Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File:                     6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier:          lnCMrKqu3DSy7ty1338qJ+t8EeZqCOYgGDsvVi532Ew=
Subject key identifier:   9F:74:82:80:48:E9:22:ED:63:F2:61:33:1A:32:A1:66:17:E9:3D:11
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer:       /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial:       01A00101AE59EB1240A946898A768EF9F592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number:          1151
Signing time:             Fri 14 Aug 2026 16:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:22 +0000
Files and hashes:         1: 144eyzU15_7IM3-50Fn3yd-TPPE.roa (hash: CG72Nchm10xuRr8f1Bb+XAZQZQ9cILYiGnedodDRgi0=)
                          2: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: 51bV8UbFh7WT415WLIh6IZgHHJPkjPvVk+HMfjU11jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:ae:59:eb:12:40:a9:46:89:8a:76:8e:f9:f5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
        Validity
            Not Before: Aug 14 16:01:22 2026 GMT
            Not After : Aug 15 16:01:22 2026 GMT
        Subject: CN=9f74828048e922ed63f261331a32a16617e93d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:3b:f9:ef:2d:76:3b:24:f7:75:2c:0a:d6:
                    6c:36:5d:96:e2:02:f3:98:b8:76:6d:60:3b:2d:62:
                    8e:30:44:57:15:06:b4:dd:28:79:a3:2a:7f:9f:73:
                    3d:43:cc:5d:7f:ef:99:9c:fe:2d:c8:72:83:0b:fd:
                    c8:5d:44:f9:b7:e6:55:c6:74:bf:1f:10:e5:07:be:
                    d7:e8:2d:d0:c2:eb:6d:48:51:e5:90:99:de:de:23:
                    e7:29:29:cb:19:19:e1:2b:7d:d9:42:f4:7a:28:37:
                    da:91:62:87:60:83:f2:7b:06:1b:3c:13:76:6b:1f:
                    b8:18:ae:55:f6:3d:02:c6:d0:05:ff:d9:27:8b:c1:
                    93:90:c6:88:1c:c6:e1:d6:94:30:f9:3d:48:eb:67:
                    27:26:d3:8f:73:3d:58:8d:65:c7:e6:08:fb:6f:9f:
                    18:9b:5f:9e:31:b9:07:a3:5d:05:c6:b3:1f:78:9e:
                    3f:6f:ef:65:7e:5d:92:c2:2a:67:8e:1e:2e:19:a2:
                    08:5a:91:69:5c:55:88:f6:26:96:12:1e:51:dc:33:
                    ca:c0:11:12:32:27:43:0c:88:24:cd:5e:41:8b:a6:
                    e9:b7:70:36:89:b3:82:20:d4:be:3d:06:bf:7e:fd:
                    e0:03:cd:c3:16:08:3c:a8:72:85:1b:66:ad:21:30:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:74:82:80:48:E9:22:ED:63:F2:61:33:1A:32:A1:66:17:E9:3D:11
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:6a:b4:f5:77:fa:27:fb:d1:13:79:87:0d:55:65:e0:22:
         59:86:26:ad:2f:9a:e8:1e:9b:f6:5f:bb:9a:72:d9:c0:10:97:
         6c:f4:34:5f:92:64:77:01:c8:52:0e:60:45:bf:57:12:0b:59:
         e2:80:61:21:b4:19:05:54:45:a9:9e:58:5b:4c:20:fb:cb:92:
         7b:88:f5:40:2a:b0:54:d8:2f:12:30:32:21:8f:c3:91:bc:46:
         30:41:51:69:27:5a:07:9f:91:6f:d3:8e:b9:0e:4b:d2:b6:6c:
         4b:50:ac:f4:28:a9:15:8d:e3:31:62:68:84:7c:f1:19:f3:9f:
         a4:46:64:e0:b4:61:a6:35:c9:04:0b:d1:86:8b:88:ed:d7:ce:
         9b:25:ce:75:8e:07:ba:f8:ab:d8:e4:62:f1:43:11:6b:bf:49:
         2f:97:9d:64:a3:e6:ec:4b:38:fe:4a:c3:dc:56:a0:1b:88:bc:
         94:b0:96:37:59:03:2e:f6:c1:1b:cf:74:77:cb:7a:4c:bf:da:
         09:50:1d:8a:8a:61:4e:3e:97:c3:63:b9:de:3d:76:2e:15:c6:
         d2:84:2e:9d:3a:80:5f:fb:9e:27:77:31:7b:b5:d9:67:31:51:
         24:5a:34:5f:06:26:0b:1b:b8:4c:9e:ba:d2:c8:f3:05:d0:9b:
         a9:40:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:40 2026 by rpki-client