Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
File:                     6UUBLq3IWU41GvpoVrw6GUsliH8.mft (raw, json)
Hash identifier:          KZ7j+j+xxQZT4VVeb/I9QSvfcqMg9lQpohZxITUWgmQ=
Subject key identifier:   86:8E:AA:0A:66:B3:24:5F:91:6E:DF:14:6C:B1:E5:89:E8:94:CA:BF
Authority key identifier: E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
Certificate issuer:       /CN=e945012eadc8594e351afa6856bc3a194b25887f
Certificate serial:       01A0D50250A80F8EB100F1B7997D654C1BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
Manifest number:          BE
Signing time:             Thu 24 Sep 2026 20:01:33 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:33 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:33 +0000
Files and hashes:         1: 6UUBLq3IWU41GvpoVrw6GUsliH8.crl (hash: wFxfMVzmwKeb2DN7xkKrVKNWJZXAYikKPmiBBxa6Xt8=)
                          2: u6bPPDorwS9CKClEUNjksXyri0o.roa (hash: gLQa9Qy9OIBwLL9zfXE5Kk8EtYZV+dhDzjKvcFTXDYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:50:a8:0f:8e:b1:00:f1:b7:99:7d:65:4c:1b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945012eadc8594e351afa6856bc3a194b25887f
        Validity
            Not Before: Sep 24 20:01:33 2026 GMT
            Not After : Sep 25 20:01:33 2026 GMT
        Subject: CN=868eaa0a66b3245f916edf146cb1e589e894cabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:38:e8:ce:93:2b:33:c0:4e:11:b0:69:1c:
                    7d:c3:d1:7e:e2:c8:1e:dd:a9:51:2f:32:02:95:2d:
                    74:d7:a9:1f:8e:26:f3:d3:49:84:48:dc:4f:1c:2c:
                    3b:a8:dd:05:85:68:a5:ce:b2:b5:01:a3:1c:e5:17:
                    26:82:44:cf:45:2c:ba:f8:2a:e4:0b:76:33:e4:46:
                    fd:67:6d:6c:da:30:56:70:ef:a5:ae:72:67:74:fe:
                    e1:fc:e1:ff:15:f2:5e:f8:f0:ec:32:75:bb:bb:13:
                    0a:8c:1f:4f:c8:dd:15:02:cc:30:b3:3c:09:b2:a1:
                    6b:68:99:bf:11:e3:9d:3a:c9:b0:9d:6c:2a:fc:98:
                    2d:c1:7b:bb:83:b6:08:dd:38:de:1f:0d:55:1f:a6:
                    e4:d0:26:da:ed:ee:bb:34:e1:7a:ef:55:01:0c:79:
                    1e:8f:96:01:0d:17:78:54:6d:e6:84:00:10:b4:af:
                    b2:ce:6f:ad:11:69:18:6e:dc:f8:90:09:ef:bf:58:
                    1c:c5:6b:3c:77:d2:4e:a9:ab:a0:72:e9:8e:c0:f1:
                    5c:33:13:4c:75:54:69:05:28:37:fe:1e:10:63:67:
                    89:dd:58:62:6c:de:0e:87:b1:df:00:ac:2b:06:b6:
                    b4:a2:7d:a2:46:0b:91:06:40:c8:24:bc:7e:8f:5a:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:AA:0A:66:B3:24:5F:91:6E:DF:14:6C:B1:E5:89:E8:94:CA:BF
            X509v3 Authority Key Identifier:
                keyid:E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:48:1e:94:35:b8:f3:42:6a:a6:b3:59:e5:e0:f9:ea:0d:
         51:89:5e:71:b1:f5:51:6c:72:16:41:63:02:f1:a2:dc:26:c0:
         b3:6b:bf:6b:32:ed:be:77:c8:93:9f:50:c6:e8:8c:77:40:65:
         55:42:f9:09:5a:fd:52:bf:c6:52:47:c9:7b:ea:61:e9:7b:00:
         0c:d6:2b:a7:b9:cc:b4:5f:f7:9d:e3:4c:f2:67:89:00:24:3e:
         24:1b:e0:4c:69:ef:75:d4:34:1c:4e:79:37:71:21:e5:f9:91:
         07:f2:7a:21:85:b4:c1:76:f5:c7:fb:81:2a:98:59:c5:aa:f2:
         3b:82:52:f0:ef:9c:d9:e4:53:4a:a4:d9:ca:a3:3b:0d:86:86:
         0d:50:c9:e2:a4:b5:18:42:5f:ef:7e:a9:02:21:c6:21:b1:5a:
         cb:17:d1:01:54:f1:a1:77:3e:6b:2f:d6:76:76:55:47:b5:5a:
         94:07:d0:2b:e1:b7:f2:9d:a4:0c:1a:74:9e:2e:9e:30:bf:25:
         6c:1b:ea:3c:44:9e:ea:f4:18:73:87:c7:1f:74:88:7b:f0:61:
         f6:40:3a:54:75:1b:b0:c8:88:6d:e7:fb:53:a0:c3:a7:5f:f4:
         12:21:4e:99:67:9b:0b:c2:2e:e8:09:d3:08:21:a0:c1:db:91:
         bf:2f:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:31:43 2026 by rpki-client