Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          Jnx+9wiJo3Nos6AhspaVnzpAwtcvaUQyEyP0F5X5MCY=
Subject key identifier:   42:F4:70:AE:55:10:6C:55:CC:DF:D8:57:40:C1:58:92:2D:35:C8:6B
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       01A0D26EA12B144E54F90C21917832D52B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          19F4
Signing time:             Thu 24 Sep 2026 08:01:00 +0000
Manifest this update:     Thu 24 Sep 2026 08:01:00 +0000
Manifest next update:     Fri 25 Sep 2026 08:01:00 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: lGoIe9l5zLLL5pzHm6eaM8BlN1EFco1j4q32RCu1zDc=)
                          2: dqmaHvknKqQBSGx8vkJB5GIkMu8.roa (hash: eq7/0vS6xbSn3q6IVW/vVMX2uGZHddMDolDzXZEf0pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:a1:2b:14:4e:54:f9:0c:21:91:78:32:d5:2b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Sep 24 08:01:00 2026 GMT
            Not After : Sep 25 08:01:00 2026 GMT
        Subject: CN=42f470ae55106c55ccdfd85740c158922d35c86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:7b:41:7b:7f:dd:1b:f2:cb:b0:83:bc:4b:
                    2a:68:91:5b:d2:88:b4:97:44:a4:23:52:27:7f:51:
                    4e:d0:b2:78:c2:9f:83:0b:9e:2a:26:15:3b:01:13:
                    34:38:09:77:41:81:00:20:a6:4d:34:10:52:7f:e3:
                    03:4a:48:1d:44:c0:c7:33:8a:70:88:f7:08:19:ec:
                    c1:d4:46:11:4c:dc:54:98:f3:72:8f:0b:fa:d8:39:
                    bb:e2:d1:45:bc:36:27:5e:53:06:2c:ed:d8:8b:ce:
                    e2:87:c3:92:d3:17:4c:03:9e:74:9d:b5:df:ac:be:
                    ce:46:6e:6e:f4:b4:12:e4:c0:17:ad:8d:f5:f4:27:
                    02:70:08:68:0d:13:6c:d1:77:0e:0f:19:05:6b:51:
                    bc:1b:91:47:33:97:8b:eb:54:63:23:34:a3:a3:9f:
                    85:45:b3:99:61:1c:86:19:62:ca:9f:07:88:0b:b8:
                    d8:89:16:02:fc:5c:16:82:bc:08:7a:bb:1b:79:f1:
                    1f:c8:5c:d1:ba:fa:af:1b:b8:bb:e6:d1:84:1f:aa:
                    d1:fd:25:c5:20:01:fd:45:0c:9c:05:bf:32:34:78:
                    7b:7a:d7:13:da:0e:a3:76:36:07:a0:82:24:82:bf:
                    21:3d:59:8c:1a:d1:16:22:8b:6d:6b:f5:cf:8a:6f:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F4:70:AE:55:10:6C:55:CC:DF:D8:57:40:C1:58:92:2D:35:C8:6B
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:26:3a:59:65:5c:7d:dd:68:93:42:bf:eb:a8:53:5e:af:a1:
         7b:57:bc:d4:62:0d:ce:49:5f:ea:78:fa:c5:12:aa:04:c3:14:
         11:2e:ed:08:17:fe:c3:1f:90:00:b5:8a:1f:8a:96:35:f5:c5:
         3d:01:8e:4f:15:b3:7a:ec:cc:70:f1:d6:8a:ac:b8:5b:1a:53:
         8f:5a:82:7e:ff:51:49:70:5c:ae:a0:a1:e3:ca:27:b9:24:f2:
         7e:26:d3:7c:a9:a6:7c:23:30:1a:8f:62:d0:ac:74:90:74:a6:
         79:09:e2:73:e0:05:e2:98:4a:de:84:12:77:c2:bd:31:42:e7:
         17:bd:13:85:7d:14:5f:fe:dd:33:94:19:e9:31:f1:0b:95:07:
         0c:82:4e:26:6e:fd:1a:a3:b0:bd:f9:70:a2:96:96:35:39:57:
         81:0b:65:af:86:1d:3c:87:58:aa:5b:c6:0d:7c:ac:6a:4c:97:
         74:df:6b:1a:f2:76:7b:78:f3:e4:dc:38:c3:48:ea:d9:b0:af:
         c8:db:46:b2:45:17:c1:f7:e6:8a:62:47:a5:25:f6:f4:4e:5a:
         3c:04:da:71:76:c9:22:bf:af:54:55:6e:c7:50:0a:a1:eb:89:
         19:ea:71:de:01:50:96:64:a6:ee:51:3f:ac:16:e8:3d:6e:3c:
         12:da:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:40:19 2026 by rpki-client