Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          c6o82QpJv4D04flT/bH4q4Jz31EdAnM7mFL1CdgzB48=
Subject key identifier:   E5:9E:DE:A1:81:86:93:39:B0:CB:57:48:8D:5F:1F:D9:35:0D:EF:09
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       01A089E7DB746452A5BC746734B3BAAB659A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          162E
Signing time:             Thu 10 Sep 2026 06:01:08 +0000
Manifest this update:     Thu 10 Sep 2026 06:01:08 +0000
Manifest next update:     Fri 11 Sep 2026 06:01:08 +0000
Files and hashes:         1: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (hash: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: pqk0YuszH5dQa/gy/TGuPxuXTKSfMlzHrHpvOTL2t7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:db:74:64:52:a5:bc:74:67:34:b3:ba:ab:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: Sep 10 06:01:08 2026 GMT
            Not After : Sep 11 06:01:08 2026 GMT
        Subject: CN=e59edea181869339b0cb57488d5f1fd9350def09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:c1:8b:e6:0a:7d:37:17:35:89:98:31:88:
                    f4:e0:bc:6e:3a:7f:0a:d8:a3:2e:80:04:22:76:6e:
                    4f:a1:cb:26:9b:45:6f:49:08:92:94:e6:de:9a:3b:
                    ee:43:80:33:b5:80:fc:fb:a4:6d:0d:78:cc:13:54:
                    a5:53:17:d1:a1:fc:9e:d6:73:54:05:e3:d3:06:c5:
                    49:03:e9:dc:93:8d:de:40:38:60:b9:2e:c1:fe:03:
                    a6:e1:43:4a:a6:aa:44:33:85:82:9f:3a:41:04:47:
                    5e:fe:cb:7e:f7:e1:fc:3c:60:ae:a3:e4:0d:8e:35:
                    37:10:b7:66:87:a3:2c:01:c8:f8:5f:56:b9:c6:ce:
                    dd:a0:e7:15:b5:22:5c:61:8c:44:35:9a:bc:a1:5b:
                    1b:31:d7:e5:bd:b7:cf:0e:a1:6c:fc:4e:64:64:4c:
                    60:18:62:fd:65:62:f5:43:21:76:3f:74:e1:d4:6f:
                    a6:8b:55:30:eb:d8:af:35:02:dc:ca:4c:0b:68:09:
                    f4:e9:b9:a8:79:7c:04:ff:62:08:d7:6e:af:b9:24:
                    2f:83:ff:4b:8f:81:dc:b6:7d:81:58:bf:45:5c:79:
                    4a:0c:92:de:0e:8d:e4:cb:10:c0:10:af:29:48:6d:
                    f5:12:b0:e4:1f:4c:49:79:c7:f7:64:d3:9d:c1:99:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9E:DE:A1:81:86:93:39:B0:CB:57:48:8D:5F:1F:D9:35:0D:EF:09
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8d:2d:90:49:49:7f:ee:6c:1c:49:50:cf:25:b9:d6:f6:cf:
         cf:5a:20:2e:74:3f:72:19:0d:22:20:7c:49:2d:99:84:49:6f:
         5f:ff:f2:2d:f9:fc:c5:85:1c:19:ea:99:c1:0b:30:f2:e2:16:
         03:11:dd:65:3d:63:4a:99:9b:c9:2f:d2:04:cc:98:61:1f:54:
         38:59:44:d0:cb:06:b0:de:a6:f5:24:05:7f:76:a0:eb:b8:47:
         4c:78:2a:73:04:b6:b6:9c:b3:60:2b:25:41:28:c5:94:5e:2b:
         74:a6:51:72:ad:43:ec:b2:13:25:29:e5:de:dc:32:80:cb:43:
         1c:a4:83:a0:c1:87:63:a1:9c:54:f9:d7:18:c3:fb:74:16:7b:
         d3:db:83:12:56:8d:47:4b:5f:5a:15:c0:53:e6:46:39:d5:0d:
         ae:71:a8:de:14:23:bd:35:4e:b9:00:95:d1:66:71:cf:7d:13:
         51:12:66:e8:1e:ac:21:19:be:e8:3f:e6:17:9b:9c:bd:81:f5:
         bf:ab:00:c7:74:fa:aa:05:1f:2b:71:d5:e6:48:09:96:9b:21:
         06:a6:93:3c:e3:2b:0d:83:e8:78:c3:aa:e3:f9:b4:9c:64:03:
         1a:df:93:ff:99:5a:dd:58:05:d7:17:20:fe:9a:eb:46:20:13:
         17:2f:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:44:17 2026 by rpki-client