Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          QW0bYgXnToDajX1ZqgixhQbAtlRxNwOu9yNL8UUckIc=
Subject key identifier:   6F:DD:86:84:2E:04:E1:33:68:EB:9D:AF:2A:C6:CF:1E:C9:EC:8A:C6
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       01A0CFDB1A3119D338B9B7A30156DD22F08A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          1A73
Signing time:             Wed 23 Sep 2026 20:00:37 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:37 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:37 +0000
Files and hashes:         1: 8z842irPUI8EAcdgem6-OTXhKlE.roa (hash: HK9+peK6bA6qvniuZHkI3MKhAoqJRMXPjQN3NjLDd4Q=)
                          2: C-eRdGJheWWO-BQH20gVo6-55lU.roa (hash: AbD58rM5EB/Q++PaApU6j4w5JzUDMVH5itkiJf48ScE=)
                          3: nfbSVsYj14X3ZfSgLBVMUYnsOIo.asa (hash: s6nrdvhUBgHrfgOiWy7ToxqlDwGipII3LxQu2o1H4zI=)
                          4: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: LSDnhmH+2rxVDrg51RhXo87hEHRrxX6zTtAUuZpqdp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:db:1a:31:19:d3:38:b9:b7:a3:01:56:dd:22:f0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Sep 23 20:00:37 2026 GMT
            Not After : Sep 24 20:00:37 2026 GMT
        Subject: CN=6fdd86842e04e13368eb9daf2ac6cf1ec9ec8ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:8a:6f:ca:a4:ab:25:39:96:6a:71:67:85:
                    f4:1e:50:95:fe:54:ec:71:8e:c7:9e:ca:de:2e:c7:
                    34:03:98:bc:18:34:93:48:7c:62:f0:54:32:64:fb:
                    70:53:32:f7:99:f6:6c:30:53:f3:59:bd:8c:62:b4:
                    44:72:a2:01:2a:2e:bc:75:19:ac:76:f0:90:d3:38:
                    85:e4:06:2b:33:a3:ae:f6:c4:12:b7:75:4a:62:65:
                    5a:50:a0:81:21:df:8a:b1:c1:40:9a:73:d1:bd:9f:
                    51:9b:12:c7:9c:90:4f:86:68:90:e6:06:58:b4:e7:
                    14:64:c6:d9:47:2f:49:ee:9c:fe:46:81:c6:fd:36:
                    41:6a:c9:56:d9:ac:0e:f8:65:ce:ed:d9:ec:3b:68:
                    5c:1a:40:b0:cf:30:cd:4a:56:df:e7:7f:85:e4:a4:
                    f2:f8:42:63:9e:47:75:2e:bc:97:13:f1:41:c6:e6:
                    34:fc:b4:b6:a4:12:22:bb:4f:36:0e:05:8d:c5:f7:
                    74:6c:9a:58:6d:1d:30:92:de:51:5c:8e:ef:a7:b6:
                    63:06:2f:98:f0:00:bd:29:b3:57:dc:de:01:da:2c:
                    83:48:0a:26:71:6a:c0:6c:bd:71:71:88:c1:51:d3:
                    f0:dd:da:5c:9a:37:e7:5f:c4:85:40:eb:ad:db:af:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DD:86:84:2E:04:E1:33:68:EB:9D:AF:2A:C6:CF:1E:C9:EC:8A:C6
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:19:bf:d9:7d:dc:4c:7e:02:4a:a4:23:f0:a2:c2:df:e5:93:
         a7:43:03:98:9c:28:81:ec:aa:5a:f6:0b:93:73:09:b6:b0:31:
         be:d8:cb:56:28:f9:04:7b:90:16:e9:8d:3c:b5:8b:ea:68:84:
         28:2f:b4:56:b6:e2:73:8b:53:e0:c9:1a:f5:2c:2d:d0:32:77:
         aa:09:56:36:e8:d3:f1:c8:5b:0e:d1:70:3c:b4:6d:b5:f4:00:
         e2:53:ef:ef:b8:c7:48:8a:da:35:c9:6f:dd:46:ee:dc:a6:76:
         ae:47:92:87:3a:f2:d8:24:82:9e:03:f0:37:ca:1f:1d:53:c3:
         9e:06:5d:96:7a:8a:77:70:87:f6:ab:32:1d:ca:af:4e:7d:8b:
         d1:e4:6c:f6:4a:89:9c:ef:fc:25:1e:37:92:1d:f7:9d:ff:6c:
         7e:c8:a3:25:1c:95:0d:4b:9b:ea:74:b7:c2:99:63:61:92:c0:
         9d:c3:aa:a5:c0:ce:29:d8:ee:a1:c0:48:3c:e3:99:18:a7:13:
         43:0c:af:7b:83:22:2b:98:21:88:bb:42:07:b9:8f:9b:48:7a:
         4d:9b:d0:85:2d:85:f6:20:5e:4d:be:c3:29:82:83:cc:88:cc:
         33:a1:8a:ec:82:27:b8:44:aa:75:a2:8b:19:73:4c:ba:66:95:
         28:79:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:37:10 2026 by rpki-client