Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
File:                     6hRqefc37_91bUjjWooFuXAiIU8.mft (raw, json)
Hash identifier:          j6EwahKnz8bUhG32VzPNPT9u7HIx9Q+WQzR9J/qmqv0=
Subject key identifier:   86:BB:89:91:B1:76:99:9C:0A:35:40:E4:5E:9E:5C:45:29:6D:6E:27
Authority key identifier: EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
Certificate issuer:       /CN=ea146a79f737efff756d48e35a8a05b97022214f
Certificate serial:       01A08C7A96CF6D52E59186158B74A2B3BEC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
Manifest number:          C2
Signing time:             Thu 10 Sep 2026 18:00:39 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:39 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:39 +0000
Files and hashes:         1: 6hRqefc37_91bUjjWooFuXAiIU8.crl (hash: TBOVoVrNk2t7hFqPR0xhQuHF1t8CFzemO18sZu1PHtA=)
                          2: FuMfqL6UHDl83J7ntPBqlyL1ZJs.roa (hash: pa0fPwEB+esydMhpBokgB7+SeI4p5Cp3+wHPwmlwHu0=)
                          3: fjRTthrznnEGPQGfyNXJuqtdk74.roa (hash: t647JvL7SRl89ys3oXs5sNdLTxxTw2XH1zzLSYKCd24=)
                          4: phY9NXnvnB6e0PMrbRa0MvvDzNI.roa (hash: IN3m7S+9B9ojtgzB9za8gBF1vRTwMeSiCq8UhefavsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:96:cf:6d:52:e5:91:86:15:8b:74:a2:b3:be:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea146a79f737efff756d48e35a8a05b97022214f
        Validity
            Not Before: Sep 10 18:00:39 2026 GMT
            Not After : Sep 11 18:00:39 2026 GMT
        Subject: CN=86bb8991b176999c0a3540e45e9e5c45296d6e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:b4:38:cc:d2:07:a4:ab:52:c9:12:26:ce:
                    fb:63:cc:c9:e8:fb:d7:67:e3:54:a0:2a:63:6d:30:
                    72:b7:73:f7:a6:64:e7:10:ff:70:2e:52:d0:b3:61:
                    28:fa:e0:06:c6:39:b9:67:a5:ac:a6:7b:21:9d:67:
                    98:c1:f8:21:8d:fc:a9:c8:86:3d:14:57:a8:f2:c5:
                    41:fc:57:32:3f:3d:ef:9d:89:01:01:86:43:62:56:
                    ba:1e:9a:03:55:c7:14:88:5b:db:d3:e3:58:77:3e:
                    34:9a:a6:2e:0a:28:30:5d:9d:39:e2:dd:99:4a:2d:
                    84:1c:6e:5c:1e:a5:33:23:97:9b:14:e6:7c:99:fd:
                    d6:d3:94:68:e8:8f:9b:6b:66:33:67:63:03:7a:d0:
                    49:3f:ba:0f:26:2f:c1:8e:cb:c9:fe:60:14:bd:19:
                    64:25:34:68:62:65:02:be:b1:4a:6f:7a:63:47:f8:
                    46:15:18:8d:47:f4:c2:62:98:5c:b1:52:99:a7:ae:
                    e9:8b:b8:d5:04:35:87:81:a1:1e:59:7e:8a:fe:93:
                    68:01:b0:70:5e:ca:f1:c7:47:20:fd:9a:b5:59:b7:
                    62:de:45:46:31:0f:f4:59:c7:c8:0e:32:4b:12:a8:
                    0d:31:f2:4e:60:4f:b6:69:e2:8d:b0:ae:38:96:0d:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:89:91:B1:76:99:9C:0A:35:40:E4:5E:9E:5C:45:29:6D:6E:27
            X509v3 Authority Key Identifier:
                keyid:EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:e2:6f:ea:ae:aa:ad:59:45:5f:b2:f6:74:32:e3:08:c2:87:
         1f:03:a7:2d:a4:db:09:5a:f5:6b:09:0e:1a:a5:21:77:48:73:
         8c:2c:c4:99:66:3b:6d:01:1d:da:5a:9b:43:97:bd:60:bf:28:
         02:00:b9:ed:d1:ac:c2:a4:5d:06:c5:de:ba:57:4e:ce:ce:be:
         bb:37:e4:f6:de:8e:ab:1b:12:39:49:4d:11:90:36:06:af:93:
         1b:9d:33:8b:45:19:c8:72:d3:26:f1:d7:b9:d1:18:34:21:56:
         61:1e:b4:01:cc:bd:f4:86:68:31:24:0f:4a:6a:5c:01:75:65:
         94:fa:d9:20:1a:c5:cf:d2:73:a4:d7:ef:db:97:17:61:39:dd:
         04:69:8a:91:10:91:d8:2d:60:1a:0f:7b:58:bf:49:8f:a4:57:
         5b:74:d9:4a:f1:6b:15:61:4c:24:a5:83:66:09:11:54:84:1b:
         d8:6c:86:42:66:61:c1:15:5c:81:db:5f:b5:c4:90:d2:30:76:
         2a:5b:65:7d:a0:3b:bb:eb:3b:6e:2f:52:c8:ba:36:66:93:1b:
         29:82:04:28:ae:73:f0:e7:dc:cd:bd:2b:1b:9c:35:b0:2c:e1:
         19:98:56:67:0a:85:bf:43:05:76:59:c9:a8:63:0e:12:33:a0:
         56:cd:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:30 2026 by rpki-client