Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
File:                     6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft (raw, json)
Hash identifier:          xsI8+OCkdhhYrj0Vb/iK9Qdx7dvH9mC6pUvXquHKI2w=
Subject key identifier:   B6:84:A3:87:10:EA:44:29:23:9D:48:CB:77:E0:28:10:97:BD:2C:35
Authority key identifier: E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA
Certificate issuer:       /CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
Certificate serial:       01A0CCDA163EC690F40236AAE408532AAFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
Manifest number:          132D
Signing time:             Wed 23 Sep 2026 06:00:39 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:39 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:39 +0000
Files and hashes:         1: 6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl (hash: 4JqSYhZSaKQu3FyTulx24+b4KQHNG3TPXtS8FYzSJiE=)
                          2: zjWe9JXvYeiWK1DJ_0aHJR61K2o.roa (hash: IrlQd0d+Fguubk4wbis1+hKRc8zFTkF2CICSp+JnthA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:da:16:3e:c6:90:f4:02:36:aa:e4:08:53:2a:af:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88293ac1670cf2e3a4b3da6c7771f8b1e84cfea
        Validity
            Not Before: Sep 23 06:00:39 2026 GMT
            Not After : Sep 24 06:00:39 2026 GMT
        Subject: CN=b684a38710ea4429239d48cb77e0281097bd2c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:f6:ed:b8:f7:42:75:c7:f9:c4:69:0c:f2:
                    99:0a:51:d5:84:e2:86:8c:8d:0c:44:e0:f9:84:d0:
                    79:f0:d2:b2:f7:e8:c1:c2:ac:3f:96:ea:d1:5a:56:
                    12:84:09:a4:58:4e:dd:da:eb:7a:58:49:80:07:9a:
                    fa:82:b5:6a:e3:f0:77:c7:f5:b5:4f:99:0a:e4:69:
                    76:b8:5b:8c:01:8b:c2:2b:49:58:a1:87:60:5c:0e:
                    41:33:e6:73:82:14:5d:ee:6c:23:24:70:d2:5b:4f:
                    e5:f4:15:1c:84:30:0f:f4:a9:1e:f1:5e:78:2e:0a:
                    56:5e:d5:0a:01:31:98:e0:fe:e3:3a:ef:16:2f:f5:
                    c8:4b:b8:9b:4b:a6:bf:29:e2:42:2f:7b:09:cb:f9:
                    68:a8:30:bd:4f:cf:c1:90:32:5f:bc:3f:38:c4:69:
                    14:e6:56:70:c3:a9:d7:8b:94:d1:4d:32:c8:da:f4:
                    af:a8:45:59:22:a5:1d:3d:5a:bc:7e:c9:d9:6e:37:
                    39:e0:21:72:43:12:98:a7:7e:f5:e5:d1:84:38:d7:
                    6e:77:a1:db:b0:4e:f0:59:5d:b1:8b:62:ad:9c:a7:
                    00:13:9b:5a:bb:34:61:ed:f0:9b:df:ea:0c:e0:7f:
                    a3:2e:2c:16:8e:95:87:c3:8b:67:d4:6e:3a:e6:2c:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:84:A3:87:10:EA:44:29:23:9D:48:CB:77:E0:28:10:97:BD:2C:35
            X509v3 Authority Key Identifier:
                keyid:E8:82:93:AC:16:70:CF:2E:3A:4B:3D:A6:C7:77:1F:8B:1E:84:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IKTrBZwzy46Sz2mx3cfix6Ez-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fb6e07-bbc1-447e-b3fa-5110f6b579bf/1/6IKTrBZwzy46Sz2mx3cfix6Ez-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:41:53:46:8c:4a:7e:aa:e5:f5:fd:c9:5a:80:d7:fc:e4:6f:
         ae:c1:d4:5b:0d:52:07:31:e6:83:f8:91:3e:94:61:97:2a:0d:
         13:72:73:f7:1d:9e:84:c1:ae:15:a2:ae:ab:e3:ff:4b:f2:a0:
         7c:73:cf:80:26:aa:44:03:72:60:27:8a:f6:05:86:ca:4f:45:
         ab:aa:b9:19:e5:73:0f:2e:82:81:53:21:ba:96:de:ae:37:6b:
         3d:82:22:bb:24:28:fa:90:38:dd:e3:87:04:13:1d:ee:1d:7f:
         a7:68:62:0e:c2:4c:28:45:61:3a:89:bd:c1:ae:0e:8f:ba:b7:
         82:81:f0:64:3c:cb:2d:3a:c0:47:6d:48:c6:70:2c:98:8c:0c:
         8f:17:f9:6c:c8:5e:30:24:0e:ac:3d:e3:b9:79:fe:c2:2f:50:
         b0:44:74:09:98:2d:02:8c:8c:08:97:43:a7:80:d6:c1:64:f4:
         e3:0d:58:26:9d:e4:e2:14:fe:41:00:ea:d6:0f:12:9e:39:ce:
         fe:9e:c0:ae:82:88:d7:cc:3d:f0:5e:45:db:6a:44:4c:70:e5:
         f8:bf:75:05:41:a8:d5:50:b1:34:8b:28:71:ef:b9:11:68:8c:
         a9:3a:c6:9f:8c:9b:2a:2c:d1:58:5b:1a:f9:85:e3:e7:ff:0e:
         76:7d:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:55:17 2026 by rpki-client