Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File:                     6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier:          3HgVWcqf3DBAVd6xdMFidNSlANVcB6pOcIN5C0nHeBk=
Subject key identifier:   C5:B0:CE:BE:32:EA:B1:A7:0C:9B:FB:6E:27:19:FB:D5:87:38:33:1B
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer:       /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial:       01A0016EE6D094AF14E57964EA0C00140FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number:          0996
Signing time:             Fri 14 Aug 2026 18:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:40 +0000
Files and hashes:         1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: mV3wTTHh47RwSUoPQPGRFjWytY2Upg1Tbpb9xHxffRY=)
                          2: 8sph1Iilwcy44cyBDGIOiNcciZc.roa (hash: DAz6Ppsy/dUr6FC8qgrSiRy5YAj9fXyStl0yZkiYgzQ=)
                          3: UL1TM9Ku_1pFMPJup9TtTTluHCY.roa (hash: r5zkiq+Hlx8k6L5HudvPP84rfmCiM2+7yiyNp6m+sMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:e6:d0:94:af:14:e5:79:64:ea:0c:00:14:0f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
        Validity
            Not Before: Aug 14 18:00:40 2026 GMT
            Not After : Aug 15 18:00:40 2026 GMT
        Subject: CN=c5b0cebe32eab1a70c9bfb6e2719fbd58738331b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:46:0f:7d:e4:8d:4e:70:3e:c4:9c:0e:aa:
                    d3:0d:31:f2:ff:99:b0:4a:47:ce:89:c2:55:a8:b9:
                    9b:12:80:3c:9e:71:e9:47:9b:72:73:b2:2f:15:4f:
                    94:d9:46:f6:ca:09:c7:2d:01:04:a1:aa:be:b4:48:
                    80:d2:84:77:94:77:12:8a:d8:c1:d4:4a:65:8c:6a:
                    85:7c:07:6c:a3:b0:6c:1b:31:12:1f:7a:5f:46:fd:
                    61:79:57:c6:a0:34:08:c4:3e:de:eb:7f:24:8a:a6:
                    2b:27:e3:4e:8a:48:57:49:a0:83:f6:c3:18:eb:19:
                    dc:0a:d7:bb:80:71:72:d8:b2:40:c8:67:a5:1c:58:
                    78:ff:24:a7:77:7a:90:be:7e:cb:d2:d2:70:ab:af:
                    f1:db:53:8a:75:6a:d9:e7:5b:ae:cf:1d:38:df:f3:
                    d8:8d:a9:28:a1:4f:be:75:94:c7:25:17:e2:7a:a2:
                    5c:5e:f1:18:fb:f1:64:ec:61:01:80:6b:eb:ab:db:
                    c7:b6:6a:bd:7b:d5:ce:03:2c:c0:29:d0:bd:39:61:
                    3f:21:2d:de:20:10:a4:72:08:2c:63:a8:11:03:e0:
                    f0:5a:87:0e:d4:3c:56:06:2c:ad:f2:9a:b1:4a:70:
                    16:dd:2d:02:26:18:39:5d:a0:b3:28:76:cc:28:80:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B0:CE:BE:32:EA:B1:A7:0C:9B:FB:6E:27:19:FB:D5:87:38:33:1B
            X509v3 Authority Key Identifier:
                keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:b2:12:07:48:79:53:7c:1e:a6:67:f7:00:1d:04:c7:a9:
         07:c5:15:c9:a9:b1:f6:7e:4c:73:8c:91:4c:f3:71:6b:d0:d4:
         a3:8f:4f:f8:06:d5:7c:22:a1:b8:40:28:2b:d9:3e:a2:46:75:
         95:db:aa:60:18:2d:2b:40:4c:fa:2f:f7:0b:9f:c8:fa:13:77:
         c6:52:f7:5a:b2:9f:79:9d:c4:fe:ef:27:3b:1d:f5:2c:38:75:
         31:61:55:32:59:30:11:f5:f1:25:5d:53:94:8b:3a:cb:0c:16:
         52:f1:cb:d7:0a:e1:38:72:fa:38:41:40:07:9a:71:de:8a:2d:
         79:40:af:5d:76:71:42:7e:ab:88:60:ed:00:28:24:f2:ae:8a:
         c1:ad:ce:67:f0:60:b0:1c:52:22:d6:9a:70:77:2d:fd:db:86:
         bc:bc:a0:27:09:fc:ee:6c:82:95:5e:dc:ad:c5:10:22:07:b8:
         d6:52:16:1e:dd:f5:3b:33:23:f6:a0:ba:78:83:52:2e:b7:56:
         33:ea:a6:3e:b0:9c:5f:4e:bc:6a:16:93:66:9a:ee:ed:2d:86:
         8c:a2:bb:d7:af:de:d0:ab:8e:e3:c8:5f:bb:e7:f9:aa:59:4e:
         76:c9:fd:fe:eb:04:e1:55:20:8e:17:3b:d9:86:c5:c1:db:e5:
         c4:69:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:23 2026 by rpki-client