Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File:                     6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier:          VehK+T4NjCX6cUuxYiGukdSQL60Y5giHuurV2uC/H9U=
Subject key identifier:   75:35:8B:CC:28:C5:1C:65:2C:0D:28:94:55:92:1F:2F:50:3E:17:45
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer:       /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial:       01A08E69BB84DC36E4E32297EEA4E888F5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number:          0A17
Signing time:             Fri 11 Sep 2026 03:01:28 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:28 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:28 +0000
Files and hashes:         1: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: Eyp1A1r9nVPVCYj505vbIT8H3PWWfT/b2sR8okxOJxA=)
                          2: tR6bEdV4p_rV62KQTz0kZdQM0Vk.roa (hash: 2nYZqEwDkTmP1cC6Mj3w+oSlvHAM2VmNuzWxihqHoCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 03:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:bb:84:dc:36:e4:e3:22:97:ee:a4:e8:88:f5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
        Validity
            Not Before: Sep 11 03:01:28 2026 GMT
            Not After : Sep 12 03:01:28 2026 GMT
        Subject: CN=75358bcc28c51c652c0d289455921f2f503e1745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:87:bb:17:d3:2b:33:e6:c6:83:ef:91:e5:
                    8d:6f:50:73:f8:46:07:7d:b3:05:f7:24:4c:a2:65:
                    16:80:36:d0:ca:8e:09:99:93:89:ff:d2:da:35:c9:
                    25:02:ca:ba:fe:3c:f2:c8:28:77:f7:24:30:0c:c7:
                    b0:38:a2:0f:b7:ee:01:44:24:07:c3:c3:62:81:a1:
                    7d:97:14:a6:9b:fc:8d:2c:ac:58:84:04:68:f6:51:
                    b7:c0:d6:22:bf:96:cc:10:23:1b:cb:42:83:7f:42:
                    3a:4a:5c:a7:89:f5:90:f5:9c:52:09:a1:16:eb:ff:
                    aa:b8:c6:d7:a9:5d:e9:93:57:d8:a9:2f:ad:d5:1d:
                    a7:09:e7:ce:3a:f7:60:d8:e2:64:ba:d9:27:32:c4:
                    a5:56:bc:45:45:e6:5b:f8:30:37:60:e9:62:f0:ea:
                    bd:5b:e0:17:ab:56:cf:83:50:3a:25:67:91:79:7a:
                    68:9d:be:e9:3c:67:67:23:1b:16:af:bc:70:03:8c:
                    65:9c:c5:dc:db:05:cf:5d:87:ad:75:68:02:c0:01:
                    51:74:32:e5:e1:db:60:43:5e:af:40:f7:7b:69:d7:
                    e4:2e:3e:94:d3:42:21:7c:fd:88:86:78:20:12:05:
                    7c:67:28:0b:54:34:84:b0:19:fe:c6:33:26:e7:ed:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:8B:CC:28:C5:1C:65:2C:0D:28:94:55:92:1F:2F:50:3E:17:45
            X509v3 Authority Key Identifier:
                keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a3:16:f0:7c:0e:fa:04:b1:ad:8f:ab:52:f8:06:fc:45:15:
         fe:ee:02:a3:9e:60:bc:e6:2a:ce:7e:1f:5d:1e:88:e3:a7:0b:
         37:44:ea:96:ec:a8:bb:16:d2:8f:67:6a:5c:28:cb:13:a0:46:
         8a:f1:f4:15:fd:fb:29:20:fa:65:5d:6a:22:20:c1:24:09:c7:
         29:ab:f5:24:f2:ab:4d:ca:8f:2a:81:45:6b:90:9d:f1:7c:84:
         2c:42:1c:73:b5:63:b0:63:7c:7e:ef:e5:da:4a:e2:c8:cb:92:
         5a:9d:65:ca:ad:ef:26:ff:e8:8d:41:9c:8e:f6:0d:f2:e4:6b:
         09:ef:6c:c3:f1:61:2c:f3:ac:84:d8:4c:d7:4a:1d:3a:82:fc:
         14:8f:53:55:46:18:d3:5a:4b:f7:5f:33:4e:cf:86:c5:ca:e6:
         5d:d1:59:88:e6:c5:9e:a7:13:9d:b5:e8:df:58:73:ab:ea:47:
         76:23:a2:ea:16:60:8c:30:a2:32:8e:e8:cf:f1:98:48:0d:c6:
         7b:15:e3:1e:9f:b1:da:82:f6:f2:f5:ee:39:df:3d:43:c1:e9:
         d1:84:8b:a7:3a:e3:53:27:01:5b:28:ca:df:10:27:4c:1d:80:
         c3:2d:e4:46:0e:a1:49:2c:e3:09:c2:99:10:3b:f3:e2:4d:f4:
         37:7c:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:11 2026 by rpki-client