Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          rliSyRsshqHjO+mO/8I1RlX7SOIPvWmgly9BXRC+toQ=
Subject key identifier:   69:A9:9A:98:AC:20:B3:9B:DD:BC:A6:2F:36:88:5A:DB:F3:E0:0A:20
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       01A0C9D8A86AC76434CDD36C38A4106A7B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          095B
Signing time:             Tue 22 Sep 2026 16:00:14 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:14 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:14 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: 6XtAEwAFqSbPKMvq2zn7UWxOqHFDHuBtpCSG+VlZp1w=)
                          2: biVvko4MLtx-74JBOEP2EI3N-Oo.asa (hash: Lh4Z77PwR1YKafsnPLruDB7D3sutTeLQwlDUIfN21i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:a8:6a:c7:64:34:cd:d3:6c:38:a4:10:6a:7b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Sep 22 16:00:14 2026 GMT
            Not After : Sep 23 16:00:14 2026 GMT
        Subject: CN=69a99a98ac20b39bddbca62f36885adbf3e00a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:cd:3f:5f:dc:cc:1b:76:ba:49:d1:70:56:
                    ed:3a:78:96:38:58:47:16:e7:5e:da:a9:ad:1b:1c:
                    ba:fc:b8:85:78:6a:d2:f2:49:bf:50:4a:34:eb:52:
                    aa:d2:d6:cb:43:68:ef:0f:90:dd:b4:1a:e9:c7:1b:
                    cb:90:df:39:1e:76:71:3e:37:9d:2c:b2:8d:93:9e:
                    ae:46:d9:8a:a3:43:6c:6e:4b:dd:2f:9e:4b:07:a9:
                    3f:e3:92:e8:af:f5:79:38:93:6d:bd:0f:c2:5b:3d:
                    2a:67:40:b0:e1:a7:af:9c:64:bc:15:28:54:7e:15:
                    f9:50:9a:2f:1e:8c:83:3a:48:6a:78:72:89:4c:06:
                    ff:7f:8c:86:29:4b:e2:04:60:dc:ba:1a:72:66:74:
                    7c:5c:c5:18:5f:1c:7a:a1:ff:0d:cb:18:1b:86:cd:
                    36:77:a3:cf:63:b3:55:29:bd:d7:b0:7f:a6:3c:08:
                    42:36:e2:b0:67:be:77:ea:40:a0:37:35:7d:4b:fe:
                    17:11:15:cb:c1:32:de:b9:b6:7b:5e:11:e1:83:5c:
                    c0:a3:fc:1d:3a:10:ed:fe:e1:de:f5:d0:55:31:7b:
                    4a:ad:d4:e3:fc:1c:25:4f:fd:d3:68:75:30:47:38:
                    69:47:15:ce:a8:c9:d4:9a:5e:aa:df:b5:f4:96:89:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:9A:98:AC:20:B3:9B:DD:BC:A6:2F:36:88:5A:DB:F3:E0:0A:20
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:44:fa:81:06:b1:e0:73:1d:bf:e7:92:cb:b8:e0:55:52:
         d5:28:0f:ef:f4:f8:f1:92:74:48:27:fc:d0:cd:1e:23:b6:cc:
         47:45:b7:9f:78:63:64:52:74:c7:05:b8:9f:15:9f:3e:46:e8:
         ee:9f:5f:07:45:28:cd:d9:10:05:bd:4a:f8:4f:e9:a2:5e:87:
         9f:64:2d:c3:7e:fd:7c:23:d4:1a:bb:be:ce:fc:e7:d9:a4:c0:
         6f:53:ea:a9:12:f9:30:e5:d1:88:cf:06:d2:73:c8:41:3f:94:
         97:62:88:4f:30:d4:29:8e:cc:1c:b9:f4:db:77:28:52:6a:03:
         32:24:05:84:69:92:2e:6e:74:49:8c:78:df:8d:58:b2:cf:d6:
         c1:ef:68:dd:da:80:42:21:32:9d:8f:f9:66:d8:e6:30:23:c1:
         26:aa:cb:d0:f2:f6:ec:5c:78:f1:fc:80:dc:69:8f:64:c8:5d:
         ec:86:70:eb:be:e2:30:83:4b:8c:34:de:9a:40:bb:cb:5f:46:
         43:57:d0:b7:88:1f:08:94:9f:2a:eb:b4:5d:45:2b:39:a5:2c:
         30:5b:56:4e:f4:37:b3:bf:45:23:79:e5:bc:fd:5d:5d:78:11:
         59:72:3d:d8:64:e3:ed:61:fe:8d:c0:bd:71:9a:01:95:ef:06:
         10:22:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:45:56 2026 by rpki-client