Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File:                     v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier:          +fFFK6RxTqk8i9ePXIBKb8JNra8GIimkjrnuSNeH7mM=
Subject key identifier:   90:55:58:ED:52:D6:AD:B0:92:2D:AC:A6:6D:83:99:D4:82:AE:0E:24
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer:       /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial:       01A1174F662B717E764CC2EF5CEED6C0D960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number:          1241
Signing time:             Wed 07 Oct 2026 17:00:41 +0000
Manifest this update:     Wed 07 Oct 2026 17:00:41 +0000
Manifest next update:     Thu 08 Oct 2026 17:00:41 +0000
Files and hashes:         1: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (hash: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk=)
                          2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: H6zAjzbPnH0DlKANTQ2BpuU6xAS38prsgQl/olBS3yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:4f:66:2b:71:7e:76:4c:c2:ef:5c:ee:d6:c0:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
        Validity
            Not Before: Oct  7 17:00:41 2026 GMT
            Not After : Oct  8 17:00:41 2026 GMT
        Subject: CN=905558ed52d6adb0922daca66d8399d482ae0e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:dc:20:a8:47:a1:97:73:a4:2e:d2:6e:a4:
                    57:ed:0f:32:ba:f8:9f:3f:3e:39:5b:ab:6f:8f:29:
                    31:bf:33:a0:39:ef:63:63:83:7e:f1:d3:68:b9:3c:
                    d3:d9:69:05:2c:e2:6a:48:af:23:43:c1:94:6c:72:
                    49:8c:89:cb:61:14:ac:5e:1f:b4:61:d7:e8:d7:c9:
                    b8:ef:86:a1:5f:3c:7d:6d:ae:34:b6:70:f0:ee:48:
                    ba:47:9d:0e:01:9e:e5:cd:56:b2:da:56:b5:de:90:
                    c0:69:1e:4c:d5:22:3d:65:e8:70:62:b0:01:aa:9e:
                    30:fd:34:05:22:b8:b9:9c:fe:3b:e7:5f:cb:30:8b:
                    98:71:0e:ee:fb:5c:90:8f:2b:63:89:44:3e:06:44:
                    d8:52:3b:50:89:69:5b:28:07:51:2d:c9:4e:b1:05:
                    62:7a:1c:97:ef:b6:98:df:46:02:af:6d:92:b4:56:
                    50:ca:5b:3d:74:e3:b8:fb:59:b7:64:32:b5:a6:1e:
                    e2:3f:3d:d8:b7:38:13:f5:08:da:fb:d0:db:07:80:
                    4e:89:16:e9:8c:2b:d6:7d:1e:6b:5b:26:46:9b:7b:
                    34:48:8f:12:bb:92:c9:c4:89:0e:20:eb:fa:e5:57:
                    d9:f2:d9:f4:2d:70:8a:a0:4b:9b:da:fe:fd:55:ff:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:55:58:ED:52:D6:AD:B0:92:2D:AC:A6:6D:83:99:D4:82:AE:0E:24
            X509v3 Authority Key Identifier:
                keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2b:c7:dd:83:1b:c2:c5:df:a3:45:31:67:b5:40:6d:2c:7b:
         35:60:72:14:b0:d9:4d:d1:1c:3d:47:0d:e8:7c:0f:9f:c4:7a:
         33:2c:06:c7:5f:9b:cb:38:5f:82:06:9f:d0:c3:64:96:20:77:
         7d:4d:fc:dd:02:a4:88:18:a3:5f:37:18:27:0e:99:19:e3:4d:
         63:9b:bf:74:19:5a:6d:f4:43:0a:bc:c8:8b:60:96:9c:cc:73:
         a3:61:03:c6:bf:78:0a:49:e2:0b:b4:05:ab:bb:62:6d:93:f5:
         6c:56:ab:01:ca:25:e0:f2:a1:7b:fd:60:2e:c9:f5:8f:90:b8:
         2c:e1:55:4a:0f:3e:a9:9c:1a:93:6e:6b:9e:7d:cb:a6:dc:f1:
         40:93:aa:58:42:68:7e:9b:c5:4d:6e:b3:81:12:fe:57:5b:09:
         49:41:67:c7:1a:df:16:2b:c9:44:41:d4:48:88:dc:28:94:f1:
         8f:d3:20:fd:d1:21:1c:c1:ae:a7:48:a4:fb:30:3b:c5:94:d8:
         74:87:e3:02:5f:37:25:fb:80:34:f7:6e:a4:d0:79:b2:92:0b:
         8a:b4:7a:a9:ba:c4:ce:df:05:ab:16:89:54:1a:02:68:77:bf:
         f1:e3:7b:3f:6d:12:42:fd:bc:3d:e5:b0:70:2d:71:89:8b:1d:
         ff:07:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:11:45 2026 by rpki-client