Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
File:                     6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft (raw, json)
Hash identifier:          EJ+B4Ipam2PRmyQGKfgGnzZP4xrdOS0eqOKfSbXO4m4=
Subject key identifier:   ED:9E:B8:0D:18:79:9E:25:91:F0:D3:13:66:BF:86:A9:EA:BB:AF:32
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Certificate issuer:       /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial:       01A184884A5F5886E612EF121E41D3EC037C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
Manifest number:          0A12
Signing time:             Wed 28 Oct 2026 22:01:26 +0000
Manifest this update:     Wed 28 Oct 2026 22:01:26 +0000
Manifest next update:     Thu 29 Oct 2026 22:01:26 +0000
Files and hashes:         1: 6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl (hash: +qKpL2mLwTzhqkT7aRrLJKki2VXdWzX10codFi61cX4=)
                          2: evJpn_uhP0CfvPL00DkyDflggJI.roa (hash: bV9kL+d96gYalZ7ome+Dj8zLnrOvtqAnogknD9DHj3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:88:4a:5f:58:86:e6:12:ef:12:1e:41:d3:ec:03:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
        Validity
            Not Before: Oct 28 22:01:26 2026 GMT
            Not After : Oct 29 22:01:26 2026 GMT
        Subject: CN=ed9eb80d18799e2591f0d31366bf86a9eabbaf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:ea:8a:ce:e6:3c:16:8e:75:c3:e8:8a:da:
                    c5:1a:d7:74:36:85:b8:31:a3:ca:ca:73:74:0d:ab:
                    b5:35:a1:1a:90:0a:2b:2b:00:4c:cb:62:9e:2b:17:
                    63:0b:5f:01:fa:8e:8e:7b:cb:9f:a6:3f:8a:cc:bd:
                    44:84:58:d1:09:50:57:c5:f8:85:02:64:95:31:d0:
                    4b:8f:c8:73:3f:18:88:f2:19:09:73:7e:d5:20:96:
                    77:84:04:87:4e:a0:1c:b5:42:a5:a1:73:6a:5a:e5:
                    7c:d9:60:67:cb:35:e1:12:c4:d1:6b:d1:e8:47:24:
                    d3:f7:9b:87:3d:b6:13:89:4a:89:c8:9e:c5:c7:69:
                    7e:7c:bc:92:77:47:69:d4:e9:c2:d5:bf:84:ee:7e:
                    20:ef:51:63:a0:6a:2d:0f:0a:50:4f:4e:f9:c1:70:
                    07:24:a1:5c:b7:64:c7:62:d8:52:06:e7:73:9d:2f:
                    79:c5:0d:c9:79:c0:02:07:6c:c4:4d:95:ac:5d:d3:
                    44:38:a4:7e:0a:78:59:d2:7a:f1:d3:47:93:06:ef:
                    c4:47:e3:11:48:d1:f7:f6:90:a9:10:cf:9f:34:db:
                    87:ce:39:fb:08:83:11:b6:03:24:7b:12:21:b3:dd:
                    8c:b3:db:c9:96:36:b2:97:46:17:b1:e4:dc:12:50:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9E:B8:0D:18:79:9E:25:91:F0:D3:13:66:BF:86:A9:EA:BB:AF:32
            X509v3 Authority Key Identifier:
                keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:87:50:fd:de:e8:05:ed:75:33:9b:96:a5:4a:73:bc:39:
         61:dc:46:83:95:89:ab:2e:62:d2:f8:8e:9e:a0:65:89:63:6d:
         c2:05:69:0e:6d:27:6c:01:ea:fa:09:97:d3:b5:36:17:99:8b:
         bb:d8:3e:7d:d1:5a:f9:35:12:91:93:a6:38:55:67:56:90:1f:
         df:b8:5c:a5:3a:48:34:01:ef:51:41:0b:03:d7:dd:64:a3:7a:
         ce:ca:24:85:44:24:b5:f6:1e:e0:e0:10:a4:ad:a5:35:74:b1:
         44:62:5a:13:98:c2:c3:8c:7b:35:e0:7e:e4:93:c9:cc:1b:40:
         2a:7e:e8:5f:13:6d:72:59:94:be:a7:8a:60:09:d4:f3:cf:af:
         0d:70:b6:5a:d8:bd:6e:96:cf:f7:c9:46:fe:58:1f:be:69:68:
         2d:0c:05:cc:56:58:7a:90:cd:18:9d:ea:fb:ba:24:bf:f4:bd:
         28:72:6c:e2:3b:6d:3f:12:03:8a:a0:e3:c0:b2:58:b3:31:30:
         f0:a4:5c:b0:1c:b5:06:e5:a8:e4:41:bd:fd:38:13:6d:bc:c6:
         4e:e9:ed:25:c3:80:54:3c:2a:f2:e6:5f:f6:3b:17:df:fe:bc:
         56:c1:e8:90:7f:7c:19:79:f1:a2:37:49:09:8b:d9:78:6d:1b:
         e8:a7:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:04:53 2026 by rpki-client