Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          +avGId4WpIeaRw2MI7eLmyOHXx6OZkM6gAXY1RtPdu8=
Subject key identifier:   6E:B2:A1:6E:15:77:E8:90:9D:FB:73:AB:72:12:07:A0:43:14:B7:1D
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       01A171DD32FF42ADC481ACC2ABAE9F8459D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          1AAB
Signing time:             Sun 25 Oct 2026 07:01:24 +0000
Manifest this update:     Sun 25 Oct 2026 07:01:24 +0000
Manifest next update:     Mon 26 Oct 2026 07:01:24 +0000
Files and hashes:         1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=)
                          2: TaUt_QbnT12Cj0MJDAhR-kF-PEw.roa (hash: zEveZ5gOVczcVTnDPyLcGk6kCF01sibDnDEggCPZLVo=)
                          3: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=)
                          4: kHcfHQ_Q7qYFE1i5oI94BxcWKSs.roa (hash: IqrgWq3K1h3GQVzAuQLHwLlEf6MEibclzogL4CwmRgw=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: SC4FNoMIACnWF1u4hCbd6/WqmyCGBJ4dvswET2Dan9Y=)
                          6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=)
                          7: zaMHea7sFzJLhecvORSvMX9hIVc.roa (hash: bJl+nhnvuUdcLs/tcqbGutj6qSb94yLtvZWixaa+/uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:71:dd:32:ff:42:ad:c4:81:ac:c2:ab:ae:9f:84:59:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Oct 25 07:01:24 2026 GMT
            Not After : Oct 26 07:01:24 2026 GMT
        Subject: CN=6eb2a16e1577e8909dfb73ab721207a04314b71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:ab:18:b5:2d:3f:9c:5d:20:65:e0:19:69:
                    86:f2:ca:c9:a6:ef:57:80:f0:a6:40:90:13:eb:1e:
                    7f:4b:ab:8e:38:3a:a6:4d:20:19:2f:15:10:64:29:
                    cd:a4:94:04:c5:16:2d:04:c6:80:f6:b3:a6:e2:e3:
                    17:90:ff:2e:67:4b:3b:f1:50:f2:b4:07:c4:20:01:
                    ff:02:08:fb:1d:d1:f8:02:1b:53:73:7e:e6:de:6b:
                    28:aa:58:2d:69:ba:fe:cb:1f:d0:19:c2:41:65:77:
                    a1:67:af:8f:38:31:68:c7:24:24:9c:c1:d5:50:5a:
                    3d:12:00:98:67:33:39:4b:10:c1:26:a6:88:5b:69:
                    6b:04:2b:85:03:cf:e0:6b:2c:e8:a8:1d:ad:fa:8f:
                    b3:b6:3c:e3:35:b9:bf:71:20:0e:e7:79:b0:8b:f2:
                    f7:40:4b:e5:e8:f3:40:f6:a3:29:53:ed:2e:ad:3c:
                    f6:17:ac:ec:26:b6:c5:81:0f:ad:19:40:02:8f:e8:
                    70:97:b2:ee:6b:23:b5:35:50:e9:29:53:fc:08:53:
                    5a:e8:c6:03:33:8c:0f:e1:0b:72:91:da:05:37:75:
                    d9:60:a1:56:3d:1c:ed:46:32:76:ac:04:ea:15:36:
                    03:60:66:16:b0:a1:a4:be:40:42:2d:ad:8c:11:a2:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:A1:6E:15:77:E8:90:9D:FB:73:AB:72:12:07:A0:43:14:B7:1D
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:c5:0c:05:12:d2:6d:93:3a:d1:4f:85:86:29:b9:63:80:
         30:2e:d5:3b:de:7e:38:08:8c:8f:5f:7b:7a:03:74:3d:9d:5d:
         4d:0a:2e:ca:fd:0f:46:54:16:10:d8:95:98:d8:4a:f5:70:e4:
         e6:30:81:46:b1:cf:ad:a2:ee:c6:49:61:50:87:c3:d8:34:22:
         e6:b0:bb:2a:f3:ad:33:51:9f:37:6b:92:3d:6c:f9:48:a5:41:
         0f:15:19:d4:8a:10:70:11:c9:9c:b0:6f:db:22:e3:b1:05:31:
         2c:fe:02:ba:14:11:63:15:16:74:3e:95:cd:f2:68:38:75:b1:
         bb:2f:8c:1c:38:9b:15:52:d9:46:93:ea:e8:f9:2b:e6:a7:63:
         93:6c:6e:94:c2:f2:72:59:09:5e:ff:34:47:f8:f6:8f:74:60:
         ed:1f:35:85:5c:af:72:a6:f1:8d:34:7e:00:dd:10:d5:34:ec:
         32:fe:d4:a8:e0:e4:77:1e:62:f0:8a:d7:6b:0a:17:b9:4b:d3:
         cf:6d:47:48:0f:59:17:f4:aa:de:3f:a3:da:28:c7:e2:09:c7:
         c3:34:e7:52:e7:71:f6:94:bd:45:2d:73:31:7e:37:c5:91:d3:
         5f:bd:04:28:3b:0c:74:12:3f:03:4e:4f:13:5b:5d:76:6a:b7:
         43:8e:ef:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:25:04 2026 by rpki-client