Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File:                     bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier:          ivpYdoFtUe5kNDPIXq3yZRqhv+uffRP8jLomTgrGCZU=
Subject key identifier:   EA:6C:1D:E6:E6:EC:A8:2F:B3:90:A3:F2:0E:AE:19:EE:DF:11:57:EA
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer:       /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial:       01A0E43F29C6871CD2D20BFDBE4F68034C82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number:          1A7B
Signing time:             Sun 27 Sep 2026 19:02:19 +0000
Manifest this update:     Sun 27 Sep 2026 19:02:19 +0000
Manifest next update:     Mon 28 Sep 2026 19:02:19 +0000
Files and hashes:         1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: X6fc7FnRFHXAAsZFZOnViWFzCWbBxS+VTVzL3DfNQOA=)
                          2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3f:29:c6:87:1c:d2:d2:0b:fd:be:4f:68:03:4c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
        Validity
            Not Before: Sep 27 19:02:19 2026 GMT
            Not After : Sep 28 19:02:19 2026 GMT
        Subject: CN=ea6c1de6e6eca82fb390a3f20eae19eedf1157ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:db:12:dc:95:47:bb:df:9d:bb:d4:0b:11:
                    48:da:58:4a:24:60:f9:f1:a2:4d:6b:9c:04:da:01:
                    b0:89:62:88:bb:ac:51:55:73:33:dd:2f:fa:9d:03:
                    c3:2a:b5:f7:2f:97:1a:3f:29:29:e9:8f:04:f3:19:
                    ac:d4:9f:98:43:a3:7c:a1:35:66:5a:1b:ba:39:96:
                    3e:8e:6c:02:50:bf:d5:b4:e1:83:b2:e5:0b:eb:21:
                    ec:07:bb:f8:66:45:e3:20:d9:76:59:80:29:f6:87:
                    a7:a4:87:0b:5a:3a:ac:0f:75:78:90:64:e5:ec:04:
                    98:69:b5:be:6d:28:3d:84:e7:34:52:cb:c9:bf:37:
                    d3:6c:f7:26:a0:76:32:1e:e3:14:30:b7:3d:16:20:
                    8c:65:7b:b1:ce:d2:de:2b:0d:f8:53:9a:4c:95:b1:
                    ff:c3:0c:4d:42:2e:82:f5:9c:22:52:62:78:bb:0b:
                    bd:94:d6:4e:1f:68:1b:9e:75:3c:0f:e3:c7:e4:af:
                    c3:fd:06:5d:e4:d5:8c:fd:4f:e1:06:ee:08:45:52:
                    37:97:48:38:09:1d:9f:19:cc:67:7c:f1:af:34:6f:
                    c9:7d:70:19:78:1b:15:c3:5d:77:cf:f0:d0:db:4e:
                    fc:5a:30:77:90:5e:77:62:ae:0e:8f:f6:7b:f1:64:
                    04:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:1D:E6:E6:EC:A8:2F:B3:90:A3:F2:0E:AE:19:EE:DF:11:57:EA
            X509v3 Authority Key Identifier:
                keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:80:2a:e2:35:66:12:18:1b:4b:2c:24:31:c0:8e:4d:e6:
         74:db:d7:5d:4b:3f:34:9f:dd:9a:33:93:3e:49:a6:89:bd:ee:
         07:37:24:14:42:c2:78:fd:9f:08:d7:21:1b:4f:6a:1e:21:c0:
         71:2d:e2:bc:42:2b:43:a0:1a:de:b7:a8:2a:47:51:94:57:87:
         b0:20:15:96:76:f8:b8:b8:0a:21:ef:5f:a6:82:3d:2a:5b:19:
         69:92:43:17:d5:f1:f8:69:41:08:87:11:8a:f8:fe:34:7f:37:
         6d:87:76:6f:7e:26:2a:e1:70:88:38:32:bb:d8:76:82:91:15:
         48:02:4d:7f:41:9d:b1:be:e5:73:37:e6:36:43:5e:99:8b:01:
         18:14:38:25:d8:c4:fd:55:1f:dc:fb:9b:f5:f4:54:e5:cb:ca:
         ab:d6:24:ec:39:c6:33:1e:51:ff:d8:6c:0d:1e:27:6c:82:81:
         79:2a:29:f7:78:3a:7b:72:9f:8a:4b:66:13:8a:2a:09:3b:06:
         45:f7:53:72:e3:09:9b:77:5b:3b:79:0e:1d:c3:d8:16:89:a4:
         02:e3:af:2d:c1:f3:f4:5f:b4:ee:f8:d4:ae:80:6e:63:2b:26:
         3e:cb:6e:3f:58:8e:5c:a4:cb:2f:e8:9e:18:21:49:a6:ac:d5:
         16:42:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:09:15 2026 by rpki-client