Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          NSSdoPGdZtifH7/GpsDhkSDg8IL3z39Ng+ca3RFcxgc=
Subject key identifier:   DE:B9:01:66:DF:8C:78:77:E6:6D:E6:84:D1:27:B3:9F:83:96:3C:0A
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       01A13D818BC07AB0C00B75CE6D8C31BEEBD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 03:01:02 +0000
Manifest this update:     Thu 15 Oct 2026 03:01:02 +0000
Manifest next update:     Fri 16 Oct 2026 03:01:02 +0000
Files and hashes:         1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
                          2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: J/XlIx3whSFUQrePeehvnGQZiagHbqGKSQdU1xowoyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:8b:c0:7a:b0:c0:0b:75:ce:6d:8c:31:be:eb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Oct 15 03:01:02 2026 GMT
            Not After : Oct 16 03:01:02 2026 GMT
        Subject: CN=deb90166df8c7877e66de684d127b39f83963c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:20:80:ed:06:26:12:73:dc:1a:06:8e:29:
                    5a:f8:74:95:81:71:30:bd:16:1b:0f:3f:6c:7c:de:
                    b0:a9:62:6a:a9:f4:95:18:e5:80:fe:cd:4b:a5:fa:
                    c4:ae:79:92:6d:0f:27:03:3b:58:a2:93:ac:b5:dd:
                    ee:9b:ab:da:66:fa:9b:53:8b:81:de:57:e2:24:2f:
                    4b:11:53:bf:6d:19:94:ea:05:92:fe:26:75:c5:7b:
                    d0:cd:d3:09:54:5d:c7:90:3a:25:43:1c:07:0d:c1:
                    03:7c:f8:8d:2b:0f:01:54:e4:56:08:56:25:56:0c:
                    3a:8c:da:fe:93:d1:f8:c7:4c:ac:f4:05:17:3c:7b:
                    6b:b3:fd:a3:a7:dc:61:fc:34:e7:89:e8:a0:a9:bd:
                    1d:bd:35:28:45:c5:23:e6:0f:9d:48:34:b2:5e:12:
                    b5:a8:b4:06:f8:6f:25:26:0d:49:1c:0d:c5:db:35:
                    f7:4f:e4:ca:5e:b2:7b:33:9f:91:73:8c:28:64:af:
                    64:d3:8b:81:c2:52:32:9c:0e:fc:b4:0c:60:c0:0b:
                    2e:16:a9:ce:29:c5:f4:00:7a:60:c9:68:5e:b9:e8:
                    2b:eb:ae:cd:ec:fc:7c:42:dc:5e:11:dd:da:24:38:
                    77:fa:39:00:4c:9b:64:e1:3d:9e:e5:4f:89:40:2e:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B9:01:66:DF:8C:78:77:E6:6D:E6:84:D1:27:B3:9F:83:96:3C:0A
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7d:13:88:85:aa:42:85:b8:6b:cd:ff:25:f1:4c:34:e7:65:
         0e:f1:c5:b2:30:17:d7:27:71:1c:a0:cf:74:5d:28:ca:f8:41:
         08:e2:50:80:b9:b4:7b:0b:8a:76:55:ee:8c:e6:3c:58:8e:cf:
         7a:fb:84:73:f8:ba:bb:f5:a7:9b:a9:df:12:d0:f5:d5:6f:c4:
         cb:2b:1d:55:94:fa:f7:49:d8:bf:83:fa:c0:c1:89:49:8f:f9:
         3b:66:5b:ea:fc:3c:96:8e:13:ec:64:67:14:b4:7f:d7:c0:c1:
         b6:80:ba:13:ab:14:6e:5f:d3:1d:fb:93:7d:47:b8:ff:a7:5d:
         27:62:0c:a6:7d:63:7b:9d:f3:17:92:33:01:87:f0:e2:5c:19:
         cb:36:e6:07:ad:59:93:26:bb:6a:51:e7:07:af:91:59:b9:f3:
         d5:26:e5:70:4f:0b:39:86:8f:08:a8:da:c5:54:fc:2a:f7:6f:
         33:1b:29:64:96:cc:d8:d9:21:c3:d0:d2:e7:69:c8:ce:86:c3:
         17:a9:a6:66:87:b9:c8:e2:72:76:50:7e:c2:2f:84:a6:6d:25:
         fe:5f:f7:8a:60:28:97:7c:51:31:a3:58:37:d6:80:5b:1b:38:
         40:58:c0:94:33:4c:6b:4d:27:32:1a:af:94:fa:8c:6c:90:60:
         b5:c7:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:38:06 2026 by rpki-client