Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          yhdRDIAQaTszxWGK/In7DFx0VGWUfYQ4+nTmN16xCWI=
Subject key identifier:   3C:EC:AF:DF:63:C3:E6:EF:0B:77:0B:09:88:AE:B0:3B:A3:E1:21:AB
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       01A0D34AA585D34BCB628AD3348D46197762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          0AC1
Signing time:             Thu 24 Sep 2026 12:01:19 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:19 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:19 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: P8ttfOhQW3t7RKVMOxTq2J5bi2ysUaMY3s7WinPmkz4=)
                          2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:a5:85:d3:4b:cb:62:8a:d3:34:8d:46:19:77:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Sep 24 12:01:19 2026 GMT
            Not After : Sep 25 12:01:19 2026 GMT
        Subject: CN=3cecafdf63c3e6ef0b770b0988aeb03ba3e121ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:37:f6:c9:9f:82:12:db:0a:92:93:1e:dc:
                    58:b8:d1:54:91:57:22:aa:04:be:6d:91:8e:c9:78:
                    79:d0:34:7f:17:22:bd:9f:9e:08:ea:ab:7c:c0:b1:
                    9a:3e:b8:06:b2:cc:d9:f9:51:8e:17:b9:63:c4:72:
                    64:a0:96:97:f9:64:2c:3d:aa:05:3d:ff:76:fa:bc:
                    1f:c3:e0:4f:43:13:5d:c4:9a:b3:a8:54:f5:17:b5:
                    4a:b2:b0:30:81:cb:52:1f:0c:62:74:c3:eb:45:1e:
                    36:ee:d5:1e:eb:d3:ed:ed:18:18:c4:b3:e8:da:04:
                    79:57:83:f6:17:3e:b7:4a:4e:ec:25:b6:3b:bc:9a:
                    04:eb:66:99:5a:ee:61:d2:aa:91:0f:7a:3a:6d:77:
                    49:7d:e9:2e:8f:f8:ae:d7:76:0c:f9:23:f4:99:09:
                    07:c5:dd:c7:76:74:14:cb:69:50:39:62:d9:34:fd:
                    32:16:77:a7:38:d1:3c:f7:5b:d7:bc:b7:f7:ef:70:
                    62:d9:4d:19:45:2e:35:bf:c8:3f:98:bd:08:e6:23:
                    24:73:bc:09:0d:e8:12:dd:7d:fe:10:72:29:cf:71:
                    db:51:2a:00:85:43:1f:46:8f:0b:2d:e9:3d:58:e1:
                    59:34:89:83:c3:44:d9:d5:eb:c3:6a:53:60:fe:e5:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EC:AF:DF:63:C3:E6:EF:0B:77:0B:09:88:AE:B0:3B:A3:E1:21:AB
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:71:55:d0:cc:64:e0:c3:d0:63:6f:01:f0:2c:e0:52:1c:3b:
         a1:eb:1c:a5:ba:ee:95:3e:16:19:95:26:38:35:93:26:eb:18:
         d7:d3:cf:93:7c:2a:e8:34:1d:35:e3:75:a5:9c:bf:82:60:66:
         5a:41:4d:16:b7:3c:5e:09:5d:a3:39:f8:85:56:15:57:ed:a9:
         2b:f6:a4:cc:81:df:a5:eb:b1:16:58:b4:b9:db:61:7b:35:62:
         4a:c2:b4:8e:41:78:b7:4b:04:9c:34:a6:85:c1:39:7e:07:f9:
         1a:07:66:78:57:35:17:2f:6b:d8:ce:c9:00:6b:3f:73:ee:79:
         36:1b:3e:ee:44:f7:ca:c8:39:eb:a0:e1:22:e0:ac:2d:fd:95:
         9e:bb:bc:72:5c:e1:0a:75:54:35:82:e4:08:88:4a:0a:41:2e:
         f6:45:10:c0:d3:37:88:2d:08:53:7e:ef:b6:85:3f:55:22:bc:
         6e:f0:ed:0c:e3:16:ee:58:da:68:ff:f1:7f:b2:9e:ed:2a:08:
         63:6f:7f:87:f2:4d:d5:c9:66:eb:07:3a:79:7c:a2:16:36:d7:
         67:b4:90:dc:9d:d1:f1:c7:2a:54:7e:64:52:c8:2c:07:d1:80:
         a2:00:94:9c:25:3d:d5:3d:fb:ba:17:48:b6:79:47:ef:3f:ee:
         4d:8a:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:42:26 2026 by rpki-client