Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          nbTlI+YMRRCrXMIVcs4ofD1QXN3ywjs2YD8upVi7pnU=
Subject key identifier:   7D:EC:60:CB:BE:51:AB:18:AC:7E:17:51:6B:61:E0:8B:E5:9E:F2:3E
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       01A17213CD7237229D084EC8F0487039218F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          09F8
Signing time:             Sun 25 Oct 2026 08:01:02 +0000
Manifest this update:     Sun 25 Oct 2026 08:01:02 +0000
Manifest next update:     Mon 26 Oct 2026 08:01:02 +0000
Files and hashes:         1: 8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa (hash: CzDXuVFvOpgIjJyo8JK5OTAHeeCyIkIfuyxNLXuiD4w=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: 40bgpTI+cixkSZV/JvSAjGEXrffNVMkx6ZHy39Wt6q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:72:13:cd:72:37:22:9d:08:4e:c8:f0:48:70:39:21:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Oct 25 08:01:02 2026 GMT
            Not After : Oct 26 08:01:02 2026 GMT
        Subject: CN=7dec60cbbe51ab18ac7e17516b61e08be59ef23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ad:41:06:5c:e2:3e:68:29:08:6d:77:51:1b:
                    a3:07:8d:62:7a:9e:59:a0:8d:98:4e:57:df:c9:50:
                    97:f1:98:4c:ac:17:54:a5:b1:f7:17:dc:59:e5:83:
                    db:aa:54:57:5b:0f:a6:e7:27:58:e6:92:c5:ee:b5:
                    05:25:c9:4e:85:6d:22:c3:f0:c0:a1:78:44:72:1e:
                    4c:d5:1e:3e:5d:6e:d3:7d:55:0d:b5:8f:61:69:e6:
                    9e:92:44:00:67:58:de:b0:18:c7:77:47:de:29:e0:
                    d1:3f:30:f9:59:33:d9:d4:a0:44:09:df:f7:06:e6:
                    cf:07:3c:64:28:79:32:d3:21:9d:e3:62:0e:ac:14:
                    7e:66:eb:0a:69:02:04:ff:62:d7:34:69:dc:4f:b5:
                    91:00:d5:48:5d:c3:84:ee:3e:7b:79:5a:78:be:b3:
                    29:9e:54:e9:5f:c4:01:d6:bd:af:c2:e9:6c:79:d4:
                    72:a3:45:9e:b0:62:fd:f3:d2:aa:1a:1a:74:87:6b:
                    0f:2d:3b:2a:4e:e6:e2:80:29:23:4a:96:ea:38:36:
                    ce:b5:62:f6:ac:6f:9f:a1:42:09:99:7a:9d:f4:27:
                    22:d8:ee:d4:21:76:bc:0f:e1:f3:7c:6f:b5:91:e6:
                    02:0b:5e:4c:6f:db:1d:2c:7e:ac:df:98:e0:64:d5:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EC:60:CB:BE:51:AB:18:AC:7E:17:51:6B:61:E0:8B:E5:9E:F2:3E
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:09:36:ab:47:c3:4d:4d:18:bf:8f:b8:75:e7:a3:4e:6b:
         78:bf:31:0e:0c:31:77:5b:12:b4:59:77:aa:34:b8:1f:20:64:
         75:6c:76:3f:db:5d:bb:e1:e0:3f:47:56:78:fc:89:3b:8f:5d:
         46:23:0d:53:b8:a6:ad:c5:17:42:e9:47:32:3e:e7:fc:b1:de:
         ae:10:e8:0c:a9:29:0a:1c:bf:1b:c7:bb:95:d4:e0:fe:ab:d1:
         bb:57:74:8a:64:13:9c:4c:02:77:13:21:c0:3b:30:1e:46:cb:
         a9:db:ac:72:bd:40:d0:70:6a:5e:63:7a:3f:1d:50:de:26:5c:
         35:8d:a0:64:24:20:5c:42:a8:ef:57:c0:d2:b6:8a:77:9e:49:
         ea:ee:fb:7c:94:54:8f:72:21:f5:01:e5:74:35:3a:9c:9f:a2:
         45:b5:3d:cb:1e:d4:4a:2d:cf:de:21:7e:a6:7e:6f:0b:1e:a9:
         75:f1:01:af:1e:dd:6f:93:ff:22:c3:46:10:26:cd:98:9b:4a:
         64:9c:26:e2:d3:ab:a4:ea:62:c9:69:55:80:15:4d:69:37:a4:
         44:72:96:1b:6c:c2:79:9e:99:1a:aa:de:fd:f5:c0:08:ef:6e:
         b5:6c:5a:35:ff:6f:fd:ba:ee:7c:c0:79:de:12:ed:6b:ec:25:
         cf:6f:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:20:11 2026 by rpki-client