Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File:                     6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier:          SJzedh5HydqZXt9VSOHJ6NPLIb0mSfUhKB3aBxXgzNo=
Subject key identifier:   91:86:CA:86:E1:8C:45:F5:E9:4D:08:8D:AC:5B:64:77:B6:46:96:0E
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer:       /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial:       01A0D61473B1D51F33D01672AC06D1FD5FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 01:00:59 +0000
Manifest this update:     Fri 25 Sep 2026 01:00:59 +0000
Manifest next update:     Sat 26 Sep 2026 01:00:59 +0000
Files and hashes:         1: 1-quYAX1e2xMuXG1XZHhkVrSpN6o.roa (hash: gQVn7LcHVn6YzYbu2O0/PngZI44IDyST76HSsOuOBlA=)
                          2: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: uZgcZx5R1dVLnxLCv+24PO33gPgjso/tpjlcfsnQtls=)
                          3: Ls9dkhxKZKZbqNMb6NwBB1QxV6Q.roa (hash: 5fQoz0kcnz6D8oNLQ3Oczd/jkOG9uDcL5uCwP3zxEMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:73:b1:d5:1f:33:d0:16:72:ac:06:d1:fd:5f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
        Validity
            Not Before: Sep 25 01:00:59 2026 GMT
            Not After : Sep 26 01:00:59 2026 GMT
        Subject: CN=9186ca86e18c45f5e94d088dac5b6477b646960e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:52:c5:b7:61:1c:9c:9f:9f:4c:aa:f7:d6:03:
                    60:73:cc:12:b9:47:ff:b9:66:10:90:2b:ee:a6:f6:
                    0f:2e:82:01:8c:b6:46:bd:cc:18:dd:d1:f1:51:88:
                    03:cb:71:84:08:78:dc:19:b2:2a:b9:19:93:df:44:
                    2d:2d:36:ec:dc:2f:b1:b4:ed:6f:cb:e8:44:11:5c:
                    28:66:58:af:29:55:bb:af:a6:ad:7f:e0:e6:0c:e7:
                    6b:7a:5e:ef:db:b2:0b:d7:81:7c:44:5e:ee:e9:c0:
                    52:57:76:3f:48:81:bc:5e:bb:f4:9a:03:7b:15:78:
                    95:ab:dc:08:09:16:87:e7:f5:34:0c:d1:c7:f8:5a:
                    9a:a6:96:75:1f:8a:ad:f0:a4:80:22:18:41:79:9e:
                    ed:b2:74:1d:58:92:bc:a0:bc:bd:cb:9e:d5:aa:84:
                    3f:b8:f3:d0:2e:97:0b:71:2e:06:8c:fb:71:1a:3e:
                    ef:11:07:4b:01:dc:1c:67:d9:26:08:c1:a9:be:d2:
                    fa:d1:4c:30:8e:68:25:23:55:53:8b:1e:7d:a2:e2:
                    66:16:aa:b0:6b:ad:03:83:9e:72:27:c1:2f:c8:24:
                    47:79:5a:af:09:be:ee:11:44:af:a9:22:0b:04:a2:
                    67:a9:49:b7:a4:d4:35:80:0c:0c:46:18:97:8a:34:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:86:CA:86:E1:8C:45:F5:E9:4D:08:8D:AC:5B:64:77:B6:46:96:0E
            X509v3 Authority Key Identifier:
                keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:77:8e:fb:9a:b9:63:8d:13:9d:7b:3c:6e:8a:98:d6:10:
         e3:07:62:13:97:68:7a:43:29:b3:13:32:8a:0e:df:9b:07:5d:
         73:3f:b4:ed:b6:ee:76:57:50:5d:15:32:03:96:d2:1b:5c:9c:
         11:0f:d0:9d:a5:3f:1c:47:8c:66:9a:f6:6e:43:76:3b:6d:9b:
         f4:ea:09:37:67:66:1c:cc:f8:d1:72:4f:0d:b8:4c:4b:6e:84:
         05:f3:17:49:f5:10:c2:d1:88:ad:d6:69:5a:aa:23:71:17:8a:
         91:f0:96:eb:75:21:f3:22:73:a4:d4:2e:93:47:06:7a:b0:6c:
         e4:d0:b6:a4:95:ab:de:10:ed:8b:0c:ec:36:08:05:d0:70:a2:
         0b:a1:9f:83:3f:44:71:12:bd:99:5b:ab:39:3c:ae:44:81:a6:
         63:e8:fc:1c:ba:ab:5a:86:5e:50:68:d0:e8:8e:82:a2:26:05:
         a2:20:8b:13:e3:b3:72:3b:4f:ea:ef:ea:4c:26:62:8d:5b:73:
         83:77:85:04:09:58:e4:e2:3d:e6:bb:33:d9:c4:5f:51:f7:f2:
         2c:f4:dc:56:57:90:07:99:b1:9f:6b:3c:e0:da:b7:3e:3d:62:
         57:f6:a8:32:44:fe:dc:dc:7c:7a:b3:cd:9b:05:e1:40:b8:61:
         47:57:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:56:05 2026 by rpki-client