Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
File:                     6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json)
Hash identifier:          HrIIVFTXnNHldj05hsXZ4iSMiW8Dx74H5QbXkWINRf8=
Subject key identifier:   DF:61:27:8A:30:DB:AA:EA:71:40:0B:3E:7B:E6:EC:81:E8:E3:B6:55
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       01A0E1AB191BBC5ED7223ECF5FF75583430B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
Manifest number:          14B1
Signing time:             Sun 27 Sep 2026 07:01:21 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:21 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:21 +0000
Files and hashes:         1: 1-4XTHBoNFNr1l-5DlJv7kCOEAsg.roa (hash: kxVoHYAy1StJ1GWwbeUY54WsYp9aXThsq2UtgssAUdE=)
                          2: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: WPPWeUvxw0Ahcnd+IcXa9EFV/4GPx1yD1cnxJ6R8KYY=)
                          3: 8suHpidG1fhuELuUk5b3-OweTPg.roa (hash: 1eHJkoJhddFda4qCfEu1aQasvyxw+vlSo8SFBBVgpqU=)
                          4: FUuTK2fFAsqRcCumhRtIZo91RHY.roa (hash: sL7JcIGdywrGzv3v04y8pkGzCLFmkDsGBJu4wKma/MI=)
                          5: JDnserL7-kZp6PufFEVsEIFtixc.roa (hash: B3BCDo9ccdOnZFxqd0AyuudhQ55NDi4GfocT/dyaSh0=)
                          6: LXIlN5E_-7FwagFmPTLTkaa9y5c.roa (hash: 6fdLU7tUE6uJypDCFnhQj74QKiyWE5+++0HOzxZo/Ls=)
                          7: NoSK7sZyq5DVw267WTMAXasfJ-A.roa (hash: Bg3ZeyYpcA1S2YyAVbtMxuNPQPI+1r0FDTP7AdCyUJQ=)
                          8: T2Ez-OQKFMetVOVEwJmKx8ETjVY.roa (hash: dQaHOpIJ7tn06p6U+or5Gija2NCtSWcSz1gCN9tE9xg=)
                          9: UzApq6EOLSmo_f-FmHtKYMlNkG8.roa (hash: uaHU4qHF04fH5UL/VGo93ZAzSiASc8qoSn8SilcNKx8=)
                          10: e-PI40mcmW_4qj2wj51dZytuRJ4.roa (hash: IWJbxQ32owD5Lwd1nR2dmmdsgfysZX9pSs6x+OurREE=)
                          11: rCtSQ7fOIAO3hF-dZmFyOrblm2s.roa (hash: JkQ7BSC0RdZovffT+QwWvb+UrSCXmLKi6BtijI7KA5c=)
                          12: uEqxyS_Z6CD4ga3QenDz-xQtzRs.roa (hash: cZVI9tUEYNEfl0cyEalypCg6wqkUJ2Ynk/3s857D/qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:ab:19:1b:bc:5e:d7:22:3e:cf:5f:f7:55:83:43:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Sep 27 07:01:21 2026 GMT
            Not After : Sep 28 07:01:21 2026 GMT
        Subject: CN=df61278a30dbaaea71400b3e7be6ec81e8e3b655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:69:8b:8f:95:33:98:af:9d:80:d5:73:8d:
                    df:0b:eb:9a:3a:3c:44:3a:1d:7b:ec:05:05:f5:07:
                    f1:cf:7e:a1:e5:e9:cb:c4:5d:29:10:39:f8:99:fd:
                    67:50:47:07:87:b8:81:ee:c9:ff:48:1d:46:32:90:
                    0b:4d:8c:25:93:12:5c:c8:41:a7:97:5d:5e:b7:19:
                    42:0d:88:ca:a1:9c:54:d7:1c:61:da:96:2b:75:4a:
                    86:89:b5:38:07:a7:1e:59:72:19:39:77:a6:16:ca:
                    5f:dc:be:80:60:e2:e0:ca:fa:3e:b4:8b:d6:44:a8:
                    ed:80:44:13:44:b2:35:c0:17:a2:20:41:ff:04:dd:
                    6c:36:32:7d:61:73:35:53:19:c0:3a:2d:9a:81:84:
                    57:52:54:92:51:81:2d:64:4c:c5:69:d6:3d:f5:7c:
                    f0:88:b0:d7:f6:74:c6:86:23:bd:b1:71:3b:03:5b:
                    7b:c7:8a:92:9c:d8:e2:6b:27:b0:98:54:fe:62:bb:
                    9b:1b:dc:ce:fd:1f:67:d7:46:36:b7:85:d0:cb:07:
                    a6:d9:06:d5:bb:02:36:8b:34:6a:6b:25:87:61:24:
                    a4:47:61:fa:c4:1c:a0:fd:09:72:1a:d1:a0:77:3b:
                    e5:8f:ab:7f:5b:97:1a:c5:63:7f:0a:11:a5:1d:12:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:27:8A:30:DB:AA:EA:71:40:0B:3E:7B:E6:EC:81:E8:E3:B6:55
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:0a:2e:e4:5f:0a:6d:c2:f0:98:03:04:34:28:f1:c6:fb:
         0b:02:60:f4:ac:46:c6:46:10:b4:74:24:8f:04:02:0d:56:fe:
         8c:51:78:fc:b2:fc:f9:72:cf:8d:5c:04:4c:42:0c:01:51:41:
         9c:57:d8:0f:d3:1b:a8:1c:66:8b:62:05:f1:bd:99:10:34:b4:
         28:72:8e:34:3c:34:55:ca:c0:9d:cc:15:bf:d0:7e:cd:c8:31:
         ca:4d:9a:e4:0b:f2:65:ef:08:14:87:73:5d:3a:11:4b:7c:fa:
         4c:21:37:b7:1d:84:07:ce:90:d5:a6:0e:37:40:19:a2:0c:f4:
         ba:dc:27:b9:4e:c6:47:7e:dd:d2:b3:40:81:f2:8e:92:82:81:
         84:d4:a6:43:32:1c:22:60:b0:dc:70:f6:a9:5b:7b:3f:d2:cd:
         c2:b7:f8:63:0f:60:11:7e:dc:89:e7:1b:8d:9e:ca:c5:71:6c:
         c0:71:7e:86:69:4b:eb:a7:96:b1:56:7c:f5:58:25:22:7b:8f:
         ad:e1:37:0b:8a:b9:89:42:47:f1:f6:22:45:05:6e:90:d6:5f:
         3d:c3:fc:70:5f:20:4a:ba:0d:ac:ca:4f:bd:66:9b:ac:91:bb:
         6e:94:25:25:3e:cc:c1:f7:33:d7:ce:37:cb:37:da:bc:a5:b0:
         0b:f7:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:58:07 2026 by rpki-client