Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File:                     6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier:          VGM408odyEuQxx3fO/wrwyFD2+8MKfAxdhZTmb9V/5I=
Subject key identifier:   F5:D1:D6:9D:A6:5A:D7:AE:63:0B:B3:E3:AD:0D:92:A5:FB:1D:AA:DB
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       01A148734D682C0AD3FD901FCAFCB973F499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number:          0DE5
Signing time:             Sat 17 Oct 2026 06:01:18 +0000
Manifest this update:     Sat 17 Oct 2026 06:01:18 +0000
Manifest next update:     Sun 18 Oct 2026 06:01:18 +0000
Files and hashes:         1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: mEs4ARfxAP1somimnD6POa8SxBdXT2JySu0FXCdkXsI=)
                          2: BEQDOaKgH--LO7ihPK2vX0JDMls.roa (hash: tvAegj+0Iydiva9Z3FDFD+kyGp51OtWh/BIQnjeJEqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:73:4d:68:2c:0a:d3:fd:90:1f:ca:fc:b9:73:f4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Oct 17 06:01:18 2026 GMT
            Not After : Oct 18 06:01:18 2026 GMT
        Subject: CN=f5d1d69da65ad7ae630bb3e3ad0d92a5fb1daadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:3f:65:15:cf:f1:f4:e1:b0:a6:fb:29:1e:
                    b0:e7:de:59:76:81:71:33:0b:ec:ff:d1:f1:44:65:
                    5e:4d:4b:8e:bd:c0:d8:89:3c:c0:48:df:13:5b:5b:
                    1e:c9:6b:3c:44:18:ba:27:89:1c:45:00:a8:e9:71:
                    30:e4:f1:fe:ad:7a:62:08:a6:17:5a:db:a6:15:00:
                    85:d3:b9:5d:e3:fd:d4:3c:0b:58:37:11:e1:ca:d1:
                    ed:05:c5:0b:24:60:cb:82:5e:47:3b:8d:72:fa:db:
                    7c:4c:a3:88:75:c5:e2:5c:e6:49:4b:97:28:f2:7b:
                    cc:ee:13:10:69:12:1c:ed:61:3c:3b:27:b4:e5:d6:
                    a2:09:9c:c6:38:74:79:72:91:69:60:13:fb:60:a1:
                    2d:3b:dd:d1:51:c7:0e:13:24:0a:cf:f7:93:7a:63:
                    02:a1:5e:d7:04:03:f1:36:92:c1:c3:58:c9:b7:97:
                    51:ef:9c:3c:fd:0a:13:00:01:35:f1:e3:50:8c:4d:
                    a2:38:ed:32:6d:c6:eb:0e:8b:04:71:ac:6d:af:15:
                    3f:60:18:8a:a0:df:b0:b3:09:f7:45:de:2b:64:3c:
                    b7:83:86:f5:11:1a:70:d1:c5:88:e4:79:2d:f6:f9:
                    24:24:73:a2:a2:54:78:6a:3d:3d:0e:7d:b8:9c:2d:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D1:D6:9D:A6:5A:D7:AE:63:0B:B3:E3:AD:0D:92:A5:FB:1D:AA:DB
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:64:30:ee:3d:b0:c4:7d:bc:ce:9e:08:81:38:11:9c:b0:32:
         e4:7d:ad:3e:a4:48:bd:5a:ba:5b:ea:60:bf:d3:67:c6:41:98:
         ee:ee:eb:bf:b2:88:1c:d6:b8:88:fd:f4:65:7e:de:85:86:71:
         66:7e:85:24:a6:a4:18:5b:d7:c8:e0:cf:a7:d6:65:7d:b1:e0:
         af:a3:e0:86:82:89:2f:06:bb:08:6f:bf:de:46:4d:4a:de:26:
         4e:42:c5:b2:cc:e8:91:c8:d4:4f:b1:0a:a8:12:c4:21:67:0f:
         4e:3b:13:b4:12:30:c0:ec:73:98:55:c2:3c:29:02:81:9f:13:
         7e:e2:4f:6c:47:9f:83:e1:9c:6a:7b:ef:94:3b:d3:43:0a:13:
         0d:6b:1d:6e:98:5a:53:7b:62:9d:a9:ea:f1:11:be:ea:cf:2a:
         9e:c9:87:3d:58:96:64:82:87:c6:54:42:e3:63:1b:10:10:75:
         b4:62:a9:cd:60:a9:3f:b9:19:2d:e7:46:b6:bd:a7:45:3c:b4:
         65:a1:ca:57:ae:c3:1d:5a:99:b7:d1:3a:1f:57:36:14:4c:b6:
         45:2d:9d:fb:98:d7:45:d7:9c:61:db:b7:62:fa:3b:e4:1e:93:
         20:f9:9a:08:8c:92:59:d5:d5:66:c7:6f:99:70:78:be:f2:ba:
         20:cb:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:22:03 2026 by rpki-client