Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft
File:                     6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft (raw, json)
Hash identifier:          Q+A+hPGL5whgRssDVAYg3Gzq23j+m8ggoI0cx9nMqAA=
Subject key identifier:   6B:7A:3C:8E:43:3B:C6:49:F5:71:1F:F5:56:C9:FE:38:BC:7E:FA:B7
Authority key identifier: E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F
Certificate issuer:       /CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
Certificate serial:       01A0CE5B15D6D08DE04CCC383FB9FA96E305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 13:01:10 +0000
Manifest this update:     Wed 23 Sep 2026 13:01:10 +0000
Manifest next update:     Thu 24 Sep 2026 13:01:10 +0000
Files and hashes:         1: 6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl (hash: AjTZLA0V5dyPZc2dZBnX9M8XN2pwxyCHpMAhzGil5oc=)
                          2: 8HKpRFIttIjLoRGmLM679mGFIr8.roa (hash: 6PQhizFotdhxKLg2aWvNAcYMjRnVlfJuULIXJNl0fXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5b:15:d6:d0:8d:e0:4c:cc:38:3f:b9:fa:96:e3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
        Validity
            Not Before: Sep 23 13:01:10 2026 GMT
            Not After : Sep 24 13:01:10 2026 GMT
        Subject: CN=6b7a3c8e433bc649f5711ff556c9fe38bc7efab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:44:2d:fe:34:5d:b6:91:31:43:b8:24:3e:
                    e6:ca:45:d1:46:07:59:66:c4:fb:23:35:fa:85:f6:
                    8b:b8:69:b0:e9:6d:53:f6:26:00:61:c1:fa:38:67:
                    02:2e:9a:0a:a9:6b:83:d2:04:7d:b6:82:c1:42:6f:
                    d6:28:96:5e:df:5f:cc:e6:82:bb:8e:5e:d9:0e:50:
                    2b:1b:ea:5d:3c:8e:89:72:9e:3a:cc:99:e6:ec:71:
                    68:6f:16:d7:32:69:8d:fb:76:f2:4b:62:91:7b:18:
                    0e:dc:e0:95:19:ac:20:4d:22:be:21:f1:67:ab:66:
                    c2:da:f0:f8:15:cb:de:02:91:3c:15:14:3e:44:cd:
                    eb:06:6e:27:1d:85:2a:51:3e:53:42:d2:c9:c8:91:
                    f2:bd:a5:93:6b:b4:3c:f8:5c:ff:b8:b3:4b:bd:22:
                    36:52:48:24:8c:d2:74:84:44:bc:2e:cf:a2:a8:d4:
                    d2:ad:3e:24:85:7b:22:2c:b6:b4:02:e0:65:9e:2e:
                    33:d1:55:ac:64:24:7c:2f:f4:64:b9:16:c9:31:05:
                    8d:9a:41:fa:49:d3:a8:70:ce:41:8a:ac:3a:58:cd:
                    c4:09:55:1a:ec:93:64:6a:52:bc:ee:1d:7a:30:0d:
                    24:50:c0:49:d4:30:8a:4b:f6:f3:b5:0b:a4:2d:92:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:3C:8E:43:3B:C6:49:F5:71:1F:F5:56:C9:FE:38:BC:7E:FA:B7
            X509v3 Authority Key Identifier:
                keyid:E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:c2:3e:a6:5b:bb:a9:9d:23:09:12:63:49:ef:39:f4:1b:
         55:49:56:62:79:57:be:b4:23:c8:55:21:76:03:42:19:35:c7:
         aa:f7:67:f8:62:75:64:79:77:6c:a3:60:bb:23:45:00:9b:1e:
         e2:5c:74:ec:ba:41:b4:87:94:28:3c:26:ae:27:0b:b9:44:b9:
         7f:4e:54:73:ea:c5:f8:af:12:c9:d6:e8:52:17:af:5d:83:1b:
         23:f0:2d:aa:a6:fd:46:b5:79:58:18:1e:3b:95:b8:fe:a7:90:
         93:a0:e0:55:1b:be:96:d4:6f:ae:76:d8:52:0b:9e:16:d9:cd:
         6a:4b:ae:ec:db:65:bb:4c:79:dc:a3:65:76:34:41:39:31:ed:
         1f:54:76:e1:02:28:ef:8f:5b:90:30:d3:4a:be:b7:44:93:a9:
         9a:6d:2e:a8:ce:36:9c:11:07:a4:a0:e1:44:dc:49:4c:08:4a:
         4d:0d:50:fa:03:39:65:9c:6b:60:d4:97:d8:bd:24:dc:21:2a:
         4b:42:6a:f0:ae:47:ba:f2:27:a2:9d:57:a9:35:f6:9b:1f:ec:
         27:73:19:0c:08:56:63:63:7b:41:06:ed:65:b8:cc:ef:06:0b:
         e3:15:c4:00:91:08:df:e4:11:78:20:2e:7b:b8:28:5d:c8:22:
         7e:c7:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:58:05 2026 by rpki-client