Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File:                     tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier:          kVy6E2KNSHzilUlMV6sV9fYe8+OoWXotimSIYzKh00g=
Subject key identifier:   F3:95:13:CE:85:A9:4B:31:A1:D5:2D:B7:15:02:E5:AF:16:F6:74:7B
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer:       /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial:       01A08B67F992905D515E527B04801BBAB69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number:          10C6
Signing time:             Thu 10 Sep 2026 13:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:42 +0000
Files and hashes:         1: ZFCTY3PsuMa71RzfQ6nCPjLEWBc.roa (hash: wCYyiC0rq2E0dP/bzYjGwhF+dlIF9NLS1wNYb3WnGOE=)
                          2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: IpX2aojgvdrtSiehUJqggUGJIjJ5Y5LqyP3jLG2yyHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:67:f9:92:90:5d:51:5e:52:7b:04:80:1b:ba:b6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
        Validity
            Not Before: Sep 10 13:00:42 2026 GMT
            Not After : Sep 11 13:00:42 2026 GMT
        Subject: CN=f39513ce85a94b31a1d52db71502e5af16f6747b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:e0:12:1d:92:d0:0d:16:eb:de:0f:00:3e:
                    88:2d:43:97:a8:cc:9a:52:a2:78:a7:6c:b3:b0:c6:
                    29:b8:f2:b5:20:cc:7f:c7:56:84:8b:dd:cd:2c:f9:
                    28:62:51:70:3d:65:d1:46:22:f1:30:c7:29:36:3c:
                    71:c2:6e:31:9d:94:0b:80:80:6e:f8:29:e1:b8:95:
                    50:8a:58:78:93:57:81:88:1d:2d:4a:a2:27:8e:fb:
                    c3:10:16:ca:20:f0:d1:14:ea:0b:62:2d:29:5a:4f:
                    44:7b:d7:cf:3a:ad:d1:f0:38:05:83:44:3f:71:92:
                    af:8c:e5:8c:25:51:72:48:95:01:0b:95:71:ec:f8:
                    a2:de:8f:d6:fb:dd:f1:1f:67:2f:c3:a6:59:3d:5e:
                    54:09:5f:bf:5d:5e:a2:a3:00:25:21:9d:28:e6:90:
                    22:46:a2:ae:54:ba:5f:ba:bd:d0:52:91:32:f1:b0:
                    b3:2f:c8:8d:e8:95:f5:43:5f:a1:b9:35:48:be:54:
                    77:68:d2:af:24:b1:18:7f:02:e6:6b:e1:07:85:16:
                    11:d9:36:55:3d:47:07:9b:fe:8b:8a:2a:5d:26:30:
                    ef:27:bc:07:05:77:3d:67:ae:ac:8a:6d:f7:87:01:
                    dd:7a:18:dd:94:97:d4:08:05:6c:b2:66:ea:ce:3a:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:13:CE:85:A9:4B:31:A1:D5:2D:B7:15:02:E5:AF:16:F6:74:7B
            X509v3 Authority Key Identifier:
                keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:2d:29:df:2e:a3:dc:52:5f:61:7e:11:37:92:08:d9:be:
         1f:20:1d:e2:5d:51:14:c9:30:83:f0:e5:5d:58:0e:b9:50:9c:
         40:2c:e1:d7:52:0f:15:94:08:10:19:cf:a7:aa:2e:fb:44:fa:
         fc:0f:4b:1c:a3:26:60:3a:8a:23:2a:40:96:f8:66:73:39:cd:
         5c:5d:43:59:2e:0d:69:19:ae:89:f4:39:6d:5e:55:fa:12:60:
         8e:a6:40:e9:dd:2c:cd:02:fc:0e:2e:05:16:70:96:5c:3b:cd:
         16:e9:0e:9f:09:38:ac:d9:d0:e9:d8:1f:c8:9e:ec:30:f5:01:
         73:f6:e2:dd:e4:3e:07:56:ef:b0:fe:78:36:dd:67:bb:c4:23:
         27:a7:ba:33:e4:ed:cc:8a:81:ca:e5:8e:1a:f7:d6:f1:b5:e8:
         83:ca:5a:da:f1:ff:fd:90:26:be:3f:d6:e2:e1:06:c0:2a:0f:
         8f:e1:9a:85:fe:80:45:e6:f5:36:95:2e:23:36:ff:4f:05:a3:
         2a:92:ca:5e:d9:c5:6a:be:a9:30:d5:70:9f:f3:a8:09:b8:91:
         fc:2a:97:2f:b0:70:9c:e8:b6:a1:e3:ac:5b:5c:26:3e:16:81:
         ea:0a:aa:3a:69:79:98:54:6b:20:d5:51:5a:c7:0b:3f:9b:5f:
         9d:04:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:54:30 2026 by rpki-client