Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
File:                     6xbhcPebsF58Dew-xgZD5ym-Ts0.mft (raw, json)
Hash identifier:          sDOzg4+iXhC5XYCHjt9NuwU6D0zhoEVW+URm0xEZrEw=
Subject key identifier:   14:AB:45:CA:E1:FE:C6:17:0E:6B:A9:D9:DA:6E:CB:D7:D8:6A:94:11
Authority key identifier: EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD
Certificate issuer:       /CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
Certificate serial:       01A000CA146688FD24FB12FBEC60DA8C5BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
Manifest number:          095C
Signing time:             Fri 14 Aug 2026 15:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:38 +0000
Files and hashes:         1: 6xbhcPebsF58Dew-xgZD5ym-Ts0.crl (hash: fNpHv5ea/ovUXVH8Ean+vRoROjaDojRbRLw+RQSFwnk=)
                          2: DoJ58pE0QIMXC05xRfbVGGg7LaY.roa (hash: PKgahVgw21SJvhsptZJmaWRLmw5Lyssf02litjMZ8FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:14:66:88:fd:24:fb:12:fb:ec:60:da:8c:5b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16e170f79bb05e7c0dec3ec60643e729be4ecd
        Validity
            Not Before: Aug 14 15:00:38 2026 GMT
            Not After : Aug 15 15:00:38 2026 GMT
        Subject: CN=14ab45cae1fec6170e6ba9d9da6ecbd7d86a9411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:e3:1c:5a:db:44:b5:62:b2:7c:ad:f3:cf:
                    dc:27:80:bf:92:26:71:01:fa:58:38:44:77:a1:06:
                    b6:60:db:45:de:8b:37:99:cd:30:2a:60:43:8d:46:
                    a9:1a:dd:62:92:07:02:5c:3a:27:46:0e:3b:bf:0e:
                    c6:54:09:0a:7a:1a:f5:c2:08:6c:51:f8:4e:ba:64:
                    b4:b2:ef:e4:e5:1f:61:e5:a7:60:f1:0f:aa:58:43:
                    c9:ad:7a:bf:09:18:95:22:eb:95:a8:1f:fb:a6:db:
                    f6:2c:dc:33:30:ee:9f:b3:3b:09:0b:81:59:c6:a2:
                    9c:bf:de:a2:34:f4:36:42:d5:ed:f6:5e:6b:2c:65:
                    73:31:0a:35:18:7c:b3:36:f1:dc:7b:4c:8c:21:fc:
                    4b:5f:9d:e0:7c:6d:fa:ba:ad:5b:6c:44:98:5f:94:
                    8f:2d:e1:d3:ce:0c:4a:05:6e:cb:e5:08:f1:26:79:
                    43:4c:5a:72:e9:51:f3:8b:eb:67:b5:58:bf:9d:9e:
                    d3:aa:dd:7c:1b:57:e0:e4:7f:8b:77:00:4f:9d:4a:
                    64:8f:2c:a0:8a:14:c9:65:58:0f:c2:88:fa:1e:78:
                    a9:7f:45:45:f1:0e:f4:4f:8d:2b:4a:1f:3c:bb:67:
                    7c:bd:a2:16:ea:77:fc:47:39:6a:d6:c9:8d:f9:a3:
                    ab:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:45:CA:E1:FE:C6:17:0E:6B:A9:D9:DA:6E:CB:D7:D8:6A:94:11
            X509v3 Authority Key Identifier:
                keyid:EB:16:E1:70:F7:9B:B0:5E:7C:0D:EC:3E:C6:06:43:E7:29:BE:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xbhcPebsF58Dew-xgZD5ym-Ts0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4d763a-fe0e-4f0f-9f32-4bd9c867bee9/1/6xbhcPebsF58Dew-xgZD5ym-Ts0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:76:ad:df:fb:32:42:99:b8:95:4f:aa:5d:f1:79:04:38:0a:
         0c:68:0a:79:1f:08:da:52:4f:51:bf:9b:85:97:f0:31:d0:2f:
         7b:a3:ec:a6:be:d0:59:11:b6:c8:aa:5b:c2:ae:8d:fa:74:fc:
         be:4c:93:73:63:ca:e7:22:e4:8c:3a:1e:61:e1:34:32:3d:5b:
         40:12:2a:77:8c:1d:0b:3e:65:f0:4b:6c:51:7d:3a:59:36:36:
         f2:7d:65:bc:7a:f2:ae:cf:3b:cd:58:25:a3:39:be:65:fc:4e:
         fb:34:93:13:33:42:7c:3b:d0:91:19:12:ce:ed:72:75:a4:16:
         c2:6b:2f:27:c0:d3:e0:cd:77:c3:8a:0b:62:3c:b8:de:d8:09:
         17:a4:40:55:c1:9b:91:64:7a:98:38:d5:70:9e:48:00:6a:98:
         d2:ca:fc:89:f3:2f:77:11:2d:4d:bb:73:1d:82:2d:d3:0f:ba:
         8d:f3:dd:ff:b5:f8:9c:9e:e0:b0:12:45:74:7a:01:0e:a4:0e:
         c7:57:a7:ad:bd:87:7a:7d:63:40:ca:1c:bf:ed:f8:35:91:c7:
         c9:13:29:c3:dd:81:af:ae:26:af:b1:fa:4b:3e:d9:a7:0e:a3:
         db:ae:6e:22:35:48:7e:bd:ca:9b:1d:bb:ee:03:e4:db:1c:ca:
         5f:5b:b3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:35 2026 by rpki-client