Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
File:                     6Zam_9rVzrJiZhe9btnE7FcdDzo.mft (raw, json)
Hash identifier:          jgXWSes67G81IKUvSiw9Z6EtaeGbZuLQ3MgfkwSwtpY=
Subject key identifier:   EE:02:AC:64:43:DD:45:80:77:14:05:3C:CD:62:58:0C:01:47:6A:3C
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Certificate issuer:       /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial:       01A13E5CCA3672645D2CA9B41294C1A9D16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
Manifest number:          14A0
Signing time:             Thu 15 Oct 2026 07:00:30 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:30 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:30 +0000
Files and hashes:         1: 6Zam_9rVzrJiZhe9btnE7FcdDzo.crl (hash: XFUnf6kWGAEOETstSLrsykPiNfyscVzyJ8I4oGY5lNA=)
                          2: Yz3xFMiM2Kcl-UC8rhV6b_HYaLA.roa (hash: a/DGW0i/X4m/ikPJX+oJ6qAZ0udts75Z/BZGzVsUAJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:ca:36:72:64:5d:2c:a9:b4:12:94:c1:a9:d1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
        Validity
            Not Before: Oct 15 07:00:30 2026 GMT
            Not After : Oct 16 07:00:30 2026 GMT
        Subject: CN=ee02ac6443dd45807714053ccd62580c01476a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5a:02:31:e9:5d:75:fa:85:45:6e:54:94:74:
                    b5:67:d3:46:6d:d7:40:6a:6e:30:06:aa:95:21:5b:
                    eb:bd:c2:c5:e2:6c:24:e3:e8:7e:ce:6f:da:e2:48:
                    6c:b7:26:5a:ef:a8:6a:4d:1a:a5:07:e4:da:dc:a2:
                    06:48:cd:1e:bf:49:da:33:b7:7f:5d:12:d9:bb:dc:
                    db:21:4f:43:de:a4:f8:b9:a7:88:c3:ba:82:16:dc:
                    43:24:9f:39:c0:b6:8e:64:44:62:46:df:36:da:2c:
                    1e:e3:88:34:1f:1e:d6:52:88:8e:e0:8a:5c:4c:ec:
                    5d:c7:7f:28:7e:23:be:41:41:87:69:78:e2:46:f8:
                    a0:35:de:82:62:f5:d9:36:1f:2b:a2:7e:3a:f4:d7:
                    68:c9:b0:66:4c:cc:98:d0:b2:f6:71:c9:f4:61:53:
                    98:d9:37:06:f3:18:24:13:0c:6a:dd:54:cc:f4:ef:
                    af:be:0c:74:9f:fd:94:a4:d0:78:13:80:80:a0:ff:
                    54:e3:94:e4:85:da:db:00:b9:bb:4e:c5:87:d9:7b:
                    36:91:d0:d8:58:11:d0:96:c0:fe:ff:89:ae:54:0d:
                    50:dd:67:66:57:60:80:b6:3e:3b:13:30:65:bb:6b:
                    97:87:39:37:1b:ab:3e:9b:21:e5:c8:90:6c:11:47:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:AC:64:43:DD:45:80:77:14:05:3C:CD:62:58:0C:01:47:6A:3C
            X509v3 Authority Key Identifier:
                keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2d:33:5c:9f:15:59:db:9e:ef:86:ab:93:68:36:31:d0:18:
         7c:c3:5f:30:52:ad:87:0b:3d:d6:2d:72:a0:b0:1c:ad:a5:ad:
         3a:e5:c7:74:34:5c:d2:33:3c:5c:1a:24:2d:d9:13:a3:2c:8c:
         79:0d:6c:69:0d:c9:3e:22:cb:b0:da:6e:b2:27:a0:e3:ed:6d:
         49:cd:1e:b8:06:5d:d6:83:15:15:51:3a:40:89:84:c9:70:cc:
         35:ba:2f:9f:99:94:3b:ec:cd:95:83:8d:a1:f3:db:3e:8f:1f:
         c8:00:78:30:f8:66:8c:7b:a9:d0:54:66:05:a3:84:d7:ec:d4:
         78:42:fe:2a:6e:33:17:3f:09:89:2e:d2:c0:1c:5f:ec:06:b3:
         3e:6d:f0:ca:f7:59:68:73:e3:ac:c4:df:fa:8f:6e:a6:ad:14:
         32:37:13:e3:15:ab:bd:48:8c:68:89:65:02:5b:b8:5c:90:e2:
         a7:cb:f5:b6:b2:71:cc:e4:54:e3:c2:b8:0a:26:a0:a1:4f:df:
         5f:d7:ac:c3:1b:50:0b:07:0e:05:c0:58:5d:ec:04:c7:7a:5a:
         4e:c8:c6:9a:0c:98:b4:fd:df:9e:81:33:06:98:e7:d0:0b:1f:
         4f:48:59:ea:b8:80:50:0a:31:6d:96:1a:07:e1:9e:32:9f:01:
         85:f0:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:20:58 2026 by rpki-client