Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File:                     CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier:          Qz8Lr0+9ElinDSGvfAPSuObnDoH/QFseIiw+HmtXfxQ=
Subject key identifier:   C9:5E:19:46:70:01:16:6A:E8:E3:2F:C6:7D:F6:68:B8:CE:0D:A2:23
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer:       /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial:       01A0D1244B6B1673A535FFCD5B787EC5313C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number:          1A6B
Signing time:             Thu 24 Sep 2026 02:00:11 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:11 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:11 +0000
Files and hashes:         1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: ucVb6oN8YWJiIIrXVw6RexPVqIiC+AuHFu0jjYlyFQk=)
                          2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:4b:6b:16:73:a5:35:ff:cd:5b:78:7e:c5:31:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
        Validity
            Not Before: Sep 24 02:00:11 2026 GMT
            Not After : Sep 25 02:00:11 2026 GMT
        Subject: CN=c95e19467001166ae8e32fc67df668b8ce0da223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:5a:00:55:cd:6a:99:0e:36:20:27:05:86:
                    a6:cc:7f:0f:a5:f3:df:c6:25:82:dc:cb:91:48:d6:
                    97:c0:3d:58:17:ce:4d:41:4d:0c:8d:eb:20:f3:5a:
                    bf:e9:a3:c7:8d:7c:05:67:08:82:06:9a:ec:28:3b:
                    7d:ea:0f:9d:13:a2:41:b8:db:91:93:36:91:4d:90:
                    e6:6c:43:c1:25:56:7a:03:94:6a:50:9f:16:dd:2c:
                    5a:63:39:b0:71:15:2f:6b:69:74:7e:19:92:4d:eb:
                    dd:ed:ec:4c:62:34:78:a0:03:5c:2f:e3:c0:e0:99:
                    a7:8f:5e:28:9b:68:24:f0:cd:79:47:e4:45:4a:6b:
                    34:c9:e6:25:49:3a:5a:8b:e3:9e:c6:37:99:bf:38:
                    1c:09:5f:a4:af:7b:50:ca:89:af:aa:d0:e0:91:01:
                    29:60:11:05:64:9b:92:d0:f3:04:ad:fe:d6:9e:c1:
                    05:84:39:d8:d4:68:08:b0:21:d7:59:3f:60:ae:16:
                    cd:ee:80:90:86:84:b3:83:af:65:3a:cb:9e:3e:b6:
                    21:29:52:ab:5a:e6:d8:80:ff:4f:ac:2f:ab:fd:af:
                    c4:55:34:70:cc:f1:01:41:05:a6:58:30:cd:a2:09:
                    d5:60:78:a7:f3:78:a9:b0:e3:74:b1:03:db:08:f3:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5E:19:46:70:01:16:6A:E8:E3:2F:C6:7D:F6:68:B8:CE:0D:A2:23
            X509v3 Authority Key Identifier:
                keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:73:64:c7:23:28:71:a3:25:bc:a3:ed:98:ae:3f:b3:d3:c8:
         c9:25:ff:be:90:01:c3:05:cd:77:bf:b1:43:a1:04:10:7f:e2:
         97:9e:3c:97:fc:d8:6d:c9:ec:5e:18:dd:d8:d5:de:de:dc:d8:
         31:8a:f9:dc:90:08:1a:c6:15:74:25:62:5e:b2:8b:e0:5c:5e:
         6a:87:f8:b6:7d:33:d0:ed:bc:cd:61:05:66:d8:f1:ae:6f:e7:
         16:34:58:92:15:bb:14:02:62:45:7c:60:25:07:21:4b:84:7c:
         0d:1e:50:97:17:6d:c2:0b:3c:68:b8:f6:2a:a2:b2:35:d9:6a:
         cd:2a:a0:a5:de:db:62:12:16:87:d4:c9:ff:3b:b3:ec:a6:c6:
         15:43:69:bb:d8:a3:95:04:76:30:57:5b:4a:ff:ac:6b:fa:64:
         3b:34:2f:b8:0a:af:14:86:2d:99:d9:17:66:a0:f7:8f:a8:22:
         e9:83:a0:32:ea:b2:5c:b4:8a:25:10:bd:fe:6e:eb:4e:d5:e1:
         27:7f:18:b0:e7:79:b9:cf:59:e1:17:80:7d:1b:5d:88:c8:58:
         c0:e6:d8:03:7b:69:42:c0:a0:9a:d2:47:30:d1:a0:84:54:2f:
         55:68:dd:f8:ed:63:3e:f0:48:14:f8:9f:b5:1e:a9:59:02:9b:
         b8:9f:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:38:27 2026 by rpki-client