Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          gvHyWyc2RsWBItW1R6v8U/ETm5lQbDT9prps0ldstuA=
Subject key identifier:   84:11:AA:F4:4A:4B:4D:C9:FC:AE:7D:C2:D1:4E:2C:C8:AF:77:C3:B8
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       01A18E9DB14B038845662D417FB1E8A25512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          05E1
Signing time:             Fri 30 Oct 2026 21:01:01 +0000
Manifest this update:     Fri 30 Oct 2026 21:01:01 +0000
Manifest next update:     Sat 31 Oct 2026 21:01:01 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: mZ8XzLfU6y90470CPfCmk6StE6eyALgkxJ1HpS8xkwU=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:9d:b1:4b:03:88:45:66:2d:41:7f:b1:e8:a2:55:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Oct 30 21:01:01 2026 GMT
            Not After : Oct 31 21:01:01 2026 GMT
        Subject: CN=8411aaf44a4b4dc9fcae7dc2d14e2cc8af77c3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:63:05:c2:2f:66:b8:13:64:35:3e:00:52:
                    a2:49:6b:f1:79:ff:0b:77:2d:de:1b:ba:0f:07:26:
                    db:ff:22:00:dd:88:f3:24:4f:41:12:15:75:40:5d:
                    fe:3f:d9:cf:47:a9:0d:4f:37:3c:dd:51:c1:bb:a5:
                    2c:9a:cd:0e:12:be:44:7d:18:cd:4a:98:0a:b6:22:
                    0e:7b:76:93:8f:e4:79:44:00:a6:34:8f:da:ab:23:
                    eb:07:83:1a:dc:75:31:6c:af:94:65:0e:62:3f:63:
                    b6:2d:b6:f5:aa:46:1d:24:2c:9f:64:d2:5f:04:9a:
                    f9:ed:fb:48:95:f9:3e:98:dd:a2:7a:30:95:e4:b6:
                    fe:f8:15:6c:b8:1d:d7:b2:03:af:1a:92:d2:4e:e3:
                    86:16:66:90:2a:19:db:b3:03:e8:bd:f2:f5:e9:20:
                    ab:21:49:0f:14:01:a0:ce:7c:a2:b1:5a:38:e5:f4:
                    1a:b5:e9:ee:15:db:12:ae:59:0d:c6:5b:71:61:4b:
                    87:40:ff:d7:51:97:fb:32:30:7c:fe:d7:8e:97:9e:
                    4e:86:38:62:33:50:ef:6a:48:1c:04:1a:14:d4:54:
                    c1:67:95:4b:30:8b:70:af:79:c4:97:92:ed:41:1f:
                    f6:f7:9a:f6:f6:1e:89:54:8c:cf:35:2d:ca:ea:99:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:11:AA:F4:4A:4B:4D:C9:FC:AE:7D:C2:D1:4E:2C:C8:AF:77:C3:B8
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:ec:a8:d2:cc:bc:91:b3:e9:3d:51:79:65:ca:a4:06:c7:
         b6:1b:79:2a:bd:9e:c1:88:27:bf:32:19:4f:f9:16:91:b1:c8:
         de:d6:dc:00:00:30:09:8a:3f:3b:1e:d3:4d:cc:c9:c2:5f:7c:
         88:61:b4:14:97:ae:37:4a:2b:c0:e8:de:b2:91:55:9f:68:50:
         46:7e:b0:0f:16:c8:a5:f4:cf:95:0a:7d:20:31:65:47:c1:cc:
         df:c4:af:1d:08:4a:7b:ba:c3:12:46:47:fd:b4:5b:bb:0c:5f:
         98:fd:db:e9:c9:eb:04:50:c3:f3:53:fd:ec:62:12:02:cf:e3:
         87:15:15:d5:73:59:dd:a2:dd:b9:6e:01:4b:ca:26:b4:b8:df:
         28:17:09:48:46:2e:c8:88:ef:f0:35:4d:dd:23:4a:5b:ba:ed:
         c5:99:15:20:27:b7:9a:6a:af:5e:0c:a9:9b:d3:e3:9c:af:70:
         2d:ec:19:a7:2a:ad:d7:22:b7:ee:3b:64:f9:db:72:ff:1f:cd:
         dc:11:09:ad:82:55:79:88:b0:7a:31:e8:df:42:95:d8:88:f8:
         56:6c:e7:80:f9:c4:b4:b8:23:95:d0:01:b9:dc:29:aa:92:a9:
         12:3d:ea:a0:ae:c4:e8:c4:44:9a:87:17:96:28:a0:36:81:9c:
         a2:14:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:17:33 2026 by rpki-client