Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
File:                     6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft (raw, json)
Hash identifier:          zRwkEuqZDbbuRusbc8lAi6BC9rR36gAPSubQgP4bS9A=
Subject key identifier:   30:9E:EC:8F:A5:71:8E:2B:1B:75:E6:30:C9:ED:E1:CC:FE:AC:CA:79
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Certificate issuer:       /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial:       01A0B577143C75E89E9B8732847C9D75B93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
Manifest number:          113F
Signing time:             Fri 18 Sep 2026 17:01:15 +0000
Manifest this update:     Fri 18 Sep 2026 17:01:15 +0000
Manifest next update:     Sat 19 Sep 2026 17:01:15 +0000
Files and hashes:         1: 6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl (hash: FS95Ruv8+tXGrxULD6psq7mZTP6jp5slUfR6byFOJ6k=)
                          2: Km_5u_8-0UPIHvzrlRYqORNlnWI.roa (hash: RcS8loqaddFxoIIrsxiTOHAxHYkLPDkXrY9JTAJObmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:77:14:3c:75:e8:9e:9b:87:32:84:7c:9d:75:b9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
        Validity
            Not Before: Sep 18 17:01:15 2026 GMT
            Not After : Sep 19 17:01:15 2026 GMT
        Subject: CN=309eec8fa5718e2b1b75e630c9ede1ccfeacca79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:57:92:53:1d:37:03:28:08:bd:7d:67:c9:
                    53:77:87:34:bc:ff:2e:58:9e:f2:42:3f:b5:69:a1:
                    97:07:7e:fd:ec:d7:82:01:53:76:1e:3d:06:ed:48:
                    e2:54:19:4a:66:ed:d5:83:a4:23:1f:14:74:48:78:
                    9e:6c:11:71:eb:89:3f:6e:0c:7f:c2:ff:9f:1b:04:
                    2f:a9:59:9f:03:88:50:a7:e5:47:26:cd:d6:ad:d3:
                    09:92:ee:ea:66:2f:24:b8:7a:04:55:1a:c6:bc:d7:
                    c6:6b:9f:db:90:45:4a:86:8f:7d:5e:15:74:b5:2e:
                    99:2e:44:57:2c:ef:a4:d9:06:f7:60:ae:80:63:71:
                    56:a9:42:8f:ef:d8:ef:a7:50:c8:a8:ac:b9:89:e1:
                    7c:4c:4a:e1:85:2d:59:8d:fe:04:30:87:36:2e:6a:
                    d7:5c:38:f2:5a:2f:4b:15:38:ca:08:5e:a6:94:ad:
                    af:4a:89:0f:a1:fd:78:5c:00:32:7b:a6:45:39:35:
                    8d:74:37:8b:c0:02:7b:82:78:25:92:ad:c0:66:c6:
                    5b:48:97:ef:10:e6:ff:c3:30:fa:aa:d1:91:08:92:
                    b5:a4:9e:9d:50:c5:9a:5f:69:a5:e2:5a:5d:77:d1:
                    fc:36:00:a1:2c:dd:8c:bc:70:8f:7c:a4:df:50:ed:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9E:EC:8F:A5:71:8E:2B:1B:75:E6:30:C9:ED:E1:CC:FE:AC:CA:79
            X509v3 Authority Key Identifier:
                keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:bd:80:4d:bd:23:6d:d6:1d:11:72:54:af:b6:a8:35:6a:
         e7:69:c0:e9:7b:86:19:ca:17:ca:0c:90:7d:82:40:d4:bb:73:
         eb:05:4e:53:50:b6:67:34:c4:7a:16:ca:33:8e:e5:1c:8f:f6:
         b8:13:19:68:c5:0f:36:10:70:39:3a:cc:16:03:a7:c6:23:98:
         7c:db:ae:ff:1f:40:30:31:2b:10:60:bb:74:8a:f4:72:63:ef:
         f4:28:62:b4:fa:2f:9b:2f:5d:c8:ad:45:c1:66:f5:5b:5a:8b:
         8c:cf:fc:e6:1c:3d:cb:11:ee:49:53:16:4b:a6:67:d8:48:01:
         dc:ec:61:f5:27:75:41:6b:a5:15:7b:31:b3:df:f2:a3:e9:1e:
         c6:fd:be:67:29:da:a7:09:f4:c2:b7:6d:74:ef:67:6f:b5:db:
         92:48:42:5f:3d:5a:47:5b:ee:4e:75:0a:0f:4e:83:27:18:44:
         b4:1e:56:7e:f6:12:76:a6:65:61:15:15:e5:b5:73:45:d6:74:
         c5:8f:ab:5a:18:5f:51:6e:a2:61:d9:9d:4f:9f:7c:2b:4e:a0:
         68:3e:67:44:74:de:44:83:64:f6:0f:5d:b4:7a:72:4b:a2:b4:
         2d:c5:d0:68:49:27:5e:a9:9e:78:8f:3f:1d:bb:84:50:7a:61:
         17:22:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:04:22 2026 by rpki-client