Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File:                     ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier:          UhHqIbZt3n8ztZ0ln0vCQdlbUFG//C2pYcK2Y9mde7U=
Subject key identifier:   66:6F:C3:86:EB:23:EB:27:70:FF:63:0B:73:D8:37:CF:49:EC:CA:67
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer:       /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial:       01A169475F51E29C382939A3B70637EC366D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number:          0492
Signing time:             Fri 23 Oct 2026 15:00:47 +0000
Manifest this update:     Fri 23 Oct 2026 15:00:47 +0000
Manifest next update:     Sat 24 Oct 2026 15:00:47 +0000
Files and hashes:         1: 1-AnQsPvquasIYQF_pbTcTs5sQ4k.roa (hash: mq1rSn55gnymBbNseBpxuFvSEdX74zl3MSqDR0xhbUI=)
                          2: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: 1NOzuBABOqlKMFAaJUSjeehHGhFb4gLNxGu2HYEnVM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:69:47:5f:51:e2:9c:38:29:39:a3:b7:06:37:ec:36:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
        Validity
            Not Before: Oct 23 15:00:47 2026 GMT
            Not After : Oct 24 15:00:47 2026 GMT
        Subject: CN=666fc386eb23eb2770ff630b73d837cf49ecca67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:44:df:0b:b5:d5:e0:2c:22:d8:1a:60:ec:
                    0e:9d:52:07:27:32:f2:72:d5:e6:8d:ba:77:50:d4:
                    16:5f:1a:46:4c:cf:1d:d2:17:d1:a7:34:d1:6b:35:
                    9b:82:aa:6a:02:0a:60:2e:ab:b3:71:56:24:d7:ee:
                    ed:9e:e9:aa:ca:06:7b:96:23:e6:ae:49:4c:7a:e3:
                    2c:4c:8d:bd:cc:dd:25:fb:e5:6f:36:9f:5d:be:e5:
                    71:b2:aa:ce:e7:3f:db:66:a9:02:da:9a:06:4a:1c:
                    49:85:65:c9:62:41:2a:40:09:37:04:98:d0:26:9f:
                    de:16:7f:7d:f8:bf:df:8a:50:db:61:e5:96:7c:6f:
                    da:09:ab:2f:d9:76:38:96:d9:95:38:94:9e:d0:f3:
                    b2:13:11:31:5f:6a:ea:f1:6b:bf:41:66:8e:44:b6:
                    c1:4b:9a:68:f5:e6:d0:92:08:71:39:b7:f5:fe:5e:
                    01:70:3f:4d:4f:24:e7:ea:ac:4a:49:fb:02:cb:63:
                    66:7b:d3:24:fc:b4:18:04:91:05:dd:23:1e:80:97:
                    a8:fa:df:46:14:d1:52:ff:d9:5d:2f:f7:85:0d:8c:
                    57:46:2d:94:52:b2:3b:bf:60:7f:ed:bd:da:8a:a0:
                    40:21:c9:3c:6d:33:1c:9e:29:bf:ab:0e:13:57:7b:
                    a6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6F:C3:86:EB:23:EB:27:70:FF:63:0B:73:D8:37:CF:49:EC:CA:67
            X509v3 Authority Key Identifier:
                keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:2d:39:4e:6d:b4:59:06:17:13:15:7d:6e:17:30:47:2d:
         9a:2c:b6:a9:9f:ec:64:c6:41:c2:da:42:39:d1:1d:48:47:0b:
         e7:47:6c:7c:7c:63:66:70:9f:42:5e:2a:8c:68:f4:86:12:91:
         39:42:ba:34:28:c0:f2:02:7c:13:0e:43:9e:dd:0d:a8:e9:eb:
         e5:c4:70:f7:08:11:8a:20:59:4c:00:4c:b2:91:58:ef:3b:62:
         46:f8:4f:22:b6:e3:ac:8a:81:5b:b1:fd:d8:c4:fb:86:a7:8e:
         d1:56:08:b6:f4:c7:67:dd:46:b7:4a:50:74:c8:c9:3b:5d:14:
         f5:2e:15:6f:40:ab:11:9a:d1:50:b4:7c:f0:69:92:1c:da:5d:
         cd:ae:a2:50:3f:01:e8:5a:f2:f8:f2:8e:96:ef:56:ec:c7:9a:
         ee:71:dd:80:45:b7:47:eb:39:54:0d:74:6f:e5:23:7f:84:c5:
         85:d1:2b:fb:ce:0e:ec:4b:56:fb:65:0c:3d:2f:36:71:d4:45:
         84:93:94:5c:f5:f9:49:fe:b6:ae:18:64:b1:8c:5e:79:93:f9:
         b5:24:98:a8:f0:e0:d6:fa:47:63:5d:04:e2:ab:39:3a:86:82:
         be:09:43:15:dc:a5:0d:94:07:7a:ef:2c:22:21:62:9b:cd:70:
         82:19:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:04:34 2026 by rpki-client