Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
File:                     xi18rB_7LD-94oRiW_GvTGuuaw4.mft (raw, json)
Hash identifier:          gwdBlc2PRoKXXYZEz5crmlYnthrPenH4njDOmrqMWaA=
Subject key identifier:   6F:C2:12:33:02:B8:52:DD:FE:0B:6B:0F:06:25:8B:E0:89:8D:A6:31
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Certificate issuer:       /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial:       01A08C7BD3D55BE1DC3326D52D8F0F79959A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
Manifest number:          0FF9
Signing time:             Thu 10 Sep 2026 18:02:00 +0000
Manifest this update:     Thu 10 Sep 2026 18:02:00 +0000
Manifest next update:     Fri 11 Sep 2026 18:02:00 +0000
Files and hashes:         1: brf91ENcAgUp0obWF-s4t0ccdXg.roa (hash: L3X4nsh8efFRGAeVZaXiM6ZqsZGp3bsgy9UCI0jKigw=)
                          2: lG6FMWT2cKO27fqSgyD7NwJGZic.roa (hash: 8vr9/y84LRaPCw3bPTcjeu/NXDEsRUvrX9EcTdM7j5g=)
                          3: xi18rB_7LD-94oRiW_GvTGuuaw4.crl (hash: G5dLyPhrbnma12BJfQCls2rPOmt8FFwy5vNXkI1ndVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:d3:d5:5b:e1:dc:33:26:d5:2d:8f:0f:79:95:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
        Validity
            Not Before: Sep 10 18:02:00 2026 GMT
            Not After : Sep 11 18:02:00 2026 GMT
        Subject: CN=6fc2123302b852ddfe0b6b0f06258be0898da631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:1c:e7:a1:a2:41:a9:90:33:c8:3e:82:22:
                    52:cf:41:21:a5:af:ae:99:e1:ff:17:17:31:44:ba:
                    6d:d4:4d:97:06:a4:f5:2c:81:54:fa:53:eb:cc:4e:
                    a4:10:4d:cb:6f:0c:e9:17:b1:ed:b6:c0:0f:a9:6c:
                    c3:d8:58:81:23:d0:f0:2f:ce:a8:54:61:6a:b7:eb:
                    88:f2:9d:3b:37:a8:fb:e8:08:4b:25:04:d2:59:ee:
                    c6:ba:55:53:65:8d:b0:13:43:3d:c0:d8:e4:ae:89:
                    86:4a:b2:55:55:d9:a8:e2:aa:71:88:25:09:e6:85:
                    16:04:97:8e:ca:c4:22:fe:0a:50:b1:e2:b7:93:dd:
                    6b:3b:9a:08:dd:d7:73:36:b6:c4:79:f6:f9:02:0a:
                    b5:a7:64:48:7f:92:e9:44:bb:26:b2:1a:a6:09:f7:
                    10:31:dc:81:1f:d9:73:c0:5a:7d:dd:ca:a6:3b:96:
                    8f:20:30:82:02:a5:c6:4c:ef:dc:cf:83:ba:82:3d:
                    94:5b:fb:53:37:ce:d7:b8:04:5c:5e:e6:a3:88:5c:
                    df:e4:ba:b6:d1:65:af:ae:4f:d6:3e:03:cd:5d:e4:
                    a2:85:ba:1f:04:19:68:af:05:5a:1c:2e:ab:09:10:
                    7f:7a:4a:e6:6f:15:6a:54:a1:7e:66:65:aa:06:fa:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C2:12:33:02:B8:52:DD:FE:0B:6B:0F:06:25:8B:E0:89:8D:A6:31
            X509v3 Authority Key Identifier:
                keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:68:87:9b:f2:82:83:ae:c8:0f:a8:7c:19:0c:c3:9a:d1:
         c3:5d:a7:ac:01:a9:42:ea:2a:fc:f0:9b:a0:25:7a:f2:bb:53:
         06:91:7a:5f:1c:51:12:2e:d1:1e:54:73:9d:92:75:1e:e2:ef:
         02:06:31:5e:3b:5a:e1:2c:50:60:9c:db:8a:e2:09:1b:21:70:
         1c:e2:7a:aa:c5:d5:fa:40:83:de:b5:13:da:6e:9a:85:4b:81:
         df:33:f6:06:52:4d:6f:28:76:b7:b7:9c:9a:9c:eb:2e:25:71:
         f7:e2:c2:d0:ef:1b:32:92:d6:48:1d:db:cb:39:73:14:b3:8b:
         0a:24:a6:af:a1:f2:bb:44:96:49:99:a8:5a:d5:dc:1e:15:f5:
         9e:0e:f3:5a:78:55:a1:98:ea:c3:26:71:eb:c3:4d:1a:9e:44:
         61:9d:65:9f:94:72:ef:01:46:b0:36:30:ce:ec:c0:00:55:72:
         15:a8:17:48:4f:06:36:cf:32:37:c9:a7:37:e8:5e:5d:96:02:
         7a:5b:70:1a:8d:21:c9:19:79:15:1f:1b:9f:7f:fc:02:ba:5b:
         35:5d:0a:17:38:fc:89:e7:f4:4b:4f:51:bc:f9:8e:4f:bb:68:
         dc:c0:a3:e6:df:68:89:70:16:40:59:f0:a2:51:18:d0:42:44:
         a5:5a:5b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:45:05 2026 by rpki-client