Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          D+a+1Lkwdz9yRc3jURll8+S27AMXFPVXfjmaaCz8Z08=
Subject key identifier:   2C:15:A2:50:31:2A:12:58:7C:4E:18:A6:4D:7F:D8:C6:79:A3:FC:BC
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       01A08AFA7699CDCD7E852D273946A1E1B4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          09CE
Signing time:             Thu 10 Sep 2026 11:01:04 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:04 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:04 +0000
Files and hashes:         1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: rKWuYhvTArVsv4OK1/SZe6tMXj01JLjRPoE9Z/oqDfc=)
                          2: ET0FEwtBWcNF1w6-haZ741PxhEE.roa (hash: ewl+EUT/eRs8CzyYcj651WLEqPS9XoO9of4XQBHw70I=)
                          3: fiv0OI-AqtRVVrzWS5rFRgZaVys.roa (hash: oh8Kp8XMS/i+hHdda1I22uBBGuzEAYFA2en/nHrlnSs=)
                          4: t8aFQS7lWhuM_-J21qq8wpHr948.asa (hash: IcDTJWBpBF8MZ144faOgduVI2vqGFOUYWFm0kF+tK60=)
                          5: uWhFb1HwZvJ_IfY-iiz9y_hTepY.roa (hash: 7jH7FBgqrDkvhTn6gZysjOdIXNNg1HK77FI6FjOJlP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:76:99:cd:cd:7e:85:2d:27:39:46:a1:e1:b4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Sep 10 11:01:04 2026 GMT
            Not After : Sep 11 11:01:04 2026 GMT
        Subject: CN=2c15a250312a12587c4e18a64d7fd8c679a3fcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:a4:91:5c:b3:f6:2a:63:0b:e6:63:7a:1a:
                    5e:42:f8:e0:13:09:25:b7:03:77:71:26:8a:1f:39:
                    8c:61:04:69:54:84:24:8f:22:29:ad:e5:b2:db:a6:
                    47:c6:86:2a:c7:47:67:58:5b:1c:0d:6c:98:8e:b8:
                    71:81:0e:4e:e6:8a:52:b6:66:a8:5e:d4:02:3d:ea:
                    41:04:1f:0e:76:1b:c1:df:68:cf:e0:c1:37:6e:e3:
                    50:7f:51:fa:6b:27:72:48:da:0c:78:4e:f5:ff:ee:
                    50:69:e5:37:1f:d3:18:39:50:36:70:fd:32:4c:8c:
                    96:9f:51:93:35:ba:fd:df:9f:c0:2b:8e:2a:d0:48:
                    b0:a6:ea:50:c1:a4:da:0a:02:dd:f9:72:77:53:c5:
                    48:63:43:25:1e:31:ee:94:20:ea:56:32:2f:78:81:
                    f8:3c:19:72:41:e3:ad:64:bc:8e:4a:97:08:e0:c2:
                    ba:29:55:39:d2:da:46:ae:70:54:f5:27:22:cb:1b:
                    e1:a2:a5:70:79:2f:41:0f:bc:91:59:cb:cc:09:d6:
                    89:46:63:34:5d:d0:dd:ea:60:6a:79:ed:ca:c2:4c:
                    e6:54:de:0a:bc:46:17:ea:fa:51:6b:39:aa:88:6a:
                    cd:fa:5c:b3:8f:c0:43:38:96:3a:2f:fb:b2:35:d0:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:A2:50:31:2A:12:58:7C:4E:18:A6:4D:7F:D8:C6:79:A3:FC:BC
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:c6:0c:11:a6:16:0c:f9:98:dc:c3:e9:6a:38:c6:f9:d7:
         14:29:d9:ca:e1:b6:ac:be:6d:ab:79:cb:b5:91:9f:3b:00:99:
         db:c2:b4:83:90:a6:47:bf:c2:e2:e4:f0:52:3b:e8:4a:7b:f7:
         e3:1c:16:f5:a6:b3:d3:31:b4:05:8d:32:88:d7:6c:2c:6a:86:
         1d:71:95:fd:64:95:b5:5f:16:47:e7:aa:fc:f1:fe:d3:83:7f:
         14:c1:ff:9e:49:ca:42:a1:c6:e2:45:66:10:86:19:a7:75:d0:
         30:1e:d1:ab:b1:5f:db:f4:12:02:b7:02:5d:c7:4d:ce:6e:94:
         7c:e9:fe:a9:ca:fc:99:cb:16:99:0e:46:88:1d:49:9c:54:2a:
         3a:eb:f1:1d:7b:3b:51:09:61:ed:2b:db:be:4e:ac:33:ce:d2:
         5e:1b:b7:e0:47:ab:a9:03:52:9a:81:e1:d3:83:e8:db:16:c2:
         26:4d:7b:0e:03:06:2e:a1:0d:d0:0c:c3:8d:31:3a:4e:16:12:
         49:63:be:f0:cd:23:ab:b4:a2:ad:e4:c1:2c:bf:08:72:a2:9a:
         1b:66:cf:29:69:07:23:47:f8:37:fa:03:4e:39:3b:ee:5f:94:
         44:29:78:25:eb:13:9b:52:e5:ed:da:73:cc:a9:15:b1:c3:91:
         5c:04:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:47:54 2026 by rpki-client