Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File:                     g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier:          45+n9/p/M+nFTLO6buNf//Qj4fpdEolS6zx48BWaISw=
Subject key identifier:   66:3B:DB:F2:51:B1:7D:78:48:1D:40:B8:CC:93:B6:53:D1:2F:FC:89
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer:       /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial:       01A08CB193980B05BCC72600BEE59A00A669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number:          19DD
Signing time:             Thu 10 Sep 2026 19:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 19:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 19:00:42 +0000
Files and hashes:         1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
                          2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: xMCXHLL89k7QXYsM86sjgvYwAelOMb9IzIW2UmuWZgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b1:93:98:0b:05:bc:c7:26:00:be:e5:9a:00:a6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
        Validity
            Not Before: Sep 10 19:00:42 2026 GMT
            Not After : Sep 11 19:00:42 2026 GMT
        Subject: CN=663bdbf251b17d78481d40b8cc93b653d12ffc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:f9:e2:5b:ea:0e:79:ab:d0:47:57:39:d5:
                    3b:ea:bc:87:da:03:1e:5b:55:2d:f2:d8:5d:8d:8c:
                    1d:79:57:b1:6d:a2:48:95:87:94:dd:91:4f:2d:ef:
                    95:9d:37:a5:f9:a1:70:a4:d4:c1:3e:c4:8e:47:ae:
                    a2:72:6a:0d:c5:15:44:cb:9b:87:ca:22:d9:dc:4b:
                    af:6d:e9:b7:70:99:5a:36:a1:a1:b9:c1:33:a9:3e:
                    75:2b:53:1c:50:26:c7:5c:8f:c7:c1:52:86:76:de:
                    cb:d7:12:ee:42:bf:95:9a:e2:70:9e:46:f0:9f:ba:
                    a0:59:c5:a5:7c:83:d8:4a:f9:bb:04:ab:ae:0a:3c:
                    80:94:61:77:dc:1f:29:ee:0b:15:21:61:f0:ce:a4:
                    db:3d:b6:2f:91:47:11:cc:c2:56:76:fd:b8:d8:c7:
                    ff:44:ba:f2:bd:06:15:5f:47:e9:fe:65:3d:aa:c7:
                    1c:64:11:14:ec:8f:56:cb:ae:a4:4e:95:29:49:81:
                    e2:f0:d9:46:ab:29:c8:3f:87:a2:f4:fc:c7:d6:d3:
                    e7:f0:cb:12:ae:96:8f:3f:9e:b2:85:87:23:fc:90:
                    93:22:c4:54:87:8b:ae:bd:d6:2a:46:36:90:70:d9:
                    8c:17:e2:10:d5:8d:5a:65:6e:8d:3e:a8:d1:c0:9b:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3B:DB:F2:51:B1:7D:78:48:1D:40:B8:CC:93:B6:53:D1:2F:FC:89
            X509v3 Authority Key Identifier:
                keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:85:39:14:80:83:31:31:06:d9:a5:67:da:cb:83:4f:c8:
         14:ad:95:47:22:3a:51:55:21:78:a6:ae:ee:55:07:26:91:da:
         12:be:8e:93:af:6c:ac:09:8f:4f:6b:7d:9c:9a:e4:04:86:a4:
         15:f5:fc:63:ed:60:6c:95:38:0f:2a:a0:fa:c2:8f:13:29:9e:
         18:a4:4e:26:30:f2:d5:3f:27:2a:9d:4f:f6:fa:69:c4:ad:7b:
         6a:8f:8b:63:fe:02:5b:15:80:1b:44:51:20:94:03:ac:bf:0d:
         e6:60:e4:50:34:9e:c4:05:5f:4b:d7:c8:d8:82:09:9a:11:6c:
         34:66:ae:a5:8b:01:be:ac:21:ab:81:db:c8:54:06:35:1e:05:
         36:5a:6d:89:e1:55:38:55:62:64:65:74:c7:99:17:c9:0b:c7:
         51:a6:7d:f4:5e:f6:b0:c6:44:84:0c:1f:19:37:55:ef:d5:04:
         d5:47:49:8c:65:5f:05:54:76:1a:e0:94:75:31:ec:0a:58:7f:
         3b:d4:29:6b:ab:a6:71:6d:88:df:d5:b3:41:2b:55:e9:92:2e:
         4c:8b:52:71:da:67:ad:9d:ac:5f:ae:7d:74:c2:5b:31:e1:3d:
         a5:1d:ae:3c:41:6a:ef:42:1b:28:ee:c2:df:03:1c:be:b7:81:
         18:81:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:33:47 2026 by rpki-client