Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
File:                     6SV01xbLvb9yTXBsEReXD2Z7I34.mft (raw, json)
Hash identifier:          TTzrBSlOj6Xf+Cpe3czFY19K8umF4vWT4F+XWCTKy6A=
Subject key identifier:   13:C1:1E:F1:39:2A:B2:9B:D0:A2:82:22:88:64:79:12:B0:2E:09:77
Authority key identifier: E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E
Certificate issuer:       /CN=e92574d716cbbdbf724d706c1117970f667b237e
Certificate serial:       01A0005C769D3878C242C304E5C950AAB054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
Manifest number:          09DE
Signing time:             Fri 14 Aug 2026 13:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:54 +0000
Files and hashes:         1: 6SV01xbLvb9yTXBsEReXD2Z7I34.crl (hash: uK4omyKhwttOuv4+GtHqxaMEQU0Awm8ho5vj8m9+hmI=)
                          2: wE_m3PzawUPxAcW_yzrW78mgOTg.roa (hash: 0rkpF2YguxZ08C9vGFT6j8nPqUGLYAFlwBvueLMdE9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:76:9d:38:78:c2:42:c3:04:e5:c9:50:aa:b0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92574d716cbbdbf724d706c1117970f667b237e
        Validity
            Not Before: Aug 14 13:00:54 2026 GMT
            Not After : Aug 15 13:00:54 2026 GMT
        Subject: CN=13c11ef1392ab29bd0a2822288647912b02e0977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:b1:d7:cd:d1:f2:12:71:f6:a7:04:da:3c:
                    d5:a9:8d:8a:8c:a2:48:34:87:4c:64:53:88:00:00:
                    09:62:19:f9:1d:68:ca:65:ee:d0:2f:8d:b4:61:74:
                    85:7b:51:dd:80:4a:c3:cc:8e:95:d3:37:f5:a1:43:
                    b5:a8:78:2a:08:b1:54:a8:ea:ec:5e:30:57:1d:af:
                    5e:2e:5a:84:76:65:1b:9e:c3:45:97:13:97:a1:ce:
                    1b:19:38:20:68:8c:b3:f1:9b:54:60:48:24:1b:e2:
                    e9:b9:d2:0f:5f:5e:34:aa:0a:c9:7d:83:f4:08:90:
                    e2:7c:b5:e4:6c:69:95:44:1e:61:3f:4b:b8:e3:87:
                    c6:f0:15:e1:29:ba:7f:31:0d:cb:2f:9b:3a:14:4d:
                    52:79:d4:2c:4d:d7:e8:72:61:57:c8:7e:cf:48:58:
                    f8:c7:0b:6d:9e:12:20:58:d9:87:95:68:78:08:7e:
                    eb:29:f3:df:9d:0e:0d:7b:dc:e8:60:bc:f7:cd:9f:
                    c6:d1:08:7e:ec:87:2d:45:5c:6a:60:6c:b6:8a:b2:
                    38:ff:d0:24:3f:b1:b8:98:17:9d:d2:48:0a:34:70:
                    17:8c:1d:6f:e4:b6:a5:fd:2f:5f:08:fd:b2:fa:14:
                    80:2e:18:44:23:21:0a:4b:eb:84:47:46:c5:e7:3c:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:1E:F1:39:2A:B2:9B:D0:A2:82:22:88:64:79:12:B0:2E:09:77
            X509v3 Authority Key Identifier:
                keyid:E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:b2:c4:ad:db:89:0f:bb:25:41:bf:24:9b:c4:5b:20:76:
         27:53:8a:9c:0f:3a:97:21:91:da:20:4d:83:df:23:f6:8f:67:
         17:5e:31:4b:9d:3b:38:0f:cf:df:68:f7:f6:8e:ef:e1:4c:0c:
         81:93:f1:97:a3:01:00:6b:47:94:33:70:0b:d6:c7:bc:a1:50:
         4f:41:02:81:5f:fa:81:42:89:d6:94:35:5d:94:ff:b3:7a:b6:
         af:3e:1d:0c:a3:5b:b8:39:7d:aa:cc:a1:74:d1:40:23:2d:de:
         6c:41:fb:31:b0:50:32:f8:c6:ce:46:ac:f6:8b:66:a2:bf:fe:
         83:dc:d7:7d:f3:a6:da:94:c9:1b:d6:3c:10:b6:89:d2:2d:bf:
         55:f6:16:21:d8:b5:f7:8e:3d:44:45:c3:6a:e9:f7:fd:fa:9c:
         5c:68:05:83:10:4b:f0:73:23:af:1d:2a:05:e1:ff:df:25:58:
         4c:7c:8e:6b:de:a8:aa:08:3c:51:41:9c:74:6d:96:d8:2f:e2:
         84:15:68:38:9b:67:d1:ed:79:78:8f:35:b2:41:0b:85:81:3b:
         f6:53:bc:c4:88:80:92:25:ff:52:b3:19:12:09:b9:31:a6:6d:
         60:38:eb:7e:dd:d5:1e:57:8a:36:8b:c1:9d:a1:12:32:77:86:
         83:1c:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:58 2026 by rpki-client