Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
File:                     6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft (raw, json)
Hash identifier:          QgJ5hFrMgAeFfI9s3iKR4SX2MaOSFdq9UC4t+sTTz6Y=
Subject key identifier:   1D:53:5F:E7:49:11:6E:A9:FA:9A:4F:07:26:B8:1B:47:B1:C8:2C:47
Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED
Certificate issuer:       /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
Certificate serial:       01A0D124DF214FF9455D35D2D72B46161C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
Manifest number:          02FE
Signing time:             Thu 24 Sep 2026 02:00:49 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:49 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:49 +0000
Files and hashes:         1: 6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl (hash: tKXWu2C6t6K9VhqSw8J0zmku6gAH8bl4AeX3JHLpvCY=)
                          2: H34_SM699ZKERT6hxcJhZ4iWFhA.asa (hash: LcP5vILTWhpM9U0pUBj8DZKaMz5evKsVfP9lC5BGBCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:df:21:4f:f9:45:5d:35:d2:d7:2b:46:16:1c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed
        Validity
            Not Before: Sep 24 02:00:49 2026 GMT
            Not After : Sep 25 02:00:49 2026 GMT
        Subject: CN=1d535fe749116ea9fa9a4f0726b81b47b1c82c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:91:af:3b:d0:38:a4:f8:d4:4e:5d:4e:db:
                    61:f5:47:a8:d3:3d:b7:a1:8d:b6:48:fc:82:8e:56:
                    36:d7:b7:d1:ea:e7:8c:ee:83:05:dd:f0:bf:36:32:
                    3d:fc:b6:cc:e3:e7:f0:b6:1e:77:4b:a7:d0:b8:7c:
                    f6:9a:9a:8b:a5:88:40:42:09:52:24:82:b5:b5:5e:
                    ab:d5:26:cb:86:b7:92:e7:b7:56:6a:1f:21:75:44:
                    64:6c:cd:d7:f9:cb:0c:b7:2c:e6:53:fc:a3:28:1d:
                    d9:84:ff:51:69:20:3f:ba:42:be:64:6c:df:2b:67:
                    c0:12:94:13:1b:c7:24:63:e7:0c:22:48:70:38:cc:
                    52:33:a7:32:e7:13:f0:d6:d6:7c:e6:0c:f1:ab:c7:
                    68:29:05:5c:b0:46:52:37:b1:f7:36:19:26:6b:d0:
                    d0:da:21:3d:4e:0c:3d:42:8c:61:6c:8d:a4:02:90:
                    65:6f:23:17:6d:4b:06:2b:af:c1:8e:5b:8e:6d:2e:
                    e4:08:bc:db:40:d5:cf:bd:1c:d8:2e:c6:a1:63:1f:
                    5e:56:ed:81:d7:08:e5:03:06:f7:5e:8d:d1:69:9f:
                    a6:17:3a:f2:4b:3c:56:fb:eb:99:3b:65:ee:5b:37:
                    83:9b:88:c4:bd:cb:11:64:0f:ac:b8:94:f9:af:c8:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:5F:E7:49:11:6E:A9:FA:9A:4F:07:26:B8:1B:47:B1:C8:2C:47
            X509v3 Authority Key Identifier:
                keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:71:86:83:38:da:6f:6f:8e:61:b4:18:c6:cd:a5:7f:6a:c6:
         2f:b1:6f:3c:46:1f:2b:7f:b6:d9:bc:40:2d:b9:a8:e2:cc:06:
         67:2a:49:4e:20:29:13:70:c1:57:6a:ac:21:55:cb:4b:30:99:
         59:bf:97:fe:67:94:4c:b7:8d:e0:e5:a2:7a:77:04:21:16:e4:
         6d:86:e5:fd:25:ec:a7:d2:e7:2b:c9:5e:7f:12:b1:75:03:c2:
         5d:33:98:90:81:db:d8:9f:3d:5a:e3:11:16:6a:3b:2a:0c:0e:
         69:f8:e5:50:2b:0f:11:bc:6e:64:cb:2f:97:27:54:69:3d:d6:
         1d:f1:a7:af:1c:db:5a:3b:8f:c1:a4:f5:93:61:8e:a1:74:6f:
         16:e3:3f:b4:2a:32:b5:ce:0e:8c:fa:eb:7e:00:20:c7:90:8f:
         d5:8f:49:9d:bf:fe:97:85:2c:f1:01:ee:1c:d5:fd:f2:08:ae:
         35:bb:18:7f:10:3e:f0:37:4e:fa:f4:f5:87:58:c8:1c:97:10:
         68:97:6d:1e:2a:3b:fa:73:5a:cd:e1:7a:06:c6:68:ea:93:55:
         d1:02:df:b0:18:fa:1e:36:7e:e6:10:85:1c:8d:d0:aa:77:97:
         8a:8e:27:56:8b:9f:4f:a4:55:3b:1c:c0:f4:7f:d5:ef:43:47:
         24:6c:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:11:31 2026 by rpki-client