Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File:                     e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier:          mYRSF+AZwsTGriqcFSi3zCYQ2KzR1dq1+6oRvwmdyCw=
Subject key identifier:   E0:DF:F6:40:66:66:6C:4B:C8:D6:D0:92:D1:6C:50:30:8F:0A:10:CB
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer:       /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial:       01A08AFAF04AE5BD714E139A02CEC7C557C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 11:01:36 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:36 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:36 +0000
Files and hashes:         1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
                          2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: 8xXbt32Tcg5+rKUxA2nxx7GfAd93iznNpoSbwMz3VXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:f0:4a:e5:bd:71:4e:13:9a:02:ce:c7:c5:57:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
        Validity
            Not Before: Sep 10 11:01:36 2026 GMT
            Not After : Sep 11 11:01:36 2026 GMT
        Subject: CN=e0dff64066666c4bc8d6d092d16c50308f0a10cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:fb:82:b3:f9:96:bf:9e:93:15:b5:73:2d:
                    1b:c2:5f:5d:ba:27:db:85:3b:a9:6b:cd:de:13:47:
                    dc:05:da:d1:f9:5c:50:0c:4b:5a:03:23:d2:a9:5b:
                    ac:2f:eb:0c:17:52:ff:bd:f3:96:c5:3e:d3:78:f0:
                    b4:13:3f:19:48:ed:4f:af:f9:cf:5a:fa:d5:15:c3:
                    e8:5b:fe:59:2f:f6:31:16:de:2a:e6:ae:03:e0:7f:
                    27:a2:f3:ca:04:74:00:30:9a:62:79:d0:fc:91:82:
                    5d:79:ff:b2:8c:a8:c9:33:37:32:ef:f1:ec:2d:a9:
                    06:1a:85:78:a3:2c:53:de:f6:53:bf:93:a3:96:90:
                    cf:7a:b4:9f:fd:64:28:15:05:80:bb:a6:d5:40:af:
                    4f:31:6d:fe:d6:5e:01:a3:a5:f6:96:d3:b8:e8:cb:
                    9e:05:41:a7:42:a8:e7:63:9b:cc:b4:f0:71:40:e9:
                    10:6d:e7:2b:ba:e6:2c:cd:46:c9:62:71:8c:7b:62:
                    24:b8:11:e2:30:4d:d7:2b:ec:23:c2:a5:86:61:ee:
                    45:b0:c3:ee:d3:1a:4d:b1:0d:36:ab:b0:ef:48:b6:
                    b1:1f:9e:fd:37:12:e4:04:76:d7:a6:57:0f:e2:63:
                    5d:16:1d:85:66:0e:05:0a:76:21:a6:1a:91:35:cf:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DF:F6:40:66:66:6C:4B:C8:D6:D0:92:D1:6C:50:30:8F:0A:10:CB
            X509v3 Authority Key Identifier:
                keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:11:66:19:75:47:12:6d:8f:3e:fe:75:18:8d:d0:b0:ed:
         34:05:fe:0b:cf:52:b3:5c:92:a1:38:67:cb:a1:ea:9f:13:d8:
         c9:85:39:59:e2:ba:80:44:86:f9:9c:6a:e8:d4:d4:22:f5:a0:
         d5:99:c2:b0:db:66:ee:7d:44:ff:97:a3:6c:6f:64:18:32:8f:
         56:a9:a5:83:13:85:ec:b6:7b:68:56:89:f9:41:21:06:f0:18:
         77:b5:70:68:c2:8f:2b:be:6a:37:cc:95:66:9e:5d:da:28:f3:
         a1:de:43:1e:ff:42:6d:a0:4d:1b:c9:70:57:d4:1f:32:87:ff:
         15:91:57:13:08:75:51:2c:a9:aa:eb:01:b9:c7:4d:cf:06:96:
         6d:ff:f1:3b:3c:75:b2:4a:3b:cd:64:2d:9b:ff:6d:cf:01:00:
         45:7e:69:d2:28:9f:61:ed:6b:96:bc:ae:77:e0:b6:9c:19:57:
         d9:e5:58:b3:84:bf:ac:cf:af:b5:5a:24:a6:25:0b:f7:52:81:
         ee:93:4e:ed:f0:1f:cd:15:d5:a3:56:12:1b:25:b5:ea:d9:a4:
         14:5b:53:64:cd:76:c3:86:db:ca:17:d1:03:b4:7e:15:66:e2:
         59:7f:0b:11:46:4e:3a:2c:08:d8:5c:5a:02:29:f5:34:0d:72:
         26:b0:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:19 2026 by rpki-client