Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          YZEVednuce+9Eh4nJVuI8UuLZ/+F3f5H7uvOYxxOTNU=
Subject key identifier:   86:36:4F:CF:EF:41:9F:B2:89:27:53:69:AE:F3:E2:16:EC:DC:92:F0
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       01A18006E4E58794075C70BDFE6C60414FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          1AC6
Signing time:             Wed 28 Oct 2026 01:01:37 +0000
Manifest this update:     Wed 28 Oct 2026 01:01:37 +0000
Manifest next update:     Thu 29 Oct 2026 01:01:37 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: k9oWxWjw/jg/dvoakUywjtDj8YVqeFuh8Rwj0aCuKzw=)
                          2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:06:e4:e5:87:94:07:5c:70:bd:fe:6c:60:41:4f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: Oct 28 01:01:37 2026 GMT
            Not After : Oct 29 01:01:37 2026 GMT
        Subject: CN=86364fcfef419fb289275369aef3e216ecdc92f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:1e:06:73:e5:bf:0a:b0:12:57:4b:b5:12:
                    cb:03:19:f2:2e:a7:31:3b:75:0e:7f:c8:fd:81:50:
                    70:52:b0:18:f2:84:52:7c:56:42:5c:c5:51:c5:9b:
                    c8:70:ec:98:29:ec:1f:98:a5:d2:9b:aa:01:88:fd:
                    86:bc:66:d7:71:bc:67:ef:74:18:56:f4:8d:b6:da:
                    e4:6f:d3:e7:95:aa:89:4e:d1:c0:b7:cf:8f:c6:7d:
                    63:e8:87:e3:52:48:2b:92:9f:00:28:d0:dd:ce:9a:
                    22:4e:07:a4:f3:bf:9c:d2:83:5e:00:c6:80:55:bd:
                    ac:12:b1:f2:6c:ee:9b:64:5e:eb:db:ab:77:51:7d:
                    b2:91:b4:87:25:29:34:85:f7:f1:e4:40:8a:5c:ad:
                    0a:b6:97:9f:d9:30:63:0a:63:c2:bd:c3:89:3a:9e:
                    86:54:ce:ec:39:98:de:c1:db:fb:b2:0d:fd:46:6b:
                    a6:df:4c:de:0d:5e:26:16:a1:96:ff:c3:bd:64:bb:
                    f1:93:71:67:ef:e9:8b:5c:dd:be:e2:74:45:98:ca:
                    34:33:b6:60:5d:e9:ca:a0:89:9e:2c:ac:28:c9:41:
                    29:36:d3:2c:86:64:96:0b:33:77:fb:2f:32:68:07:
                    a9:12:ef:a8:ac:18:6f:f0:63:d4:0c:15:8a:7a:41:
                    ed:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:36:4F:CF:EF:41:9F:B2:89:27:53:69:AE:F3:E2:16:EC:DC:92:F0
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:26:c4:9e:5a:53:c8:ab:9c:e4:df:32:13:0a:f9:7f:6a:
         0b:97:8e:04:fa:f8:2b:80:20:0f:b5:28:09:e0:f8:da:09:be:
         10:ba:59:0d:79:6a:b4:35:25:57:fc:17:38:e9:34:db:9f:33:
         ea:68:3c:d0:de:f9:86:3e:63:2e:c8:43:8c:cd:e2:5b:70:bc:
         75:a4:85:ac:12:32:07:b0:74:63:fd:15:96:26:d6:81:6e:8a:
         ab:4d:5d:60:e7:9c:0a:8c:81:e2:01:01:58:10:07:38:b0:52:
         2a:fc:d0:b1:0c:cf:70:e8:e7:3b:cc:f2:ae:b8:09:07:52:5f:
         dc:d8:d8:a6:f1:16:75:1d:7c:c6:a2:90:37:79:c4:54:0a:19:
         c0:b5:07:6e:10:3d:3e:b5:8d:4f:8e:6e:2f:9d:f2:51:75:80:
         68:50:dc:bf:7e:0d:c7:d0:fc:64:b0:9f:f2:69:55:13:11:4d:
         57:73:6f:33:22:f2:19:f6:54:0e:70:f7:00:6f:82:99:99:83:
         78:f3:64:ca:10:b7:5a:1e:5d:ce:08:b3:d2:de:a8:73:d0:12:
         8f:4b:47:bc:9f:2a:d4:d9:c4:27:f0:80:64:4d:a7:9e:d5:89:
         4f:52:26:d8:95:e0:43:9c:42:ed:58:2d:ac:0d:aa:ae:d5:85:
         d4:1e:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:44:39 2026 by rpki-client