Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
File:                     x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json)
Hash identifier:          P/pUXwDfs/VpGyOBBRRUnmTil+DLQMy6RpkLU4gx+NE=
Subject key identifier:   0B:AE:EE:BB:24:D0:FA:71:B1:03:76:A9:96:32:7F:BC:FC:47:0C:E6
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Certificate issuer:       /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial:       01A0EC9D183ECF75785B55BE0AE309A89F82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
Manifest number:          13CD
Signing time:             Tue 29 Sep 2026 10:01:53 +0000
Manifest this update:     Tue 29 Sep 2026 10:01:53 +0000
Manifest next update:     Wed 30 Sep 2026 10:01:53 +0000
Files and hashes:         1: gnw06N0gGBhicL_ONKvoP4ddQbU.roa (hash: 4gwJwDTmq+vkyn3oS5mRGQ3lROpbTUw7uW4+i/6DJjc=)
                          2: kpH5WlJCrMlmeeDd1J72A3S1E9Q.roa (hash: x6Dsqlz32ptPq4ZLP9ca9ot80w2DB6vu3sGi4SsF0p4=)
                          3: nZFYyUW-U0GOW9DpQejYoKAABk8.roa (hash: A9mI4AyUEreH1zF5qVOwvuDaDAKnjfc/wviBAZmJU6w=)
                          4: rqNF1I8XEuKDsKwv-z0vODcozOI.roa (hash: XEf3TPaRLCkLG6LuuSH50p5GGro0k1ye4U4n69uzWYI=)
                          5: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: Rk0QmnA47CYVNGeZTHtFGHiIZhWQnZGxV2GVY60CsOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:9d:18:3e:cf:75:78:5b:55:be:0a:e3:09:a8:9f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
        Validity
            Not Before: Sep 29 10:01:53 2026 GMT
            Not After : Sep 30 10:01:53 2026 GMT
        Subject: CN=0baeeebb24d0fa71b10376a996327fbcfc470ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:ab:93:d5:8d:39:9e:df:b6:ba:b0:24:98:
                    a6:f9:4b:5e:35:eb:ab:0b:aa:b0:e1:38:90:33:5f:
                    ef:61:5e:05:77:f0:fb:b7:c6:f7:83:ee:c4:38:34:
                    14:76:a9:8a:1f:4c:49:ae:d9:2a:29:0c:74:52:a2:
                    83:23:48:42:f6:e1:d3:a2:08:43:d9:f9:67:1b:94:
                    ec:62:6c:31:32:0c:60:1b:21:b9:22:20:b6:10:7f:
                    54:c8:a8:cc:b5:bf:96:72:28:16:ce:06:48:b6:24:
                    10:4d:83:d8:72:83:00:46:c5:46:85:5d:a5:e4:cf:
                    af:bd:32:3c:8c:be:0b:2e:55:08:27:1c:d9:ba:d6:
                    7f:80:55:d5:f4:a7:04:35:34:fd:21:7e:14:c5:80:
                    30:17:78:2d:27:02:cc:e2:af:62:4b:0a:bb:03:c1:
                    71:da:96:c4:7f:ea:e4:12:5f:15:86:3f:1c:88:8c:
                    6c:d6:8e:37:b6:46:62:9d:ec:13:9a:f0:70:14:42:
                    f6:eb:13:d7:55:8a:8d:51:b0:be:86:c2:38:70:9b:
                    a6:37:6d:62:fb:6f:33:bc:17:38:b1:e0:25:c6:e0:
                    4e:0a:85:40:24:be:66:06:f2:54:48:0b:53:f7:26:
                    98:8a:09:e1:1c:cb:86:99:36:66:ad:2a:7b:88:56:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:EE:BB:24:D0:FA:71:B1:03:76:A9:96:32:7F:BC:FC:47:0C:E6
            X509v3 Authority Key Identifier:
                keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:38:23:a0:59:c2:a9:ae:fd:1f:b2:79:14:08:02:0c:c4:0b:
         ef:86:36:82:50:95:1a:f6:70:1a:b5:de:9d:c2:ad:90:88:82:
         81:86:d9:63:33:46:e9:d8:2c:96:1d:f4:25:4c:b5:75:1e:5b:
         e1:37:0a:e9:69:40:03:6f:0c:43:64:7f:61:cf:69:cd:80:fa:
         44:5c:02:8c:96:01:d5:56:77:08:17:3d:15:c9:dd:d7:6b:21:
         f9:e0:99:01:d6:35:93:76:5b:0d:36:05:65:30:39:85:8e:59:
         3c:fc:de:f4:db:73:5f:f4:99:5d:7b:52:e5:06:ca:57:c5:76:
         c4:fa:e3:a9:d9:6a:86:13:fe:3a:18:be:39:4d:da:ef:d3:02:
         a5:fb:2f:4f:c0:5c:93:96:8b:cf:7a:d7:02:66:4b:6c:d4:ab:
         87:d1:66:00:92:a0:78:c1:3a:e9:b9:58:9f:c5:18:50:44:04:
         18:3b:75:ab:44:4e:9e:c3:c5:25:62:ac:0a:e7:26:13:09:a5:
         41:f0:fa:19:07:2e:0c:87:e5:32:f9:81:68:50:db:9d:bf:d0:
         c4:2e:68:dd:e9:26:cd:21:13:9f:78:f0:0e:06:d9:86:d5:d3:
         38:ec:92:a2:a0:3d:e0:aa:62:a7:fc:bb:fb:06:d7:c6:92:d7:
         49:26:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:23:25 2026 by rpki-client