Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File:                     6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier:          MNuH6Qs2aOHVDHIAo3/DL3EUlZDavwxrMC+uyffT0Bs=
Subject key identifier:   15:AF:ED:EB:50:29:0C:07:34:F6:49:30:5F:DE:B1:83:00:F8:FC:E1
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer:       /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial:       01A0EDE5EBE34342C75DABD631959EB21B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number:          1A0C
Signing time:             Tue 29 Sep 2026 16:01:03 +0000
Manifest this update:     Tue 29 Sep 2026 16:01:03 +0000
Manifest next update:     Wed 30 Sep 2026 16:01:03 +0000
Files and hashes:         1: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: 9cYz2yAOIheejrpR9UrNvQi5TiEHO6KezXT5jhNH5rE=)
                          2: sG7Jxd3j5bPpODxju8fXU3EM93w.roa (hash: bMzMmqgYSEERUbsFyNXWG2WNFtoS/kvz11SCChzG8x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:e5:eb:e3:43:42:c7:5d:ab:d6:31:95:9e:b2:1b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
        Validity
            Not Before: Sep 29 16:01:03 2026 GMT
            Not After : Sep 30 16:01:03 2026 GMT
        Subject: CN=15afedeb50290c0734f649305fdeb18300f8fce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:2f:40:51:61:30:ff:7d:52:64:7e:e0:14:
                    eb:63:95:9f:cc:5e:f3:b5:bb:f4:e8:0c:d4:79:e7:
                    10:8d:5e:30:24:7f:27:37:7a:d8:85:82:6b:85:b7:
                    0a:03:87:a5:88:aa:13:56:5b:f1:2a:fd:7d:83:61:
                    ed:08:9f:c6:f9:2d:3a:e4:a3:35:2e:11:ed:61:59:
                    6a:d2:9d:8e:94:26:87:ce:b0:a4:54:98:e9:70:84:
                    01:ef:b4:59:ab:c0:49:30:72:69:93:ef:d8:bc:1d:
                    93:63:f5:d1:c7:3a:35:de:09:66:9d:b5:2d:ae:d1:
                    4d:56:5e:bf:97:ab:0b:f2:88:62:d5:e3:13:e4:ce:
                    d7:87:ac:12:5f:88:27:ce:1e:bb:f1:39:d9:35:12:
                    79:8a:77:31:9e:4a:3c:a6:e2:35:7b:57:0c:d2:97:
                    85:b3:37:f8:d8:4c:89:ec:61:6b:04:34:41:7d:3d:
                    e8:f2:63:b4:fb:67:30:2d:55:4f:00:83:08:df:84:
                    52:a1:f7:d2:bb:31:78:a1:e1:7b:ce:33:27:91:2c:
                    aa:65:27:70:a3:c7:d8:66:b6:f0:2e:cd:19:af:27:
                    3a:f7:66:bd:12:fe:41:3a:41:04:5b:11:60:db:72:
                    72:86:9d:12:71:d6:0e:1e:8f:a3:21:50:2f:55:3b:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AF:ED:EB:50:29:0C:07:34:F6:49:30:5F:DE:B1:83:00:F8:FC:E1
            X509v3 Authority Key Identifier:
                keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:c4:e3:3c:e1:d1:f6:0f:ac:82:6b:33:7a:93:4e:13:62:
         48:c0:69:e7:94:6d:db:97:5f:29:bf:e7:5e:7e:cc:12:1e:c1:
         5e:72:c2:fd:6c:33:56:78:4d:72:24:fb:ad:08:72:59:82:5d:
         0d:a5:ce:1a:f5:e1:b8:d5:59:6e:60:70:b7:79:d6:68:8f:56:
         7a:b0:84:2e:7b:4d:9b:61:0c:b1:91:dc:65:db:28:aa:58:57:
         48:56:36:ef:de:15:13:89:eb:77:7b:0b:2c:25:7e:98:ca:6d:
         a7:d7:0e:f1:b2:fc:12:11:d3:b9:99:52:76:79:7e:8f:a3:8d:
         ad:99:5d:e5:59:1b:f2:aa:d1:08:e7:aa:b3:e8:8b:05:56:79:
         95:28:05:7f:db:41:c5:44:b6:74:89:b4:13:13:1d:af:60:42:
         32:91:8b:77:66:47:6e:ec:42:9b:5a:d7:8d:b0:dc:d4:2b:0c:
         c3:01:79:b8:01:ec:6e:6f:36:68:62:9a:0e:83:1a:fa:4f:29:
         b6:f2:6b:16:89:6a:91:c4:b1:7d:1c:a6:b3:ed:d8:4e:0d:4c:
         63:9c:12:3a:d5:32:04:6c:f7:12:dd:b3:24:dd:ea:da:74:b5:
         64:bf:01:72:41:48:94:43:07:e1:fa:52:99:0c:5e:c3:53:3f:
         c6:e8:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:04:26 2026 by rpki-client