Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
File:                     6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft (raw, json)
Hash identifier:          CCbNSXllnklsykq2v5+rkuWSWjYE5hQSBcHgYnrrxHc=
Subject key identifier:   A0:05:A0:B2:4B:6C:72:A2:3C:F4:E1:68:AF:FD:CF:68:35:64:BE:A1
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Certificate issuer:       /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial:       01A001DD527B362B9DE54DD6E1A182F27797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 20:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:16 +0000
Files and hashes:         1: 6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl (hash: hzz4boXpgqsg4tmivp0Z2m8asefOGytB2iAqWFskSsU=)
                          2: HICvEHKXiwO8tUnXw2THhezIHTg.roa (hash: m259oPsH+iF/F010gAj+3VHPjH7EbopMEIXrwuwaC7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:52:7b:36:2b:9d:e5:4d:d6:e1:a1:82:f2:77:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
        Validity
            Not Before: Aug 14 20:01:16 2026 GMT
            Not After : Aug 15 20:01:16 2026 GMT
        Subject: CN=a005a0b24b6c72a23cf4e168affdcf683564bea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:b9:10:f4:a7:99:1c:0f:a2:b8:81:8c:3a:
                    ba:fa:54:5e:8e:8f:6f:a4:65:a2:b5:7d:40:28:46:
                    b3:7e:c7:db:ef:3c:a1:c1:11:16:37:07:c2:cc:42:
                    b6:ec:bd:76:32:6c:20:55:b7:2e:eb:f2:3f:ad:fa:
                    f3:48:a3:b6:4b:b1:d4:e0:49:27:8f:10:67:85:e1:
                    90:1f:e1:d0:e5:89:51:f9:48:c4:da:8c:0f:14:28:
                    04:4d:9e:18:60:76:6f:e5:6c:88:44:4e:55:35:69:
                    de:26:c3:9e:fb:e0:f4:35:11:9d:76:44:13:5b:e9:
                    d0:cb:bd:02:56:c0:d2:56:eb:49:b5:a1:b1:75:4c:
                    d2:40:6d:51:75:be:16:03:67:24:82:e3:fe:35:ce:
                    e5:87:f5:e5:d9:68:5a:d4:12:7f:0f:71:a5:88:6d:
                    93:f6:2a:a7:a1:86:62:88:c8:fa:0f:f3:ba:13:14:
                    7e:3a:c2:86:d1:3f:0c:e1:d5:bb:96:55:78:92:c0:
                    8e:a1:18:8c:f1:02:21:e1:1d:28:30:e9:72:c9:dc:
                    98:38:15:f6:22:9f:8d:51:65:7b:18:18:ab:59:ce:
                    bb:49:b6:82:fd:de:68:e4:c4:f9:9c:ee:4a:c0:35:
                    53:7f:38:9f:94:56:bd:db:81:04:93:38:a1:91:0d:
                    7b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:05:A0:B2:4B:6C:72:A2:3C:F4:E1:68:AF:FD:CF:68:35:64:BE:A1
            X509v3 Authority Key Identifier:
                keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:81:c6:e8:3b:3c:55:d3:f3:8b:bf:1d:d8:0e:97:c7:33:63:
         cd:5f:9c:78:76:5c:93:20:af:a4:66:42:cc:ae:05:97:f5:c3:
         98:34:4a:11:48:4c:68:e2:a1:d0:c8:3f:6b:f9:fb:2d:d3:92:
         e8:1e:fd:21:8a:c3:31:f0:7f:ab:5f:a6:8a:5c:a9:b0:76:a7:
         85:81:22:ec:d3:27:ba:09:5c:b3:cb:50:f2:f8:7a:ec:53:24:
         a6:02:ab:a3:44:30:58:52:8c:9b:95:11:5a:a5:82:c2:09:dd:
         56:d4:77:4d:2e:23:9e:72:78:1d:01:04:da:33:e9:48:d1:ff:
         7e:70:65:02:18:0f:f7:b4:fc:35:fd:a7:a7:9f:6d:63:08:9c:
         90:99:78:b2:eb:34:52:40:aa:0a:64:a7:02:09:a3:f6:36:18:
         a5:29:d8:d9:f9:ee:8c:10:35:ae:65:8c:6c:be:0d:ef:95:4a:
         69:53:09:b9:21:a4:80:dd:01:0e:41:7a:ff:ec:5e:f8:17:c2:
         07:62:52:71:5f:20:80:30:f9:2d:b2:8c:bf:12:05:72:e2:46:
         74:6a:89:7d:5d:83:f2:39:26:21:15:90:8c:dc:5a:1c:67:12:
         c5:e5:78:20:00:ce:62:f1:a5:50:8b:e7:30:cf:ed:71:2a:98:
         bc:74:9e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:06 2026 by rpki-client