Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File:                     cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier:          1TSV4as5enqo8mS6n76AWGwx1ty39ZDMEcVZVhOgPHM=
Subject key identifier:   6E:3C:48:C3:29:B5:4B:00:73:0F:8D:03:E9:D7:3D:EB:DA:97:96:AB
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer:       /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial:       01A0E098C6E13A66F5FB5320A5960EE3718F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number:          19E4
Signing time:             Sun 27 Sep 2026 02:01:43 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:43 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:43 +0000
Files and hashes:         1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=)
                          2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: TjWaQnpS8frvegH+cWntfw4/LGVbPk9pQnaye4ggQIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:c6:e1:3a:66:f5:fb:53:20:a5:96:0e:e3:71:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
        Validity
            Not Before: Sep 27 02:01:43 2026 GMT
            Not After : Sep 28 02:01:43 2026 GMT
        Subject: CN=6e3c48c329b54b00730f8d03e9d73debda9796ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c5:60:03:5f:e2:0b:39:b7:83:3e:e5:23:b4:
                    e4:cd:56:d7:3f:e9:16:aa:a4:ab:a0:f2:2c:d1:3c:
                    eb:bf:af:fa:fc:b2:24:47:f7:1b:87:92:b2:1f:44:
                    c8:80:98:2e:d4:24:70:aa:c7:ab:1e:e6:ed:03:5c:
                    dd:cd:77:7e:ba:ca:e1:5e:71:8d:8a:16:74:d7:f1:
                    d2:d7:77:e0:b7:69:45:39:95:f8:9a:cd:9c:6e:5e:
                    58:d8:65:7d:1e:59:44:b7:08:05:25:6b:2b:1f:b7:
                    84:20:a2:b2:f4:97:f8:1f:8a:1b:69:2a:4a:8a:f5:
                    4b:02:0e:9b:41:62:3e:ec:b3:af:18:3f:3a:7e:c7:
                    3e:4c:8f:3a:17:13:09:b1:d9:ca:b1:a8:47:0c:93:
                    c5:49:02:d6:9e:fa:3e:64:f1:e2:f9:07:a9:f3:2d:
                    1f:37:ec:22:e3:51:2e:ea:5e:d3:54:37:6b:f4:63:
                    29:bc:1e:d5:90:20:1a:92:4c:17:c6:6f:25:bd:7a:
                    31:bc:28:dd:aa:bb:87:e8:78:57:ac:41:1e:d0:ea:
                    6d:4d:72:1c:e9:a4:6b:a3:7f:8a:0c:9b:b5:1d:3d:
                    23:31:c5:73:98:38:ef:3b:d8:1e:55:15:d9:0d:09:
                    15:cf:11:40:38:2c:63:66:6a:04:d2:fd:49:46:c9:
                    20:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3C:48:C3:29:B5:4B:00:73:0F:8D:03:E9:D7:3D:EB:DA:97:96:AB
            X509v3 Authority Key Identifier:
                keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:37:dd:6c:c1:82:90:68:1d:d2:9a:16:0f:b6:7c:88:50:b4:
         c6:12:5e:8e:87:ac:69:a2:f9:6a:7f:da:58:41:a0:52:26:11:
         9d:a5:e0:e2:c7:29:80:3f:d8:69:f5:03:95:ff:50:08:c9:9a:
         de:ff:87:7b:61:d7:2a:bb:9e:96:5d:0d:78:f4:59:c5:02:83:
         73:cd:c5:1a:6f:c7:3e:55:5b:b7:3c:e4:c5:2d:99:21:90:81:
         b4:a0:4b:18:a2:49:b7:04:7f:03:6f:e1:34:be:8d:ed:5e:fd:
         0b:4f:d6:1e:60:b7:66:98:9a:7a:ce:5f:12:64:cb:6f:92:56:
         f4:d4:05:72:4b:e6:03:33:91:30:29:cc:fe:e6:f8:96:bf:e4:
         9b:71:e3:8a:fd:e5:19:45:19:5e:77:fe:0d:07:71:34:34:a4:
         32:8e:c8:8f:23:44:77:74:f5:39:50:4a:0b:3f:36:3a:62:e5:
         c2:ed:f3:fa:2d:dd:f4:55:cd:6c:68:e6:6f:2b:fd:a8:e3:a4:
         ca:eb:8c:6c:52:b8:de:a7:ba:37:83:92:b6:2c:bc:51:9b:45:
         86:66:8c:99:02:ae:d3:5d:e9:c4:b3:db:d2:a2:41:29:20:11:
         ea:40:95:41:f8:93:b1:73:e2:bd:b7:ce:e0:57:46:51:78:7d:
         fe:80:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:54 2026 by rpki-client