Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
File:                     6p03bVRB9Is91QhRWxb-lcWhF4I.mft (raw, json)
Hash identifier:          ah+7CrUr8imIKnmuaBOQhtbObNjTdXreydFlPeSYP0U=
Subject key identifier:   B2:8C:E1:AB:2A:6E:25:9D:3B:86:5A:08:06:30:D7:32:9F:29:7F:D5
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Certificate issuer:       /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial:       01A0CD7EC0CF5BB5DC8AD2544EA0BBC2A1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 09:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:31 +0000
Files and hashes:         1: 6p03bVRB9Is91QhRWxb-lcWhF4I.crl (hash: 88R4mtvGladh9iYMRG+50UGPLEAFCy3sNfnlcRS7ob4=)
                          2: QNvj6tUUilZewAiCGmyYMu4YKY8.roa (hash: HQZTu9j4FF8eevUrS/YHuhLDP0eBM9CMdSTMPaaRMr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:c0:cf:5b:b5:dc:8a:d2:54:4e:a0:bb:c2:a1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
        Validity
            Not Before: Sep 23 09:00:31 2026 GMT
            Not After : Sep 24 09:00:31 2026 GMT
        Subject: CN=b28ce1ab2a6e259d3b865a080630d7329f297fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8a:1d:28:1b:7a:96:7e:bb:2a:7e:5e:6b:59:
                    d1:08:d2:73:a1:30:35:88:46:26:c3:3d:b0:65:8c:
                    db:fe:21:dc:6b:42:97:50:a5:7a:49:c1:04:57:26:
                    a6:f2:09:d3:68:d9:ea:d8:a4:30:d8:c1:c4:f0:d7:
                    48:8d:fa:7b:45:d2:f8:87:5c:aa:ba:c7:8c:b3:39:
                    92:f7:55:43:74:83:7d:f3:50:31:d1:4f:87:f4:a3:
                    8a:c1:ac:86:79:c5:f1:58:a3:56:c0:fb:43:a4:82:
                    c0:37:d3:a8:d6:6e:48:e6:a1:14:87:38:cf:0d:64:
                    31:48:fc:ac:31:b9:89:04:04:25:21:81:cb:e3:e1:
                    8b:81:aa:de:d2:5c:d7:49:0d:f4:bc:44:fb:6c:da:
                    06:10:da:84:54:d3:cf:91:49:ea:e4:be:d6:80:f7:
                    d8:53:35:81:b8:0f:04:bc:e5:c9:3c:ad:e9:1c:1c:
                    25:a8:c7:88:09:16:ce:88:be:4e:a1:b5:7c:ab:27:
                    f3:41:e6:21:72:63:28:66:28:9d:06:1b:35:5f:59:
                    89:a7:df:fd:ec:fb:15:67:f3:ea:73:f0:8c:b6:a1:
                    4a:6a:0b:0a:f8:e7:a5:4f:88:f8:2f:ba:df:33:c8:
                    bf:df:2f:10:7a:27:78:f3:69:13:d1:0b:36:24:49:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8C:E1:AB:2A:6E:25:9D:3B:86:5A:08:06:30:D7:32:9F:29:7F:D5
            X509v3 Authority Key Identifier:
                keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d6:d3:bc:9b:d7:94:7b:9a:7d:0e:7e:5d:f8:7e:3e:2a:61:
         01:7a:94:90:d3:2d:9a:19:0c:53:1f:db:06:d2:6d:fc:4a:2e:
         8a:10:9f:ce:0c:b4:46:61:5f:0c:4a:80:73:72:93:73:1e:d0:
         93:4d:2c:46:80:21:12:70:b1:84:da:4d:a2:58:43:fb:11:ad:
         47:d6:b1:f5:db:3e:4b:8b:01:9b:d8:2e:1e:0b:f2:02:5a:e2:
         93:54:7e:64:80:8b:0f:77:c9:25:e7:d6:af:1d:2d:4c:77:4a:
         f2:57:22:81:90:76:3e:08:bd:aa:7b:d8:66:bb:0b:64:f6:7e:
         2e:f8:b3:20:b8:4a:b1:8c:79:13:f7:dc:4f:2f:a7:55:92:3d:
         7f:1a:fb:d6:3e:70:d9:f8:05:17:92:f8:8a:b4:8a:3a:81:ab:
         52:f7:c1:98:5b:a5:43:c0:58:0a:0d:8a:be:e4:98:15:4e:a7:
         46:20:60:4a:87:89:40:69:ac:24:17:25:07:6e:cc:a4:b8:25:
         d8:07:65:01:83:92:c2:ea:fb:08:d3:e0:e2:c7:f4:8b:a1:5f:
         2f:e5:ef:b7:c2:06:04:32:d7:c7:c9:6d:26:d3:1c:5b:c3:49:
         e5:33:e9:5d:57:c1:71:aa:4d:38:d1:d2:cf:f1:17:5c:ec:cf:
         a4:d6:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:39:23 2026 by rpki-client