Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File:                     v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier:          SY4sjzvNzBU7JqoXlIaXPqH8kukCRXeQ4khvmb091jc=
Subject key identifier:   7C:E2:10:5C:4E:62:49:69:72:A1:9C:59:0D:D8:11:74:44:F4:DC:8E
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer:       /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial:       01A0B6F7E2C39FE174690DD2F60A9765CC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number:          1A61
Signing time:             Sat 19 Sep 2026 00:01:33 +0000
Manifest this update:     Sat 19 Sep 2026 00:01:33 +0000
Manifest next update:     Sun 20 Sep 2026 00:01:33 +0000
Files and hashes:         1: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: ijx6QbprZkLjqSWtwg/VZp9N7PkXR5GrDLXi5dAm/8o=)
                          2: yOtgoQUSDDTF6dzBLbgn19zbD20.roa (hash: FLmTb8uB8aThQGwMLCsGAZe9JiC1Qd3BPfuyYTN+2do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:f7:e2:c3:9f:e1:74:69:0d:d2:f6:0a:97:65:cc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
        Validity
            Not Before: Sep 19 00:01:33 2026 GMT
            Not After : Sep 20 00:01:33 2026 GMT
        Subject: CN=7ce2105c4e62496972a19c590dd8117444f4dc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:c8:cc:2e:2a:70:26:17:4e:59:8c:74:41:
                    3a:92:50:99:41:22:9f:c4:d5:5d:ca:1a:e2:aa:c8:
                    8f:06:3e:1d:4d:39:86:ab:01:82:da:b7:0a:ec:5b:
                    2e:2b:de:82:6c:90:e2:86:4d:7d:11:6f:6e:b4:29:
                    9c:1b:32:e9:06:f9:93:d6:c9:83:73:ed:62:de:cd:
                    d8:df:65:3c:fd:c2:68:67:11:13:fe:22:1c:a2:2d:
                    f8:10:da:df:02:91:dd:c0:e4:6e:1c:25:dd:29:3c:
                    e7:40:71:9a:75:f4:4e:73:53:77:35:66:53:5e:fd:
                    ed:09:c8:9e:e8:e0:0d:d5:1c:27:34:dc:da:a1:2d:
                    0e:96:a6:a5:96:9e:05:e4:90:1f:29:44:2d:91:c3:
                    f2:54:f4:a8:f2:08:51:40:76:56:5d:ce:98:bf:8d:
                    04:fe:cb:96:43:b5:75:79:90:6a:ff:1f:8d:18:d8:
                    9d:a5:32:2b:17:59:22:7b:64:59:13:2e:9d:ff:45:
                    61:67:99:e6:8c:70:09:93:31:b7:8b:ab:56:eb:a8:
                    f5:2d:a2:e3:56:9f:a9:c5:95:49:12:9b:71:93:0d:
                    24:b7:93:11:6a:9f:89:b9:c8:27:99:07:c5:ce:6c:
                    d3:06:de:25:1b:a4:e4:b9:d8:1f:0f:60:e2:6a:5d:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:10:5C:4E:62:49:69:72:A1:9C:59:0D:D8:11:74:44:F4:DC:8E
            X509v3 Authority Key Identifier:
                keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:b0:b0:ea:c0:7b:b0:d6:d2:9f:6f:52:57:d0:79:87:71:
         44:f9:d6:35:f5:af:3b:83:ba:65:d5:23:76:e4:38:21:79:fe:
         db:03:56:e3:da:f5:f8:ff:f5:89:83:55:8f:2c:ec:45:eb:8b:
         f5:a6:db:69:51:b2:40:4b:b7:5d:35:1b:14:a6:c0:45:c9:4b:
         94:3d:bb:d8:0c:bb:28:6a:d0:bd:95:03:15:bf:17:57:3c:a0:
         6e:f2:a2:c1:f2:7a:5a:92:e2:91:b1:e6:08:69:50:ef:89:b8:
         29:65:47:70:b2:d8:8c:f8:17:79:dd:c3:b3:96:48:69:e0:10:
         2a:a8:06:2f:c3:6c:b4:59:44:7e:ba:9a:83:aa:7e:e5:68:4e:
         e5:18:c4:1b:5f:2f:96:74:d9:ba:e3:99:60:fd:7f:41:36:68:
         f1:f8:49:10:a9:d2:60:b3:72:f1:7d:df:27:87:e6:7f:c9:bf:
         b5:4a:9c:ef:72:6b:cc:22:49:bf:72:a0:4a:56:a5:32:b6:8a:
         58:18:5b:bc:ad:15:86:36:f3:73:32:79:93:7d:22:c1:bd:31:
         c9:8b:ac:82:a2:01:87:6b:da:9b:03:4b:d3:d6:ef:a2:32:50:
         e8:e7:79:9b:3a:b1:c7:fa:ab:a2:79:2a:1f:a2:8e:52:29:e0:
         fc:c3:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:08:18 2026 by rpki-client