Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
File:                     6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft (raw, json)
Hash identifier:          b4gJDbfyQPZobuSbFqrXTxzJKX5E7LWwM+LQqLrOEiE=
Subject key identifier:   CF:25:71:EE:9E:BA:EB:17:42:6D:92:F4:8A:B0:D8:7E:36:D1:EB:1F
Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
Certificate issuer:       /CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Certificate serial:       01A0D5DED733E2E542C5A117284619EA363C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
Manifest number:          08BC
Signing time:             Fri 25 Sep 2026 00:02:26 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:26 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:26 +0000
Files and hashes:         1: 6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl (hash: ut9uEU2gKzdaA9u2f7HVrZN5u9F31pJwvwwV0ouYlN0=)
                          2: JlH896jRLkb2d5WA1iL7alFHEWA.roa (hash: bQ5f9x+Gh7jsDwuMrCzaUdl7bMeFJJYJ4dHwQqT9vtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:d7:33:e2:e5:42:c5:a1:17:28:46:19:ea:36:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528
        Validity
            Not Before: Sep 25 00:02:26 2026 GMT
            Not After : Sep 26 00:02:26 2026 GMT
        Subject: CN=cf2571ee9ebaeb17426d92f48ab0d87e36d1eb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:95:b3:5f:5c:fa:27:87:1e:2f:a4:69:cf:
                    95:e4:31:10:3c:08:4b:8e:bd:b8:d0:74:04:a5:70:
                    23:01:a2:91:52:5a:f5:ed:8c:28:41:ae:69:35:55:
                    5e:0a:bb:57:68:72:c2:6f:29:1c:ec:31:04:5a:25:
                    65:2b:88:6a:25:10:94:61:aa:47:60:ab:67:b7:1e:
                    a1:af:44:fe:ce:2b:95:19:13:36:91:8e:c7:9f:07:
                    c6:b4:b2:e1:79:7d:b9:8f:e1:59:a2:f6:ed:7e:27:
                    b1:1f:68:3e:79:c5:31:c6:ca:89:cf:89:20:aa:04:
                    f3:f7:8d:a8:92:b3:d3:b6:45:ae:8f:9e:f0:31:7e:
                    e2:0c:23:51:32:64:94:88:8a:67:ec:a1:d8:f1:0a:
                    a6:8c:c7:a5:0c:cd:0a:15:ce:22:d9:1f:b4:4c:91:
                    40:9d:1b:9e:41:35:27:8b:be:14:fb:16:76:02:5b:
                    ea:35:12:b9:8d:59:96:28:fd:81:f6:b6:50:4f:02:
                    f9:1f:0a:0e:db:26:25:8b:9e:65:c2:be:e1:c3:7c:
                    89:cb:aa:c3:62:e3:58:c4:fb:c0:5b:3f:3e:ab:fa:
                    be:25:a0:ee:89:d1:b1:63:06:ba:fb:3b:40:d3:2c:
                    2e:67:0b:b5:cd:d6:77:3b:16:e0:2f:56:67:f7:93:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:25:71:EE:9E:BA:EB:17:42:6D:92:F4:8A:B0:D8:7E:36:D1:EB:1F
            X509v3 Authority Key Identifier:
                keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:af:1b:70:6f:36:f8:9f:1d:0d:a0:9b:a7:27:0c:b6:80:93:
         0d:fc:07:23:2c:55:0e:46:04:a8:3e:4a:5a:73:80:0c:68:3f:
         93:b6:87:15:b8:2d:95:07:87:57:27:42:c5:3c:bc:80:d3:55:
         e1:f8:bd:fc:dd:30:3d:79:d9:75:36:d9:43:84:cc:41:09:e7:
         65:d6:bb:8e:23:d5:84:0c:07:b2:7e:5f:da:cf:24:db:4a:50:
         98:9f:67:6a:8b:f7:bf:f7:0c:d5:44:da:2a:9c:60:60:b6:ac:
         e8:32:a1:3b:f0:f1:57:44:e8:94:25:6f:c8:b3:36:4c:28:04:
         2d:f1:8a:3b:7a:71:e2:01:34:e9:95:48:5e:22:e7:0f:9a:d6:
         c8:c3:69:82:1e:bf:19:b1:52:31:0f:de:5b:5f:97:42:0e:19:
         95:4e:cc:76:f8:95:2e:67:9f:82:fa:db:34:7b:d1:f5:6e:67:
         a6:48:85:91:d4:f9:90:75:ed:db:05:6f:f9:5f:5d:a0:fb:30:
         ad:4a:e7:aa:6a:6e:ad:e8:d3:ea:1f:70:49:e4:d4:b1:e7:f1:
         d4:56:4f:24:43:d0:34:b2:c8:1d:ce:8e:fc:49:7c:69:a6:39:
         dd:ce:5b:e8:ae:d9:3d:11:40:ff:f9:c5:f9:c6:0e:71:d7:0b:
         71:52:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:04:37 2026 by rpki-client