Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
File:                     6W790RLajZdctZOq0f6IQNbwiuM.mft (raw, json)
Hash identifier:          GuBPORCjsAQcAMB0bu/Ko3wSrgBOoEzdgiIaOiXjtqM=
Subject key identifier:   1E:6B:35:C2:84:49:06:AE:05:8B:0F:35:7A:2C:74:41:E6:A2:F9:87
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Certificate issuer:       /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial:       01A0401792DC99ABE38A739A133D2A9F3CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
Manifest number:          05E9
Signing time:             Wed 26 Aug 2026 22:01:21 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:21 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:21 +0000
Files and hashes:         1: 6W790RLajZdctZOq0f6IQNbwiuM.crl (hash: LUPhDDBOMy3q8F7ZJeAlZs4rj2ziTNXWYmnHsYpv1Kk=)
                          2: RXuM8IAV9dKlB2EmQJTkf2N4B2Y.roa (hash: WD8pAbNOanv690TfIXURotgNnDP3a1P1ohNJm3tKlWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:92:dc:99:ab:e3:8a:73:9a:13:3d:2a:9f:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
        Validity
            Not Before: Aug 26 22:01:21 2026 GMT
            Not After : Aug 27 22:01:21 2026 GMT
        Subject: CN=1e6b35c2844906ae058b0f357a2c7441e6a2f987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:15:4c:88:2d:74:dc:8f:da:7e:c8:1a:54:
                    f2:74:de:2d:c3:f3:b6:ce:ff:d8:22:84:97:69:19:
                    da:0c:db:b8:18:89:4d:56:a4:ec:60:5a:2d:84:20:
                    5a:cd:d1:e8:fd:19:e3:10:b2:4b:bd:88:95:f8:6d:
                    3c:dc:db:2e:55:ce:fb:7e:fe:69:e9:64:63:d9:04:
                    e5:1d:c5:e1:ca:94:b0:e0:1c:15:35:77:16:0f:1c:
                    f2:e6:33:48:c2:b3:eb:40:74:93:96:e7:6d:df:1d:
                    32:75:eb:f8:b3:59:bc:1a:c9:ac:c7:26:8f:20:c7:
                    88:7b:5b:ad:6c:0e:51:b3:4f:43:7c:d9:86:9b:93:
                    e0:a3:fb:00:d5:8f:71:a7:d6:a9:ac:dc:64:e5:c9:
                    4f:81:d2:20:ab:2e:65:9b:33:c6:af:cb:57:a0:a3:
                    04:99:3e:e4:97:96:53:fd:9f:78:c3:06:ac:c8:aa:
                    d3:05:2d:ae:41:11:0a:34:54:60:79:ce:3f:0f:c7:
                    3c:4e:1f:ad:61:d0:a7:56:cd:41:ab:b1:ab:72:0c:
                    58:50:0c:ca:52:c0:98:11:9e:8d:93:21:a9:1a:14:
                    71:b9:fa:f6:e4:69:ce:23:c5:fc:5c:93:79:62:14:
                    ba:8a:92:d1:b3:16:a5:6b:62:c9:6e:35:95:bf:43:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6B:35:C2:84:49:06:AE:05:8B:0F:35:7A:2C:74:41:E6:A2:F9:87
            X509v3 Authority Key Identifier:
                keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:cc:18:5b:dd:e2:0e:ff:f4:65:68:77:51:d3:44:74:15:20:
         e2:bc:7e:31:4b:1d:00:aa:ca:40:f5:e1:5a:eb:58:ce:cb:4c:
         10:ae:16:4b:58:85:53:95:32:18:94:0a:bd:21:4d:5d:17:a4:
         98:f0:df:4d:38:0b:44:ba:2b:40:07:62:25:10:d1:e2:c2:a8:
         1e:db:a6:4e:45:e7:4e:bb:0c:3e:65:2d:f3:4c:7a:d6:27:83:
         81:13:36:ce:ea:95:f1:cd:a9:8e:1d:12:f4:c2:10:f2:04:1e:
         dd:ed:a0:87:74:92:f1:d1:bd:a2:43:1f:c5:4b:92:c7:78:31:
         9f:86:b2:e2:aa:dc:33:ed:19:15:c3:2a:cb:8f:29:34:5b:c2:
         c7:e8:bd:af:b1:58:f8:e6:bc:b9:69:71:e8:07:56:f7:43:48:
         96:38:ed:42:c9:4e:05:1f:f8:35:0f:7e:e3:fa:c8:5d:5a:d3:
         f4:ce:86:17:02:c3:4e:c2:14:68:7c:c3:c9:52:65:bf:ff:14:
         37:6f:5c:68:7f:a0:dd:fd:ed:8c:75:df:06:85:fa:0c:4e:e0:
         53:56:a9:64:39:f1:c6:2d:d9:13:34:c1:75:25:ba:4d:0b:eb:
         df:29:0b:4a:10:b1:a0:1f:22:49:6b:f3:86:f1:d2:30:8f:8b:
         69:3c:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:14 2026 by rpki-client