Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft
File:                     6G5_VaMBVrTuZE6My9BzvcCC7sY.mft (raw, json)
Hash identifier:          Uxs8ex1Wm2jHZ2x2sTRyAkXcbk85QKRWOBawumVeG28=
Subject key identifier:   BD:D8:9C:DD:DC:7C:1A:FB:B0:35:7F:12:41:07:92:38:BD:5A:BA:2C
Authority key identifier: E8:6E:7F:55:A3:01:56:B4:EE:64:4E:8C:CB:D0:73:BD:C0:82:EE:C6
Certificate issuer:       /CN=e86e7f55a30156b4ee644e8ccbd073bdc082eec6
Certificate serial:       01A0D4CB1E8B3CA834EED76B51BEBB7923E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft
Manifest number:          016E
Signing time:             Thu 24 Sep 2026 19:01:16 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:16 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:16 +0000
Files and hashes:         1: 6G5_VaMBVrTuZE6My9BzvcCC7sY.crl (hash: hseCkUw/7kbu9JdB1XleZc6VCjJ8gcxrOII4y4Z99CM=)
                          2: gpGElzUmjuqdHJapTLDmhRMtBQc.roa (hash: JkjRa61rvVX6ySfU/bRKh17xcEVLrstc9W5WtCiKQvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:1e:8b:3c:a8:34:ee:d7:6b:51:be:bb:79:23:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e86e7f55a30156b4ee644e8ccbd073bdc082eec6
        Validity
            Not Before: Sep 24 19:01:16 2026 GMT
            Not After : Sep 25 19:01:16 2026 GMT
        Subject: CN=bdd89cdddc7c1afbb0357f1241079238bd5aba2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:b5:cb:95:f5:bd:a5:76:17:07:8f:9d:9f:
                    53:8c:79:19:e0:65:f9:2f:7c:b1:a4:c7:60:00:1b:
                    56:85:33:74:44:70:ea:1a:8e:5b:55:6a:63:7a:35:
                    38:b1:e3:54:06:f1:48:ff:62:1b:00:63:c4:25:48:
                    09:54:6c:88:d9:ad:7d:c8:4f:9a:55:85:a8:81:00:
                    4a:7a:6f:5d:92:4e:40:24:27:cc:ef:d0:c4:48:f0:
                    53:87:5a:33:8a:cb:05:a2:7b:29:3d:cb:3c:60:9c:
                    a7:1f:9e:9f:72:57:08:ba:33:d0:e4:47:1d:9e:76:
                    7c:7c:b0:13:15:e5:c3:6e:12:07:11:c9:1f:29:25:
                    ab:53:61:3a:bd:78:7d:8d:a8:d2:4c:a8:91:15:4c:
                    d6:51:fe:3a:39:98:e0:e0:cb:7b:66:60:ac:68:b1:
                    e3:6b:17:bb:03:b3:8c:81:90:82:e6:9f:a1:9c:ac:
                    9a:a1:5d:bf:5f:39:4d:4c:cd:5e:17:db:d1:2d:41:
                    37:91:39:5e:ca:f3:b4:fe:a1:84:45:fc:db:ce:29:
                    a6:8c:46:a3:83:c9:a7:48:df:59:7e:93:4d:52:85:
                    84:00:db:3a:23:3b:4e:0b:4e:0c:ff:3b:c0:d8:49:
                    fe:0a:03:d1:db:33:be:c5:17:e6:fa:89:18:e3:3e:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D8:9C:DD:DC:7C:1A:FB:B0:35:7F:12:41:07:92:38:BD:5A:BA:2C
            X509v3 Authority Key Identifier:
                keyid:E8:6E:7F:55:A3:01:56:B4:EE:64:4E:8C:CB:D0:73:BD:C0:82:EE:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G5_VaMBVrTuZE6My9BzvcCC7sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0902c2-5650-44a7-a53c-e780f13b245a/1/6G5_VaMBVrTuZE6My9BzvcCC7sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:2c:36:03:90:2e:54:85:83:c2:8d:64:08:31:e4:7d:0d:
         b9:4d:82:b2:12:07:44:d8:c5:be:23:97:ca:7f:dd:ba:1a:4e:
         de:38:82:e4:e5:31:67:a0:bf:e1:92:ad:a1:83:c6:37:4e:71:
         81:8d:63:84:95:38:34:95:9b:50:e5:66:8a:fb:15:4f:f3:c6:
         27:b1:32:2a:8d:90:61:b1:b0:22:1e:95:c1:9b:29:39:f6:bf:
         08:95:ae:b5:40:ff:f0:ec:eb:6e:b3:ed:43:c0:38:2f:b5:16:
         b2:0c:b2:92:f6:91:92:9a:98:9a:70:73:08:7a:0a:60:d7:da:
         06:14:8f:33:87:b6:5b:01:35:c2:0d:33:9a:0d:2e:c4:89:a0:
         eb:7e:fa:90:6a:15:0b:a8:08:85:e4:8f:0c:30:45:d5:6c:69:
         f6:59:82:02:36:5b:5a:5a:72:d0:c5:ea:78:e6:48:61:7d:a1:
         f7:d7:1f:ea:6d:d5:c8:5e:44:75:8c:b3:2c:da:54:ad:0e:96:
         51:59:4c:d2:4e:51:80:5c:19:24:f5:75:36:01:d8:20:f7:ea:
         8d:66:74:96:81:e9:43:48:01:02:32:e4:8c:b3:f7:44:ff:c3:
         19:b1:35:dc:35:c1:08:bd:75:3b:10:f8:11:a9:a8:92:9b:f9:
         1d:96:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:34 2026 by rpki-client