Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
File:                     6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft (raw, json)
Hash identifier:          CtIhFMVEsyDXoD7HTurYgeAQnVJ9IG8ROhPWAdR6zFA=
Subject key identifier:   B5:88:18:19:32:32:B5:83:6C:76:A7:F7:0C:1B:7A:F1:A3:F4:C5:4A
Authority key identifier: E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A
Certificate issuer:       /CN=e9c4cd4118ddffee56e885663795547a1de3f98a
Certificate serial:       01A13E949C8D2A8823610AEFAE30BC94ED21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 08:01:29 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:29 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:29 +0000
Files and hashes:         1: 48KczKek8aoXkkGGAiKbD1eo4WU.roa (hash: loadLRnEP8VHHMhmgpPfKckxOmQsukbGfqVoesMRnMs=)
                          2: 6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl (hash: +qHGIIy+b1KtG52Lqs8nsQFu8OW9Oboh/mPXzngr56U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:9c:8d:2a:88:23:61:0a:ef:ae:30:bc:94:ed:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c4cd4118ddffee56e885663795547a1de3f98a
        Validity
            Not Before: Oct 15 08:01:29 2026 GMT
            Not After : Oct 16 08:01:29 2026 GMT
        Subject: CN=b58818193232b5836c76a7f70c1b7af1a3f4c54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:3b:83:77:ce:7a:e2:87:29:a8:fb:f7:d3:
                    2c:36:e9:a3:4a:50:c9:24:08:98:39:e1:94:49:12:
                    6c:f4:ad:18:de:17:b9:0c:39:94:4e:f4:4a:bd:0d:
                    ae:34:26:1f:8c:eb:f0:17:f3:62:1c:54:32:ad:d7:
                    57:12:29:7e:c3:c9:89:c3:c9:fa:e8:06:02:49:2f:
                    fe:0f:ec:7c:6a:07:06:7a:e6:b5:a5:4c:be:e4:cb:
                    48:b2:c6:78:a8:07:27:33:66:ed:a3:8c:ab:49:9c:
                    fd:58:bc:f4:12:e7:e1:d5:72:70:7f:54:c3:3f:7a:
                    ce:ab:2d:b7:91:60:0f:4c:92:d2:c2:78:05:14:45:
                    ba:f3:d6:73:dd:f2:33:bb:31:4f:7b:b5:a3:7e:e2:
                    3d:14:22:f1:bb:e0:f3:90:7d:04:2e:03:0a:c0:24:
                    b1:b4:89:74:e3:a3:74:64:f0:9c:31:fb:b5:79:d0:
                    ac:8d:d9:39:b0:9c:98:e2:d2:b3:96:c8:61:b9:e1:
                    4c:ba:d5:af:ac:d3:ee:d6:c0:5a:a5:e7:c7:9a:16:
                    51:c0:4b:81:c1:a2:b6:f7:c2:24:03:f0:eb:b2:20:
                    4d:41:92:2c:d3:92:48:42:ed:09:01:ff:4e:d5:3d:
                    ec:7e:55:c6:ab:eb:b0:b7:64:24:16:f5:9a:1e:cf:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:88:18:19:32:32:B5:83:6C:76:A7:F7:0C:1B:7A:F1:A3:F4:C5:4A
            X509v3 Authority Key Identifier:
                keyid:E9:C4:CD:41:18:DD:FF:EE:56:E8:85:66:37:95:54:7A:1D:E3:F9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3f7da4-3631-4b03-ba84-6cb2d3b4437c/1/6cTNQRjd_-5W6IVmN5VUeh3j-Yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:88:e7:d8:49:0a:51:58:66:4e:63:63:cc:16:c9:37:46:
         80:75:69:f1:c2:dd:13:e9:fd:77:30:4d:f3:6d:29:2b:98:0e:
         bc:4b:02:54:26:62:54:a1:36:da:41:92:94:15:3b:33:dd:f3:
         07:80:b1:c1:e3:2e:4e:05:50:28:19:fd:7f:4a:1c:0a:0b:d1:
         b0:7d:6c:1b:fc:98:c4:50:7e:33:cc:43:c8:71:c3:cf:c7:b6:
         97:98:13:96:17:f5:77:49:74:ee:99:4c:88:f6:46:b7:ef:7a:
         f4:33:94:0c:11:fa:a3:4f:4d:76:6c:5f:61:a7:6a:52:a3:d9:
         5b:3a:28:ea:16:61:f3:2b:c8:2d:4d:20:0c:f0:5d:7e:cc:82:
         b6:65:49:34:e7:d4:1a:04:fb:74:42:36:67:59:d9:98:11:ed:
         8e:06:02:a9:78:3e:9b:11:fe:38:0b:c3:74:04:33:a4:79:46:
         45:eb:a0:4c:41:9d:07:97:76:3b:34:cc:09:8c:57:40:8a:e4:
         7e:ae:3a:a3:96:a2:7a:af:d6:69:4d:47:eb:d5:a7:20:b0:c8:
         99:88:99:de:04:4d:b3:57:08:e7:6c:6c:9c:80:4d:95:64:42:
         ed:11:9f:20:be:ce:66:d1:57:9d:1d:33:a2:b1:58:6e:96:33:
         67:41:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:45 2026 by rpki-client