Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
File:                     b6U11TlSoTJ99CLvgOuXvABDRn4.mft (raw, json)
Hash identifier:          RPQd5k47r4QnTBt0T/ufSkzQZAAmtA2kZ+lq6BGdCm8=
Subject key identifier:   46:A1:AE:E8:AA:82:EE:76:66:11:A8:9F:FE:27:A7:B2:25:50:5F:B9
Authority key identifier: 6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E
Certificate issuer:       /CN=6fa535d53952a1327df422ef80eb97bc0043467e
Certificate serial:       01A0DA970A9EE0EB42588960A5E03B686583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
Manifest number:          029E
Signing time:             Fri 25 Sep 2026 22:02:06 +0000
Manifest this update:     Fri 25 Sep 2026 22:02:06 +0000
Manifest next update:     Sat 26 Sep 2026 22:02:06 +0000
Files and hashes:         1: YKdoVLd9ylGhk--_nieA-ylnwwY.asa (hash: iBRLVXc9pjx2a8hspS9tGoEHTB4wLOrd24lO6wYHwPE=)
                          2: b6U11TlSoTJ99CLvgOuXvABDRn4.crl (hash: DTlyjOfXEZm5+wo/wVGCsLMo/KQcCYFihz29wT7bv14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:97:0a:9e:e0:eb:42:58:89:60:a5:e0:3b:68:65:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa535d53952a1327df422ef80eb97bc0043467e
        Validity
            Not Before: Sep 25 22:02:06 2026 GMT
            Not After : Sep 26 22:02:06 2026 GMT
        Subject: CN=46a1aee8aa82ee766611a89ffe27a7b225505fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:93:3f:69:81:ac:54:2d:20:c6:dc:89:2f:
                    cd:1d:66:81:d5:ae:3c:09:d3:e8:db:e4:9d:72:d1:
                    82:65:6e:e3:64:43:fb:25:9e:b7:ac:e6:97:6a:4e:
                    e0:a7:0d:bc:53:16:02:b2:ce:b2:31:56:e1:1e:74:
                    16:6e:94:f7:62:1f:87:fe:b4:ad:1a:e4:25:51:fb:
                    2a:72:65:9c:ae:05:55:16:db:d4:00:10:00:21:50:
                    aa:c7:6c:14:39:37:79:ef:43:e9:9d:2f:d0:4c:3b:
                    10:16:44:26:93:8f:86:0f:83:01:95:6e:b5:7b:28:
                    28:d9:ff:05:ca:42:32:bb:91:7b:28:a3:5c:05:7b:
                    1f:8b:d3:69:99:52:ac:ee:4b:05:db:c1:01:7f:70:
                    3a:0a:6c:3e:5a:2e:7f:1f:e9:9a:a1:35:e9:74:9c:
                    61:ce:c4:af:53:8b:38:43:57:e0:ae:f1:08:8c:e4:
                    5b:e7:b4:34:62:f5:5d:f9:66:51:87:36:9e:48:1d:
                    ab:62:c8:b9:0b:33:3f:96:54:88:f0:68:15:eb:a2:
                    64:28:23:95:e2:11:f8:82:e5:0f:b5:5d:7b:ea:f1:
                    0a:53:aa:2b:b9:eb:8e:59:e9:45:3e:55:dc:5a:cd:
                    af:17:3a:e1:ec:f2:d6:62:e6:3f:0a:d0:b8:7e:d1:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A1:AE:E8:AA:82:EE:76:66:11:A8:9F:FE:27:A7:B2:25:50:5F:B9
            X509v3 Authority Key Identifier:
                keyid:6F:A5:35:D5:39:52:A1:32:7D:F4:22:EF:80:EB:97:BC:00:43:46:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6U11TlSoTJ99CLvgOuXvABDRn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/521d34-3630-4150-9432-6d96cdaecdfd/1/b6U11TlSoTJ99CLvgOuXvABDRn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ba:9f:10:31:ca:b1:a6:a8:64:d9:c3:2e:6e:de:94:9d:5c:
         4c:45:83:0d:21:37:e8:b2:c0:54:5b:7d:c4:0f:b3:0f:bb:b1:
         25:a8:83:65:c4:03:c8:98:24:52:cf:e8:77:bd:a0:23:85:33:
         38:3d:ab:c2:9e:f4:c3:8d:61:8b:35:6b:30:e0:9b:d5:c0:b8:
         89:ac:6d:37:80:cb:47:34:bd:09:40:c1:2c:c6:cc:83:a5:20:
         b2:e9:5b:16:00:9a:c7:e6:20:a9:51:3d:91:56:dd:72:2e:cb:
         25:7c:dd:86:0e:26:0f:57:93:11:3c:3d:4c:13:2a:0c:1b:4b:
         3b:5b:5d:56:a9:78:e5:b0:8b:02:ef:3c:27:67:03:44:97:b7:
         ec:13:b0:1a:96:9c:8e:43:97:f3:3f:ee:b8:1c:0c:93:05:69:
         2c:c5:38:25:e4:cc:d3:b4:88:c8:fc:f4:26:a4:d3:97:af:b7:
         09:70:6f:1e:12:e6:9c:8e:ca:4d:e6:80:be:62:46:31:98:0b:
         dd:32:ee:49:40:53:df:e3:3c:61:a5:4b:7b:1a:67:33:85:02:
         3f:b3:d5:bc:3a:d1:31:1d:0d:2a:d7:07:7d:a6:83:2f:e7:82:
         2f:89:c2:e1:cd:5e:29:b0:45:2a:9e:ab:c4:8e:8d:9a:22:20:
         48:64:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:03:33 2026 by rpki-client