Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
File:                     6krZNBGOZSbIlPRp-GqjIME-CPQ.mft (raw, json)
Hash identifier:          /0PzYIbqNn7xZoVcH47InAsPfPofweuToMySGgfHuG4=
Subject key identifier:   94:C8:CD:58:AE:72:D7:B2:36:FD:2A:12:2B:E3:DF:8B:4D:02:98:F1
Authority key identifier: EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
Certificate issuer:       /CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Certificate serial:       01A0412AC1B11FEF309CDF27B54964AC0646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:01:56 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:56 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:56 +0000
Files and hashes:         1: 2ICA_jT8gH0SqY4DMPAhLBe-a3g.roa (hash: bQhPgBki/83xZpaETZB5bitS9JPACummJNBn28qxStg=)
                          2: 6krZNBGOZSbIlPRp-GqjIME-CPQ.crl (hash: NVAGmkwiOzsA3Jz1si6kmhJFEo+V6APxhzkZvt5D9oI=)
                          3: BvgqH8EAXVWJotlokwrOIHxbYAE.roa (hash: CGihJpuAyd/wpD77regwALXMCxjzHShjZBJCu5oF9Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:c1:b1:1f:ef:30:9c:df:27:b5:49:64:ac:06:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4ad934118e6526c894f469f86aa320c13e08f4
        Validity
            Not Before: Aug 27 03:01:56 2026 GMT
            Not After : Aug 28 03:01:56 2026 GMT
        Subject: CN=94c8cd58ae72d7b236fd2a122be3df8b4d0298f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:d1:c6:0c:14:68:8b:fb:76:4a:41:dc:9f:
                    c2:42:16:f5:2a:34:48:38:e0:25:49:a4:92:78:d0:
                    40:cc:e5:d0:7b:88:e1:35:1d:57:ec:11:b2:5f:db:
                    d5:4a:7e:91:35:a4:15:8f:bd:c5:6e:e7:27:f3:5b:
                    d7:91:13:4b:2d:b9:7a:bd:22:c4:e0:73:5d:31:01:
                    a2:8b:42:9d:9b:b1:d8:6f:66:fd:1b:f1:a3:11:2a:
                    f0:7b:52:0c:4b:b3:3b:cf:3d:32:c1:c9:2d:05:8f:
                    fe:ba:79:70:4b:4e:8b:33:f5:50:01:5d:95:ec:7b:
                    51:f4:28:8b:35:e3:24:89:1e:b6:6f:1e:00:f2:e1:
                    4c:d8:73:b3:ef:42:b6:61:8a:47:6b:0a:61:8f:5b:
                    d3:38:80:74:2a:b3:02:e1:41:fc:a4:84:b8:b5:1c:
                    51:ec:71:cc:6a:f0:1c:dd:99:0f:3c:6e:b2:92:42:
                    4e:c5:71:63:6b:43:48:de:07:09:dd:bc:80:8b:e2:
                    4e:a8:f2:42:53:31:4e:46:96:06:c0:da:a5:00:a9:
                    ad:06:c5:8f:c8:0c:34:3a:a5:15:48:f7:ef:ef:b3:
                    e0:05:8a:62:b8:09:51:5b:68:84:a6:ab:b0:94:dc:
                    34:4c:b8:61:7d:3d:94:01:92:c5:09:cd:58:ca:52:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C8:CD:58:AE:72:D7:B2:36:FD:2A:12:2B:E3:DF:8B:4D:02:98:F1
            X509v3 Authority Key Identifier:
                keyid:EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0b:4d:bb:fa:30:48:97:7f:28:f7:5c:f3:50:20:10:33:ce:
         a1:62:a3:09:4f:1f:35:bc:67:b8:17:ca:a6:65:23:df:8c:1a:
         55:81:e8:0c:86:46:cc:e6:6c:4e:a5:48:e1:4e:5a:f4:04:2a:
         c9:d9:8a:76:c7:d5:61:93:13:48:77:16:e7:81:f0:1d:5f:9f:
         78:a0:23:01:74:5d:46:bc:91:81:96:85:5d:53:50:e0:10:63:
         e1:dd:7f:53:fb:75:60:72:ef:16:ae:5e:1a:aa:30:bb:98:a6:
         8e:31:eb:6f:b2:5a:0e:b9:56:9e:ee:c6:7b:70:a8:b1:ce:9f:
         55:57:e1:0d:bf:2b:e2:2d:e9:5b:fe:fa:13:fd:9c:ed:3f:c6:
         9c:20:17:f8:3b:01:a7:4b:17:0f:16:55:9f:12:93:1d:6b:f7:
         89:f1:fb:7e:62:5e:bf:a2:4e:be:c1:c3:20:06:3a:a6:4d:61:
         a9:14:3e:a3:61:dc:d2:53:3f:e8:9f:b3:7b:41:2b:63:e1:f7:
         5c:ea:b1:1e:52:7a:2a:db:7b:67:e6:bc:21:09:b5:24:04:e9:
         ca:6c:3d:16:53:36:fe:d4:d3:92:f2:74:e6:98:19:a6:2d:1c:
         5e:51:12:8e:41:61:5e:d9:12:19:b2:ba:e8:41:a7:f7:85:1b:
         5e:a1:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:40:20 2026 by rpki-client