Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          Q9pwmjTr+2q/zoIQJK28JsubnjNgp//3/hUTveaSZR4=
Subject key identifier:   E4:B8:B7:DD:36:34:73:22:13:AD:AE:73:49:43:E1:EC:34:E3:55:85
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       01A0CFA46F2F293372E29E4BAF87AE5B24E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          1152
Signing time:             Wed 23 Sep 2026 19:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:55 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: Ll10kaZocl0g7StJkwJyws14e94wHiqbih4PVOwE9Eo=)
                          2: BHtYTKXAhvuK5qQH2dMZrKgOMHg.roa (hash: x0aDgSbM0k6Qn4DXz0HQEQO8d3rc25aCpgfGk0kEatY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:6f:2f:29:33:72:e2:9e:4b:af:87:ae:5b:24:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Sep 23 19:00:55 2026 GMT
            Not After : Sep 24 19:00:55 2026 GMT
        Subject: CN=e4b8b7dd3634732213adae734943e1ec34e35585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:f8:cd:7f:4c:1e:2a:58:4b:ae:1e:72:5f:
                    6d:18:81:77:de:ae:6b:80:c7:b6:73:72:4a:5f:6f:
                    88:67:b3:56:a1:5b:38:12:fa:20:6a:9f:73:db:eb:
                    86:ad:69:f9:d9:f7:6a:ce:89:a8:0b:f6:70:e5:f9:
                    f8:c1:85:ef:b4:f3:26:70:b9:f5:68:95:41:28:dc:
                    0a:e6:96:d2:71:9b:8a:da:5c:91:1a:65:32:97:56:
                    f0:71:39:80:c1:14:60:54:28:ba:0c:12:12:fc:ca:
                    a4:57:64:90:c6:19:63:df:27:95:f1:15:77:45:4f:
                    d1:0f:49:a8:89:7c:a2:84:61:ff:b5:2c:2c:a0:d9:
                    fa:fa:ec:f8:66:f7:77:23:da:92:48:99:a8:bd:7e:
                    73:d0:ae:0b:28:90:36:d3:12:e0:d1:2e:10:68:10:
                    df:2a:73:d6:58:1c:1c:8a:ed:07:26:1f:a8:9b:08:
                    7d:8d:0a:92:40:73:ed:76:51:dc:4b:95:51:10:bc:
                    88:96:aa:2f:3b:3e:c1:39:fd:fd:4e:d4:ed:04:e3:
                    24:66:d0:5f:bc:fd:db:d9:6b:c8:01:9b:01:e1:f7:
                    2a:73:88:c9:5e:9f:32:eb:3c:77:54:ec:eb:3d:b3:
                    cf:11:a9:05:9f:c3:5f:0c:f2:68:6c:ee:be:07:a1:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B8:B7:DD:36:34:73:22:13:AD:AE:73:49:43:E1:EC:34:E3:55:85
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:8a:b5:d5:6b:42:f1:47:08:63:2e:b3:00:a5:e5:10:c8:
         ff:2c:ff:c4:03:b2:6a:5f:3c:00:35:d4:16:7a:bb:93:9c:dd:
         5a:9f:4e:11:8e:a5:55:16:99:ac:b8:2c:bd:4f:32:5f:be:6b:
         f6:d1:92:b0:74:6d:1f:36:f0:a4:88:71:76:30:3d:e8:cd:77:
         0e:4b:35:32:c0:89:62:36:e6:a2:aa:e1:13:43:65:c8:39:67:
         b0:db:ad:ba:14:cc:38:c9:ea:72:5f:74:23:d3:76:4b:60:4e:
         ed:19:32:af:41:26:20:bd:39:6b:8a:1e:35:8e:0d:2d:20:c4:
         50:8e:75:7c:9d:c6:0a:41:29:ca:00:e1:5f:d3:4a:e6:d5:4d:
         3f:3b:49:1a:c0:44:98:8a:9c:87:55:b4:46:cc:c2:cf:9b:ab:
         92:ef:44:35:d2:59:f2:c4:a3:f3:be:78:05:95:98:22:42:7d:
         41:ae:6e:dc:1a:d3:70:1e:75:f6:49:2e:ea:a3:5e:91:4a:84:
         ee:83:39:86:12:8d:12:51:b9:3a:97:57:92:73:1c:bb:7c:9b:
         90:7a:49:37:7a:cd:27:83:4e:5f:3e:44:8a:9b:1c:8f:97:37:
         47:ad:52:e5:49:5d:25:26:ba:aa:10:0a:23:3a:58:24:a0:0d:
         a4:a9:a9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:55 2026 by rpki-client