Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          dKd9bVT8c61E5KWCN/nAC9A8hQfBySRgE2L1MVkAgpw=
Subject key identifier:   03:E0:7D:6D:D4:F9:8F:08:9C:F5:C6:72:A3:10:A7:8D:C0:58:B4:54
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       01A0D9F13CF9DDC853F20BC4ED84AC97FC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0DF4
Signing time:             Fri 25 Sep 2026 19:01:00 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:00 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:00 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: lHKgHtxN21+KgJ1/QHS6IEhEl1kbe9Cs/Pjd70DTQ0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:3c:f9:dd:c8:53:f2:0b:c4:ed:84:ac:97:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Sep 25 19:01:00 2026 GMT
            Not After : Sep 26 19:01:00 2026 GMT
        Subject: CN=03e07d6dd4f98f089cf5c672a310a78dc058b454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:be:a3:a4:4e:8a:3b:ae:2c:12:0c:f9:d2:
                    14:74:88:d0:af:32:44:c1:17:a6:c6:f4:bd:05:0d:
                    3d:99:d5:14:04:ee:84:4a:5f:3c:50:3d:9a:c8:78:
                    80:c5:d0:cb:0f:29:62:ed:b9:de:fc:84:77:b1:57:
                    93:ad:d8:a2:78:42:5f:c0:b8:be:bf:8b:db:5e:5f:
                    a7:d3:dd:3d:d4:99:f9:2f:ca:a2:49:4f:15:d4:6e:
                    e0:0e:92:7c:ff:5f:18:7d:fc:7c:fa:2a:00:0d:12:
                    2c:27:37:dd:af:28:a1:62:51:a1:d6:39:5c:8f:cc:
                    1a:59:9e:8c:37:bb:5c:62:cd:2e:de:bf:46:5b:04:
                    c7:a4:37:8b:1e:2d:45:d5:9c:9d:ee:60:0b:ad:ad:
                    29:8e:90:69:fa:e6:6d:62:ae:82:50:00:cf:03:60:
                    fd:7a:da:39:d2:f7:67:30:9f:15:bf:e1:99:8e:2f:
                    16:b1:fd:c1:27:cf:bc:06:da:06:03:51:c3:cf:b9:
                    f3:f6:48:0c:ad:e2:0d:6a:93:ef:80:b9:18:50:72:
                    32:07:8c:9d:6b:b3:f4:f8:28:96:29:c5:11:a7:f2:
                    1b:a2:50:63:01:06:79:60:df:8b:0b:90:5a:13:5b:
                    10:f7:af:d6:69:04:7e:74:42:e5:f0:a8:8d:c9:a2:
                    14:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:7D:6D:D4:F9:8F:08:9C:F5:C6:72:A3:10:A7:8D:C0:58:B4:54
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a2:68:67:46:40:9c:0e:e4:ae:61:7b:1d:48:d1:55:ed:06:
         7d:7d:2c:30:e2:3d:f7:65:4a:9c:2d:24:49:21:ad:f7:76:04:
         73:b5:a2:7e:d5:eb:e3:6c:ed:c4:62:8c:5d:bb:0d:8e:17:2c:
         52:f7:3a:6c:bf:73:bf:d5:19:cc:60:aa:73:27:3e:39:a8:43:
         d5:f8:3e:76:ce:66:13:82:55:26:3a:df:ba:1e:42:29:a0:f2:
         70:f5:b9:ba:2e:9e:9a:46:f6:35:2a:02:af:5a:fb:6d:26:79:
         75:7d:b6:c8:bb:d3:98:57:12:13:e5:bf:85:46:6c:da:64:54:
         e0:4e:7e:d8:52:3d:06:8a:b7:1d:1e:1b:e7:e6:2d:57:8c:91:
         3f:4d:1b:0a:17:e8:7c:cd:26:27:9b:b9:62:58:fe:47:66:3b:
         e1:5d:d7:6d:9e:c4:27:86:d1:8a:53:d0:fb:5b:7c:8f:cd:d6:
         06:20:49:e7:4c:2b:4b:8a:78:71:36:c9:0b:6c:73:27:47:41:
         5a:85:40:65:71:35:db:71:91:10:d3:b1:91:ae:2a:b5:ec:fb:
         dc:8f:f9:44:0f:a6:31:2d:71:b5:a5:62:9b:cc:93:8e:68:a6:
         68:13:4a:83:2d:ee:11:99:9e:d8:62:0d:23:43:22:0f:94:d9:
         8f:ca:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:31:14 2026 by rpki-client