Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File:                     6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier:          tSvJ1Pyd7vz8nr9DwN/7ue+WY8r0JcmV31Q6JzlF5wY=
Subject key identifier:   0C:1A:40:D2:C4:B4:34:44:6A:C1:24:75:BC:6B:F9:FD:4D:06:B4:54
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer:       /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial:       01A0D803FCC5C720850E6F9AC2208D12980B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number:          0813
Signing time:             Fri 25 Sep 2026 10:02:14 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:14 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:14 +0000
Files and hashes:         1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: CosOQMlK0tQ8vPtDcAnZrIXql4GYV/i/Uyb6sFvrX1o=)
                          2: XXpcSIWvTG-ujhC6WFKAP7xbCew.roa (hash: 8DYns3VAIMoO5AUluTPjCUWoA3CUpaSLrzipyJ93fJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:03:fc:c5:c7:20:85:0e:6f:9a:c2:20:8d:12:98:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
        Validity
            Not Before: Sep 25 10:02:14 2026 GMT
            Not After : Sep 26 10:02:14 2026 GMT
        Subject: CN=0c1a40d2c4b434446ac12475bc6bf9fd4d06b454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:d1:72:13:0c:02:1c:0c:b4:0d:70:5c:8a:
                    33:c3:c2:a6:0e:8d:86:b3:e5:74:02:cd:6d:25:e8:
                    33:04:80:d1:45:c5:d0:66:95:61:e2:b7:6d:a8:d8:
                    04:13:c2:d1:48:30:e7:b6:48:30:6c:5e:49:5f:fb:
                    97:29:3b:ec:40:3f:e0:f1:39:5b:bb:25:f2:f1:fa:
                    07:5c:8a:0c:10:fb:da:f1:27:82:d8:b8:45:6a:2d:
                    5c:5d:ff:16:68:d7:66:28:77:87:51:eb:79:d8:2d:
                    db:04:a7:1a:01:fd:f9:48:79:50:4d:f8:74:be:f8:
                    54:4e:a9:fb:3b:88:26:1d:34:00:ff:54:fe:3f:78:
                    f9:f7:08:a1:3b:b0:5b:3c:2a:0c:c4:20:23:77:2e:
                    21:62:c3:fc:85:34:a5:a5:9c:bf:a5:17:b3:1c:18:
                    36:7c:93:59:e3:f9:51:f8:04:c5:97:a3:b9:dc:4d:
                    44:2c:3e:4e:79:07:4d:09:f9:a7:f2:85:93:2e:53:
                    99:a0:04:44:55:40:03:8d:8f:57:0d:6c:27:5b:16:
                    fd:da:22:51:5f:aa:38:be:35:b6:64:2f:9c:30:6d:
                    7b:0c:6f:7c:a5:57:23:5e:fd:9b:2f:b6:7a:e3:27:
                    24:3c:66:92:b0:b6:1d:77:31:25:72:7d:bb:75:aa:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1A:40:D2:C4:B4:34:44:6A:C1:24:75:BC:6B:F9:FD:4D:06:B4:54
            X509v3 Authority Key Identifier:
                keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:c7:26:0e:bf:99:ec:98:7a:be:42:cb:a5:8b:9b:49:dd:
         1f:81:34:91:8c:9a:b1:fd:db:f0:77:66:ea:d9:4e:0e:70:8c:
         99:9a:9d:b3:c8:86:be:34:b1:46:d7:ba:bc:b4:28:5a:90:4e:
         37:54:c3:d5:f6:53:02:49:21:a5:62:be:af:01:9f:af:92:96:
         9f:91:34:d9:1f:86:3d:93:d8:79:77:b7:35:88:97:0d:18:d4:
         8d:be:f1:da:d4:17:b5:fd:97:7b:b5:e3:98:c8:9a:56:f0:ab:
         b4:b2:43:65:8c:1c:b8:17:57:69:85:fb:72:3a:e5:b0:47:cf:
         ed:83:a0:86:70:96:8f:6c:e0:e4:16:16:94:c8:94:72:d3:38:
         b3:e7:c6:29:2d:bc:c8:23:d3:e0:0c:78:a9:c1:60:60:12:7f:
         c9:fc:5f:c7:cb:4d:8c:b3:89:10:06:b6:2a:a3:e5:b6:08:6c:
         60:5c:fe:81:90:ef:44:52:70:88:51:e7:eb:d4:15:34:28:0a:
         9f:5a:86:11:be:41:0b:f8:c2:e9:35:ae:ec:d2:cb:e1:91:85:
         e5:44:f4:bd:e0:bb:d6:67:36:fc:7e:dc:3e:16:8c:21:87:23:
         13:bb:f8:21:ee:ca:d8:0a:c2:a4:52:55:53:59:5a:c7:79:52:
         42:7d:40:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:14:10 2026 by rpki-client