Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft
File:                     6wNf2684zEZvMWegDZo4sY0pGVI.mft (raw, json)
Hash identifier:          2q3f8W3droiI3Ys1436ZkOsKhF/gmYmy+ftXJ8OidVE=
Subject key identifier:   11:80:52:13:86:0A:C3:09:9A:31:E5:57:DA:65:AA:A7:C4:CE:72:FC
Authority key identifier: EB:03:5F:DB:AF:38:CC:46:6F:31:67:A0:0D:9A:38:B1:8D:29:19:52
Certificate issuer:       /CN=eb035fdbaf38cc466f3167a00d9a38b18d291952
Certificate serial:       01A06D5E4255A3323A5C44607D963293F605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wNf2684zEZvMWegDZo4sY0pGVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft
Manifest number:          0146
Signing time:             Fri 04 Sep 2026 17:01:28 +0000
Manifest this update:     Fri 04 Sep 2026 17:01:28 +0000
Manifest next update:     Sat 05 Sep 2026 17:01:28 +0000
Files and hashes:         1: 6wNf2684zEZvMWegDZo4sY0pGVI.crl (hash: iOBH4hNE3JIkrqB6X/QrYrhgIxCo4oEcIEw1oTGQmFQ=)
                          2: n8S8bVaGcAN3VgdpkFafYARJWFg.roa (hash: +lLrY2ENdazX4r0ywKff6R/dv1MoLjZqWxtS/7RQhF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6wNf2684zEZvMWegDZo4sY0pGVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5e:42:55:a3:32:3a:5c:44:60:7d:96:32:93:f6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb035fdbaf38cc466f3167a00d9a38b18d291952
        Validity
            Not Before: Sep  4 17:01:28 2026 GMT
            Not After : Sep  5 17:01:28 2026 GMT
        Subject: CN=11805213860ac3099a31e557da65aaa7c4ce72fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:7a:3e:99:cf:1c:6b:1e:5c:2c:ce:95:24:
                    5c:03:a2:20:b9:0c:d5:d4:d3:3a:5f:01:d9:8b:84:
                    99:31:a2:dc:f6:7e:1d:d0:ab:fd:20:01:62:62:bd:
                    00:a6:fd:a9:40:79:e9:5c:bc:69:6d:00:ca:e0:53:
                    ef:d9:8f:f7:ca:29:a4:38:87:90:22:3e:b8:99:3a:
                    f0:13:1c:c9:98:1f:73:0d:38:50:eb:d0:b8:d8:4f:
                    24:13:da:5f:3d:6f:a4:e5:85:62:37:e4:cc:85:f5:
                    e6:81:09:03:b2:0c:77:be:d7:74:3f:b1:b3:e3:62:
                    bc:5c:de:9e:05:94:4b:5d:4a:6e:b0:cc:c9:de:fb:
                    ce:48:c3:c3:6a:35:a1:e6:82:a8:4d:72:fb:92:e8:
                    e7:ab:52:6f:e6:1c:66:bc:fe:4a:f1:1e:53:9c:6f:
                    72:18:fc:3f:0e:c9:2c:84:0c:a6:12:56:ae:97:fe:
                    8a:b1:61:12:f3:79:ca:2c:3f:26:7e:30:a3:48:da:
                    cb:ed:ad:4c:10:2a:8c:64:6d:c4:88:bd:77:8a:d9:
                    45:27:6b:e9:c8:2e:64:86:1d:13:de:0c:05:bd:75:
                    d6:31:a7:36:0a:1a:87:e5:3b:4f:a5:14:e1:18:6e:
                    50:9e:6d:43:60:da:26:44:2a:44:e7:93:89:29:72:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:52:13:86:0A:C3:09:9A:31:E5:57:DA:65:AA:A7:C4:CE:72:FC
            X509v3 Authority Key Identifier:
                keyid:EB:03:5F:DB:AF:38:CC:46:6F:31:67:A0:0D:9A:38:B1:8D:29:19:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wNf2684zEZvMWegDZo4sY0pGVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/786d4c-ff95-4ef4-ba12-6843265887ce/1/6wNf2684zEZvMWegDZo4sY0pGVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:f3:fe:f5:8d:fb:68:e4:23:99:81:e7:be:e2:b8:85:65:
         a4:89:bb:c6:f4:80:76:67:51:61:3e:dc:b7:c2:27:5c:b9:a2:
         88:45:46:e0:f1:a5:1a:be:fe:63:6b:f0:75:19:45:47:57:6e:
         b4:4e:1c:72:68:30:e9:f8:39:a4:c0:61:ef:5a:eb:70:db:49:
         4d:b6:69:67:5f:df:5c:28:df:ae:ef:12:13:25:8d:3c:62:ec:
         7c:ce:12:f0:36:a3:22:61:13:79:5d:20:7f:1a:36:f6:4a:48:
         da:8e:96:82:2a:09:f0:18:c8:a7:42:76:c9:4c:75:43:bd:1d:
         70:1d:0e:ca:81:a4:fc:da:0e:cd:9c:19:d6:88:30:ce:51:50:
         da:4f:f3:1e:b0:a1:fe:56:01:d5:8b:ba:95:b7:ec:44:d8:03:
         39:ab:dd:0e:ef:a2:f4:9e:7b:4b:92:b9:dd:95:45:95:ad:c6:
         1f:ed:12:f4:a3:fe:47:b4:9c:c6:33:df:25:11:42:5f:77:4a:
         df:28:37:d1:35:d2:ff:fb:51:28:91:c7:c3:16:11:f1:92:96:
         1c:8b:74:60:03:a3:7e:fa:57:01:99:ac:76:1a:73:8a:d0:6f:
         5e:76:95:cb:7c:58:55:4e:a9:cf:d4:a0:6b:75:8c:9b:ac:2a:
         a2:b4:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:54:28 2026 by rpki-client