13:6b:61:f1:4b:bf:80:87:dc:c0:18:f1:32:
         77:d4:c5:ca:d4:47:c5:4c:b6:15:92:e7:02:78:2d:d4:d3:4b:
         5b:15:5e:23:68:bb:25:fb:2c:f1:95:3d:d7:38:9e:db:65:75:
         f7:7e:c9:68:7c:32:16:da:64:04:b7:4b:b0:ee:fb:15:42:bd:
         cb:c2:ab:d0:14:b3:57:07:5c:76:de:73:df:d7:14:f5:7b:51:
         84:8d:1f:d1:d6:9a:cc:7f:9d:a1:21:40:e1:7f:ea:d4:cb:11:
         c3:d6:ed:12:f5:aa:13:31:3b:ac:b3:85:14:1f:1c:a7:ac:3e:
         94:13:da:13:b0:b3:2e:c9:64:43:12:bb:1e:53:cd:21:d4:bf:
         f4:2b:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:22:44 2026 by rpki-client