Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File:                     6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier:          coZwF/W/VZZTBojLLZE8TsTnfc5GK7Q3Tv/mGFCdF9A=
Subject key identifier:   9F:C4:40:C4:9D:21:A8:1E:D6:21:E6:1F:81:31:27:33:DF:22:D5:2C
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       01A0D26E88D51E96CEDE182B3A32CB008E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number:          11A4
Signing time:             Thu 24 Sep 2026 08:00:54 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:54 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:54 +0000
Files and hashes:         1: 202qM1rsE239uIdAcf__Gnv7zdc.roa (hash: ieFIbb9cUztQSqOO5FEKp3hxs3Zx7kO0z2iNcIicraA=)
                          2: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: DwmAM7+K4Ie96U54Mg0JMsPqd1afaGjdXectYcyvIGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:88:d5:1e:96:ce:de:18:2b:3a:32:cb:00:8e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Sep 24 08:00:54 2026 GMT
            Not After : Sep 25 08:00:54 2026 GMT
        Subject: CN=9fc440c49d21a81ed621e61f81312733df22d52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:cc:c2:5f:b2:82:52:11:84:5b:c0:d0:ec:
                    09:e0:6c:67:0f:15:34:bf:c2:13:3c:2e:9a:c5:51:
                    4b:18:ce:80:74:43:92:52:be:1c:fe:0c:6b:c9:04:
                    f8:49:ef:62:14:27:00:51:55:6b:55:1e:e8:00:73:
                    64:8e:80:59:37:3f:d2:14:32:ca:6c:63:a1:37:08:
                    c9:67:b4:7b:04:a6:27:b6:28:61:99:51:74:52:b1:
                    bf:a1:48:35:f8:07:dd:47:17:0f:82:0f:ca:28:ab:
                    7a:5f:58:05:77:d0:b3:ba:77:d1:c7:93:21:b7:c0:
                    81:a3:11:91:76:71:3b:80:10:03:23:19:86:a0:cb:
                    b6:d5:8e:e4:1b:d8:6c:6a:e1:f0:32:c6:b8:40:68:
                    1e:11:a2:5d:a4:11:10:7c:62:05:4a:35:9f:50:f8:
                    92:e6:a5:0d:fc:64:35:0c:7c:4e:7e:11:9f:fd:c5:
                    7b:52:76:a4:b7:5c:38:8a:8d:a0:41:19:9f:05:af:
                    06:d1:e7:c0:1a:c3:f9:5d:0c:b1:ea:14:11:22:f9:
                    61:a1:f6:c6:b9:79:f2:36:72:93:81:b0:19:17:a1:
                    f7:60:9e:1e:7e:54:07:03:ce:8b:a9:f5:64:e7:31:
                    a6:0d:be:6a:85:cd:ff:02:1e:48:34:98:48:46:58:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C4:40:C4:9D:21:A8:1E:D6:21:E6:1F:81:31:27:33:DF:22:D5:2C
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ce:00:38:8d:dd:25:19:99:a3:8a:a0:7a:35:21:5c:d1:1d:
         9e:de:2d:51:c0:b5:e9:4c:5e:c5:c4:42:58:6e:c9:c7:cc:ad:
         06:82:69:f8:43:8d:53:82:bb:64:77:fc:9e:d5:41:1b:79:4c:
         c0:2d:95:19:5b:dc:89:81:c4:46:f4:58:7d:92:43:8f:a2:5a:
         12:48:03:19:ee:fe:5c:98:bc:b1:ce:ad:c7:47:63:6c:ac:d5:
         6b:b1:8b:e4:a0:94:46:97:31:ac:45:92:fd:ea:a1:99:45:da:
         67:7a:c9:14:d9:a5:df:d8:c5:4b:ee:1d:db:4e:ee:3e:c9:08:
         e8:53:de:40:e0:67:8c:d9:a3:b9:6d:52:e4:d2:0e:bc:9f:aa:
         60:53:19:cc:94:90:02:25:ae:16:fd:2f:f5:b7:37:03:0a:65:
         82:ad:93:53:9d:30:f5:49:0c:53:c9:27:1c:5f:6e:5e:26:ae:
         ea:38:d2:ed:92:0a:8b:1d:59:46:7b:14:27:cb:3e:19:1b:91:
         be:91:3f:23:b8:03:62:95:fd:e7:0c:0f:be:44:f8:b4:4c:c6:
         32:fe:d0:db:0d:77:68:dc:d6:3f:41:a6:6d:fb:c1:da:15:d1:
         fa:57:4c:af:da:63:30:0a:0c:d7:e6:ad:15:78:b3:b0:3f:6f:
         2c:25:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:18:56 2026 by rpki-client