Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
File:                     6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft (raw, json)
Hash identifier:          qIpY21dzQrxDiit1VT699c6P/pBreUNQCwfJCL7C8MQ=
Subject key identifier:   60:9F:84:A3:03:04:E2:BF:ED:F3:A1:D5:7B:AC:B8:3A:6C:53:29:D9
Authority key identifier: E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94
Certificate issuer:       /CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
Certificate serial:       01A002139AAD0B2809E269DCEDCF5B6EFC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
Manifest number:          0A72
Signing time:             Fri 14 Aug 2026 21:00:34 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:34 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:34 +0000
Files and hashes:         1: 6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl (hash: HlR0GqRWpyb2cMsLye6Q+9LuIr6IaVLU7Rszw7Cr+Og=)
                          2: 7lvjfYbr9G0PNBw25lw_gjQVNAc.roa (hash: Q4GZSTUw+N9EKoJs3VO+IluZlSIov3jTQ/daTNuT5H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:9a:ad:0b:28:09:e2:69:dc:ed:cf:5b:6e:fc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e996d2cb3947787f15e19bacb1e3369c19f3ec94
        Validity
            Not Before: Aug 14 21:00:34 2026 GMT
            Not After : Aug 15 21:00:34 2026 GMT
        Subject: CN=609f84a30304e2bfedf3a1d57bacb83a6c5329d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:ad:87:92:30:9b:c0:c2:1e:8a:0b:ac:b4:
                    19:72:00:28:cf:fa:12:80:1a:f9:4d:93:65:8e:55:
                    17:23:20:99:c9:49:06:f0:5a:62:30:0d:9f:87:8d:
                    7b:b0:90:6e:eb:aa:f7:d9:27:95:a3:c8:14:34:31:
                    d4:3b:e0:5e:3f:f0:77:10:40:dd:af:3d:44:3c:fa:
                    90:81:28:2e:0a:76:3a:f0:83:df:86:be:3a:a8:c5:
                    bd:a6:bf:bf:d5:b8:02:5c:59:96:f3:e2:5b:65:4a:
                    7a:28:24:bc:71:5b:5a:e0:61:c4:2d:27:9c:2c:d9:
                    3d:c1:0e:6e:1b:e2:c6:f9:ce:6b:07:36:f3:1f:3d:
                    6f:20:6a:8f:30:91:df:08:3f:2e:dd:fb:cb:fc:46:
                    79:b1:70:31:cf:bc:b6:31:95:05:9e:de:a1:63:a5:
                    13:f5:ca:e3:7d:3c:62:2d:80:97:50:c9:c9:8e:f4:
                    73:b8:ed:f7:ca:b2:76:ac:c5:56:d1:ca:4a:2d:7b:
                    79:41:d0:d6:74:d6:46:f8:b4:f8:f8:83:79:34:f0:
                    55:5c:22:d3:a7:b9:18:59:ff:69:be:c6:ca:22:5d:
                    10:70:e1:b1:0c:43:4c:0a:8e:3a:4b:ae:96:e6:fe:
                    5f:c3:ec:c6:35:b7:86:b3:14:bd:df:b1:82:e3:01:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:84:A3:03:04:E2:BF:ED:F3:A1:D5:7B:AC:B8:3A:6C:53:29:D9
            X509v3 Authority Key Identifier:
                keyid:E9:96:D2:CB:39:47:78:7F:15:E1:9B:AC:B1:E3:36:9C:19:F3:EC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9c61ba-c746-4fce-a9c9-72762b57062f/1/6ZbSyzlHeH8V4ZusseM2nBnz7JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:34:8e:89:ef:e4:60:e7:d5:03:c0:89:1a:9f:6d:2e:44:
         d5:68:3c:c8:fd:d5:22:20:1e:d9:62:d8:ca:2d:cd:ce:d5:95:
         c6:45:cf:10:ec:a2:87:02:c7:ff:d1:4e:3b:44:2f:95:ee:ad:
         58:c8:bc:de:37:0d:67:56:22:58:46:cb:12:1b:fd:8b:34:7e:
         5d:fc:f2:a6:a3:88:18:9a:d5:f7:ac:dc:f2:c3:f1:bc:08:6c:
         f2:50:85:7d:73:f2:4d:24:d8:b9:2c:7d:f4:88:7f:97:eb:86:
         41:a6:0f:45:29:7c:b9:0f:59:0a:1f:2d:a0:26:53:95:da:48:
         83:13:f7:6e:3f:ca:4e:b4:df:d9:46:19:0e:ce:83:af:08:e7:
         ed:db:c2:76:28:84:05:22:6a:43:1a:45:ff:32:d5:38:e5:1c:
         86:c6:33:45:1c:70:b6:d7:30:b8:89:20:8f:9b:b2:c1:f8:3b:
         68:3a:cd:5e:e7:5f:b1:c7:7a:f7:40:df:fe:41:bc:7d:da:87:
         61:50:5f:1d:80:44:ec:8b:67:85:30:f3:ca:a2:7a:4e:cf:c4:
         ac:cb:99:0f:98:f3:e9:e0:7d:5a:c1:a4:82:a3:a9:33:b9:ab:
         f3:cf:51:ed:cb:3f:6e:4b:c1:12:1d:37:9f:a0:24:f8:41:92:
         13:1d:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:12 2026 by rpki-client