Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File:                     hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier:          a1QsLDJ9L6/u93OBUiqraC3PQjn12mLB6xdLBZnJ1CU=
Subject key identifier:   6F:F9:5D:92:D9:AB:E8:7C:21:19:3A:14:17:83:B0:4F:3B:7B:F9:54
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer:       /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial:       01A0DB721054E9E2BB5282BCC2BA429ABF8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number:          1A07
Signing time:             Sat 26 Sep 2026 02:01:20 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:20 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:20 +0000
Files and hashes:         1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: YF8uj9bF41hy/pjsw/cgPtFmN6FEXAtvo3jIXCj8GJ8=)
                          2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:10:54:e9:e2:bb:52:82:bc:c2:ba:42:9a:bf:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
        Validity
            Not Before: Sep 26 02:01:20 2026 GMT
            Not After : Sep 27 02:01:20 2026 GMT
        Subject: CN=6ff95d92d9abe87c21193a141783b04f3b7bf954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:98:8e:2a:12:65:4c:cf:07:98:56:2d:41:
                    d7:38:69:ce:8a:18:f6:36:6a:5a:e7:b5:b9:bc:36:
                    19:49:2f:bb:ac:05:7e:a0:95:05:8a:7b:48:c4:ad:
                    88:db:3d:a9:3a:b3:99:50:69:10:ff:10:76:6c:e0:
                    7a:d2:34:15:79:2b:af:56:7f:ed:10:80:21:14:0b:
                    c9:b7:ef:f2:22:8b:e7:f4:0b:05:71:d9:a4:b2:14:
                    fc:07:1a:9d:99:59:21:ef:52:23:a0:b1:e6:b1:4f:
                    23:71:c9:ba:26:84:3e:6f:40:77:6a:f9:23:e9:d7:
                    76:26:ca:01:fc:b3:36:1c:f1:f2:3d:5e:7a:9c:74:
                    4b:df:0b:a2:d4:1e:ef:d0:f2:d7:11:ac:37:79:e1:
                    d7:9b:97:9e:9e:34:f5:03:ce:7a:1c:13:78:bb:a6:
                    be:45:45:63:ef:06:4a:70:71:5b:19:f7:1b:92:b2:
                    ba:10:dc:e2:78:ec:01:de:80:a9:17:10:a8:31:a5:
                    66:5c:49:6c:88:8d:f1:5f:52:3c:f1:25:09:30:13:
                    4e:a8:79:d5:e1:48:8f:db:3e:5d:1a:b1:fd:d9:84:
                    65:a3:74:0b:22:d4:61:31:a6:61:ed:84:10:71:3c:
                    ef:f2:29:75:b4:e3:59:2f:99:62:f9:ef:5c:f0:4a:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F9:5D:92:D9:AB:E8:7C:21:19:3A:14:17:83:B0:4F:3B:7B:F9:54
            X509v3 Authority Key Identifier:
                keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:df:89:16:09:e5:48:ea:09:b6:da:cd:76:2a:93:73:12:
         c1:f3:84:22:b5:fa:b4:d5:ab:b1:26:21:6d:18:65:d5:16:e3:
         a8:30:f8:8c:1b:cb:03:64:2a:14:27:ca:e8:04:58:06:20:4a:
         6a:27:2f:ea:51:c4:3e:41:a5:cc:0a:bf:46:35:bd:59:84:bf:
         29:86:1e:97:04:48:62:fa:bc:51:19:58:f6:37:c0:bc:30:d0:
         59:67:2d:4d:33:59:c8:fc:ed:92:1e:76:24:0c:65:35:ce:15:
         60:be:c5:35:8f:9c:63:33:d1:f9:75:c2:ed:e5:1e:ca:39:76:
         69:b6:69:55:4b:8c:27:b4:2d:24:66:63:d2:c0:75:f8:fe:5e:
         fb:c2:bb:fd:5f:8d:f8:11:7a:2b:d3:4d:05:79:76:56:e4:5e:
         74:d8:7c:c2:47:9d:18:2e:52:8e:33:c2:83:df:b8:75:4a:1d:
         5f:ff:74:cc:2f:2e:ee:d2:b8:2d:53:15:ac:0c:9f:c3:54:94:
         ec:f2:37:76:55:a2:51:7b:ea:05:58:7a:4e:84:0c:79:bb:b8:
         8e:e8:b3:e2:f7:28:8b:5a:d1:c9:97:9e:61:27:4f:31:e2:98:
         18:97:dc:3f:d9:ff:e1:31:db:f3:56:58:7b:3a:d7:91:cd:0b:
         28:93:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:18:38 2026 by rpki-client