Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
File:                     x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json)
Hash identifier:          dtdNG+pTPfsfmyb8+bP5BippaUWaAFCd3VzzF2qK16E=
Subject key identifier:   ED:2A:6A:A4:20:C4:33:5F:33:18:B1:CB:86:2C:F4:F2:09:71:CF:23
Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8
Certificate issuer:       /CN=c7a8246f70ae18e736e4e53981480d58616af2e8
Certificate serial:       01A1765E8A97EC00E4A536084E2D4B20A9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
Manifest number:          147E
Signing time:             Mon 26 Oct 2026 04:01:09 +0000
Manifest this update:     Mon 26 Oct 2026 04:01:09 +0000
Manifest next update:     Tue 27 Oct 2026 04:01:09 +0000
Files and hashes:         1: WNvdK2G6VGfovAlyzdy5qA0oBTc.roa (hash: T/wqo/8dAPv9d0Xqoe1ZG886rDX3diZQucP4pDiIbtI=)
                          2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: /KOiYwPU5X1lVsjVMo9h8x07SjcppEAovgpRpfGEUgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:5e:8a:97:ec:00:e4:a5:36:08:4e:2d:4b:20:a9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8
        Validity
            Not Before: Oct 26 04:01:09 2026 GMT
            Not After : Oct 27 04:01:09 2026 GMT
        Subject: CN=ed2a6aa420c4335f3318b1cb862cf4f20971cf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:0e:2c:1e:b4:3f:03:60:f0:0b:6f:43:f6:
                    b7:77:9f:30:68:54:6a:ce:ee:82:bd:8b:cf:1a:cc:
                    53:2c:3a:e5:b0:3f:02:5a:46:b3:f6:bc:82:f6:3a:
                    8d:60:84:b4:11:da:a9:8c:f0:fc:89:ec:35:5f:25:
                    05:1b:ee:8f:94:97:ed:d2:9c:1f:f3:cf:94:3d:37:
                    8e:49:21:32:19:31:b5:ca:34:56:2d:7e:dc:f5:eb:
                    8f:71:af:e8:93:1b:8c:ca:9d:20:e3:9b:82:ea:71:
                    ab:a9:d4:74:1f:2e:40:fd:52:d5:89:02:84:74:cc:
                    19:1d:ea:56:8b:d5:e5:44:55:99:c7:82:0a:a6:e8:
                    9c:e5:73:84:6b:c6:3d:85:44:3b:48:40:c9:76:fa:
                    a6:d6:8a:da:d2:73:14:72:c3:a5:88:f5:44:61:e6:
                    05:55:8a:30:11:80:1d:4d:f4:47:dd:d5:73:8d:37:
                    33:62:c9:94:5e:f8:d8:57:db:51:58:f2:a2:eb:b2:
                    e9:24:ce:80:c7:45:fb:56:c4:08:da:37:56:f9:a1:
                    6f:88:ec:40:c7:fc:00:f5:76:4e:0c:a5:97:c1:33:
                    56:8f:bf:4a:6c:d6:c6:bd:8c:cf:74:ab:2c:83:1c:
                    04:b9:61:4a:20:33:78:74:4f:d5:4e:4a:c8:88:b9:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2A:6A:A4:20:C4:33:5F:33:18:B1:CB:86:2C:F4:F2:09:71:CF:23
            X509v3 Authority Key Identifier:
                keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:66:71:68:f8:a4:e7:85:bd:5d:81:ef:91:be:a7:4c:72:42:
         2a:f6:2b:85:df:52:d4:88:3c:a8:10:30:b3:9a:60:24:be:3e:
         86:50:48:0e:03:67:c5:a6:ea:24:ab:da:f1:7b:45:81:d8:9d:
         12:1d:b3:89:d6:6c:ee:4f:e6:62:45:27:f8:54:8b:ac:74:84:
         36:a8:25:12:f8:b1:cf:9f:d5:2e:18:78:a4:01:52:8c:fb:85:
         36:df:35:e7:bc:8d:d7:a7:08:2a:33:02:26:c7:a3:f5:bb:84:
         df:9f:31:a0:60:17:3a:d4:1c:83:0e:51:d0:84:9b:b0:7a:7b:
         e8:52:61:11:09:f5:5a:4e:1f:8f:68:c9:32:a8:c5:bc:98:26:
         a2:9c:ae:d3:75:e5:e7:e6:50:be:3c:4a:40:2e:49:49:25:27:
         5e:da:63:39:c5:11:0f:c7:fe:dd:09:ab:2a:51:0b:73:6f:f2:
         92:a8:f3:ff:06:81:c8:63:bd:16:80:c0:4b:e0:4c:27:ba:40:
         40:91:b5:0d:a0:21:21:16:c3:a3:f7:23:05:d0:4c:be:fd:90:
         90:a2:27:7f:09:fc:c5:d6:0d:48:76:e0:40:88:f6:eb:59:49:
         f8:4d:50:1d:1b:5d:44:83:f5:12:b3:67:95:b3:b5:a1:9a:d6:
         8c:35:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:17:57 2026 by rpki-client