Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          xE+qB3/MGVHlTLNbtqDUJL72HDlSxht0F9o5NJQ9KeQ=
Subject key identifier:   A1:B0:FB:6E:83:88:64:A2:DE:02:86:E5:C8:36:04:6D:24:C4:AE:DC
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       01A0005C9EFDFFAE265740F1CE379CEF456D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          0753
Signing time:             Fri 14 Aug 2026 13:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:05 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: hYhydV6sQ8KdM0Xul5Meqiz7T+pYNQRAqc7blUfTJG8=)
                          2: oGx7JfYX53D__g9_5hLujNutUzE.roa (hash: lRBSZN0vcGbFXwTasrFrwyAWF1DzSBb5tPanlgAqXJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:9e:fd:ff:ae:26:57:40:f1:ce:37:9c:ef:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Aug 14 13:01:05 2026 GMT
            Not After : Aug 15 13:01:05 2026 GMT
        Subject: CN=a1b0fb6e838864a2de0286e5c836046d24c4aedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:77:24:d7:ff:7d:a9:87:64:e5:31:47:be:
                    6a:4e:d2:bf:f3:65:d5:f7:22:a3:af:cf:67:1d:60:
                    8d:77:46:dd:1a:2e:48:34:fb:18:0f:cd:89:80:f1:
                    b0:df:98:4e:85:ff:b2:8f:77:88:ba:49:37:85:d3:
                    7e:43:c1:5b:25:91:e0:e3:c1:4f:59:d9:77:c6:3c:
                    25:e8:33:46:1a:c9:97:c7:f4:5b:f9:7c:58:7a:ad:
                    ca:fc:fe:fe:ae:3c:30:44:61:b0:82:60:1c:d6:e6:
                    90:0a:c3:e4:fa:62:56:c2:1b:f9:af:8e:ad:6c:a9:
                    c2:62:e7:72:e4:f2:79:29:c8:b5:08:e4:fd:c4:e4:
                    25:6e:69:d6:00:dd:01:cb:44:7d:14:d1:72:eb:8a:
                    9e:6b:e6:a3:27:ce:f4:fd:8d:72:a2:f3:58:d5:42:
                    57:62:9f:23:d2:b3:8b:f7:4c:75:d6:a2:82:13:7b:
                    31:e9:ba:e8:a7:9a:fe:a1:5b:da:64:b4:df:5b:be:
                    8c:16:4f:ef:ab:f3:e3:de:8e:77:59:f3:fc:e3:e7:
                    70:9d:ba:0f:07:16:b4:da:92:c1:40:0d:48:65:48:
                    ce:66:ef:42:77:d9:8e:1f:79:b6:3e:e9:3c:fc:2d:
                    0f:57:2c:4e:bb:e1:35:30:db:25:72:97:18:ce:64:
                    c7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B0:FB:6E:83:88:64:A2:DE:02:86:E5:C8:36:04:6D:24:C4:AE:DC
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:2a:2d:95:4a:e5:19:4a:e2:b4:6b:b1:43:ea:f1:86:86:
         42:1f:56:9b:d5:f6:cb:fe:45:e3:30:7b:7d:73:5c:45:4d:fc:
         04:9e:0a:cd:52:c8:a0:0d:98:30:6f:b2:29:c8:84:48:c0:34:
         65:ca:ea:bb:56:37:f1:9c:52:63:63:eb:81:8b:0e:20:02:7f:
         b5:0b:5e:53:e3:54:5e:38:c6:3e:48:dc:6c:d9:6c:4d:cf:5f:
         87:13:a7:a4:96:5f:34:b6:71:4c:aa:65:98:59:53:c1:ef:28:
         55:c6:28:b9:af:9e:ab:f3:2d:96:7e:cf:d6:d6:70:13:74:7f:
         91:50:56:59:e0:f3:ea:95:12:9a:c9:56:9b:3f:77:a0:f7:fa:
         57:c7:92:e2:97:59:8b:52:c6:ab:af:bb:d9:59:81:db:a7:cc:
         9a:b9:83:e3:47:6d:22:27:33:f2:68:09:2f:7c:13:c5:8b:db:
         9c:12:37:6e:3a:34:76:df:d9:1e:80:6e:46:3c:7b:fb:d9:6b:
         1a:79:b8:3e:1d:0e:7c:28:5e:0c:87:74:6b:bd:6e:71:d7:03:
         d1:20:ea:0e:32:86:10:39:bc:a1:64:a2:6e:2d:b7:02:c4:17:
         85:7b:d3:48:32:e1:8a:aa:c8:62:e1:f8:c4:4c:fe:69:73:a0:
         4c:63:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:58 2026 by rpki-client