Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          4NK2hWNc0Tn0yqpC991FmmyAuEzT7glp3K13Nq4jZN4=
Subject key identifier:   9A:9D:D9:3F:33:68:32:F5:7D:03:22:3D:45:1A:D0:08:5D:26:A8:AB
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       01A08D56487D602AE6C13D8F279908AF29FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0E81
Signing time:             Thu 10 Sep 2026 22:00:37 +0000
Manifest this update:     Thu 10 Sep 2026 22:00:37 +0000
Manifest next update:     Fri 11 Sep 2026 22:00:37 +0000
Files and hashes:         1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: 8ilHHqItP3eoU4G46WfRDebQsB76EgathkM5y6dvLxQ=)
                          2: dBhLlFM2M2mv1uZaicw5rDd3FHE.roa (hash: lGG5JBypXkrAJMqqEu1PRsT0MklsGOxRDMpecpiLJ74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:48:7d:60:2a:e6:c1:3d:8f:27:99:08:af:29:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Sep 10 22:00:37 2026 GMT
            Not After : Sep 11 22:00:37 2026 GMT
        Subject: CN=9a9dd93f336832f57d03223d451ad0085d26a8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:0a:21:9c:55:d4:24:35:8e:6e:62:39:ac:
                    35:7b:29:71:6b:67:8b:bc:3c:04:03:26:65:21:4f:
                    af:d8:31:41:f9:6f:15:73:ba:c7:5a:1f:8a:3d:9b:
                    91:c9:e4:72:14:2c:39:88:d5:f2:cd:2c:86:8f:5a:
                    36:62:68:39:bd:fc:56:8a:74:b2:32:c8:35:6f:2d:
                    7b:99:3c:3b:0f:35:e1:40:17:8c:e1:a1:10:28:60:
                    e9:2b:d5:c0:8f:f8:9a:23:b7:88:aa:87:39:df:20:
                    54:df:dc:7a:ab:fa:4a:97:90:9f:1b:33:57:f9:08:
                    21:39:89:ac:00:f7:1e:da:b5:aa:f1:68:dc:ab:97:
                    05:a7:40:4e:2b:66:f3:0a:93:0e:36:06:67:ff:74:
                    aa:d6:4c:8b:ef:99:24:01:65:02:40:84:d1:0c:d0:
                    47:28:91:f9:d5:d7:c5:a6:98:9d:d7:31:73:dd:76:
                    21:89:0f:f2:e5:4b:ad:54:d5:e4:36:6d:94:85:a8:
                    0d:43:68:97:30:92:25:93:29:5f:22:51:81:a3:ec:
                    68:67:20:ae:94:71:3f:85:b8:df:e0:e5:bf:d2:cc:
                    b1:43:68:2e:ea:db:dc:4f:a5:d6:39:88:b2:42:d9:
                    a9:24:79:a0:58:57:08:4a:3a:54:99:47:32:35:58:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9D:D9:3F:33:68:32:F5:7D:03:22:3D:45:1A:D0:08:5D:26:A8:AB
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:0f:8a:b7:85:57:59:ce:a9:d5:3b:a0:65:94:44:d2:f6:
         d2:78:25:ee:55:d2:69:10:8a:15:d1:65:e4:73:e8:ff:c5:85:
         4f:1a:ec:9d:4b:4e:4a:3e:57:6b:58:35:22:02:ae:4a:7c:a2:
         28:67:53:2e:e0:84:2d:d6:45:d1:b6:2c:fa:70:72:e9:48:c7:
         0b:48:be:ca:69:3b:f0:f2:66:95:75:f2:3e:18:ae:bb:33:81:
         08:21:9d:2c:f5:a8:bc:5d:e3:6f:0f:22:2e:11:a4:cf:15:3b:
         2e:af:49:49:c6:9b:90:84:cd:1f:8b:b8:88:f2:8e:2a:2f:e0:
         6d:f7:72:90:a2:76:0c:8c:8c:f2:1f:76:ac:38:62:b2:fb:b1:
         c0:8f:e3:4c:f9:34:07:a6:d1:55:17:c0:30:e6:77:08:ad:54:
         c1:49:1f:b8:06:7a:61:4b:3e:ba:b9:56:08:79:ce:07:43:47:
         98:ff:00:b5:e7:98:2b:58:63:3e:5b:eb:a7:25:07:8e:2c:ee:
         81:7a:96:c7:8c:bb:8d:14:bc:d2:e5:57:17:81:98:3a:16:7c:
         48:d1:e1:48:73:47:06:96:6a:f0:3f:5b:b1:de:00:e9:09:ed:
         51:20:37:fa:96:36:f8:df:a0:3d:45:b8:5d:ec:9d:40:95:14:
         8b:41:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:02 2026 by rpki-client