Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
File:                     S6P83Yf0VkMMzLLYY45hSM06Euw.mft (raw, json)
Hash identifier:          m1ks9ISYpm76QdBeTCh/xllzOni9FcZiFQc79HB7Obk=
Subject key identifier:   7E:00:2F:E5:FE:37:81:69:57:A1:3E:6E:F3:C8:83:F8:0D:FD:69:7C
Authority key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Certificate issuer:       /CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Certificate serial:       01A0E0622342F495FE2DC25FCC9D376E7B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
Manifest number:          165B
Signing time:             Sun 27 Sep 2026 01:02:02 +0000
Manifest this update:     Sun 27 Sep 2026 01:02:02 +0000
Manifest next update:     Mon 28 Sep 2026 01:02:02 +0000
Files and hashes:         1: S6P83Yf0VkMMzLLYY45hSM06Euw.crl (hash: RURr/QcudsBhElvvTgS+3m/8nST7/GLei0KpxzI+ENw=)
                          2: e00t2uQN2x6AALR6Zv-pMtX9Uso.roa (hash: 2VUUHmJNv7sW4c7eLdBTCaF2NFHtBH7birXANxXDVxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:62:23:42:f4:95:fe:2d:c2:5f:cc:9d:37:6e:7b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
        Validity
            Not Before: Sep 27 01:02:02 2026 GMT
            Not After : Sep 28 01:02:02 2026 GMT
        Subject: CN=7e002fe5fe37816957a13e6ef3c883f80dfd697c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:dc:bd:1e:af:1b:df:00:b9:0f:8f:6b:81:
                    c0:52:d1:6c:c5:1a:b0:b5:a6:a9:70:da:b2:81:d3:
                    fa:2c:18:79:f2:0f:ba:f7:33:9f:25:fe:53:49:61:
                    e3:11:a0:a8:03:e4:67:dc:c0:bb:09:88:a0:3a:3d:
                    0e:d0:0c:88:9a:a2:48:47:c8:a5:c2:d1:54:01:6d:
                    20:4b:b9:21:5f:d6:91:19:5e:db:a9:2c:01:e3:73:
                    bc:8d:64:ba:f0:1c:e7:ac:6b:23:22:4a:e4:cd:f1:
                    26:0e:b8:64:a2:98:92:51:62:d8:1c:4f:0e:89:cc:
                    45:63:8f:19:60:f4:92:db:fa:2f:77:77:11:9b:cd:
                    91:6b:8a:51:30:ed:b4:ee:87:2d:13:7f:5f:5a:22:
                    f5:d5:7e:cd:83:84:a9:c3:39:a7:7f:ba:46:03:0c:
                    45:e1:64:3b:8f:33:1f:d8:8d:6c:f7:d4:bd:4c:98:
                    8b:8e:47:44:35:f4:6c:e7:79:f5:a7:9c:c1:71:72:
                    7f:87:f8:7d:ea:aa:6b:c3:e8:cf:8e:15:af:d3:c0:
                    86:55:97:16:da:ec:e0:f3:43:ec:08:f2:2c:ae:98:
                    72:07:00:7c:b3:56:71:3e:6b:27:5b:a0:a5:54:86:
                    c2:c4:a5:a7:cb:0d:13:ad:90:c7:dc:ba:7b:0a:56:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:00:2F:E5:FE:37:81:69:57:A1:3E:6E:F3:C8:83:F8:0D:FD:69:7C
            X509v3 Authority Key Identifier:
                keyid:4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:95:ca:64:0b:28:1f:7c:53:9b:f8:c1:d2:bb:00:7b:ab:3c:
         3e:b7:5c:fb:52:7d:ab:9b:74:75:ee:fe:e8:4f:f8:64:f4:ab:
         f5:5e:e6:6f:5c:af:9f:42:d5:65:a7:58:00:07:60:da:3c:70:
         7a:62:0c:11:a3:a5:53:8d:22:f7:25:27:bc:5a:eb:67:42:8c:
         4c:0d:64:83:e6:20:2b:9c:de:c2:4b:83:07:31:71:10:fd:db:
         f4:74:75:ee:33:d1:5e:2a:d9:67:bc:f8:2d:bc:67:76:ca:f0:
         c1:4b:c9:9d:a3:2c:e4:87:cd:6a:83:a6:9d:72:e1:0e:a9:d9:
         26:1d:aa:7d:2c:59:bf:37:21:e0:b8:79:33:ec:8d:40:e9:28:
         5e:81:49:af:52:0e:1d:6a:68:88:0a:6c:c4:fb:65:43:c9:b2:
         68:e1:12:d2:90:56:03:7c:29:c4:f5:75:fd:8d:16:27:dc:a6:
         55:67:c6:b8:eb:b9:bf:28:74:b5:e4:14:d0:b8:37:56:dc:a7:
         9c:21:e0:80:fd:80:14:a3:a3:ed:50:39:40:75:62:03:f6:ee:
         bb:35:4b:56:cf:5f:b3:1a:b5:c2:7e:3c:e4:f7:a3:bc:0e:8f:
         2a:e5:c8:1e:7a:10:60:6a:bc:7b:45:2e:fb:03:92:83:c0:7c:
         ef:42:b9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:34 2026 by rpki-client