Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          MvmBWEL1/QrPjv44QVfbEDCHadfm8c4FQGkUiAQkUio=
Subject key identifier:   2B:08:C7:4C:0B:56:51:2D:03:E7:47:C8:73:36:2E:2E:DA:F8:42:81
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       01A13D80EB030B07F25C9EC65E475644790E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          1174
Signing time:             Thu 15 Oct 2026 03:00:21 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:21 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:21 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: ROJKtxiMClbRqqRbU5tktrGemkUPc1zv4jjo2SKNNGY=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:eb:03:0b:07:f2:5c:9e:c6:5e:47:56:44:79:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Oct 15 03:00:21 2026 GMT
            Not After : Oct 16 03:00:21 2026 GMT
        Subject: CN=2b08c74c0b56512d03e747c873362e2edaf84281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:67:48:13:fe:7c:2a:ef:66:9f:76:8c:e1:
                    08:55:b3:a4:2d:63:0a:5f:58:57:cc:64:dc:29:63:
                    09:78:17:c2:66:ec:b8:71:86:bb:82:3a:f8:4a:3e:
                    35:5b:26:d6:f8:f0:ea:1f:f9:ad:c8:b5:ac:ac:be:
                    c5:de:70:a9:ba:70:0c:27:2a:43:86:f4:02:fa:29:
                    a3:1a:6b:3d:2c:72:47:a5:a7:f5:89:1b:6f:6a:c9:
                    5f:a9:84:8c:37:ea:35:19:49:5c:c7:c7:ec:1b:01:
                    0d:f7:03:1e:fa:fb:d8:81:35:3f:c5:ba:90:7b:e7:
                    6f:7c:ae:24:af:12:b7:6f:b4:6a:eb:19:f7:ba:1f:
                    08:4d:0d:ca:1a:99:d2:3e:91:f3:6c:da:83:7c:6c:
                    94:e3:4e:a2:e0:a4:68:ec:bb:f7:2c:f1:27:56:84:
                    5f:16:4b:4a:7a:a7:d8:97:42:9b:ab:82:12:78:40:
                    8c:12:f9:21:95:05:dc:78:e0:bb:58:56:a1:f6:9f:
                    72:8d:c0:43:12:32:55:95:9d:47:4f:4b:94:7f:8b:
                    7e:21:45:14:a8:86:83:e5:31:80:29:89:58:ee:0c:
                    5c:8b:68:16:ae:79:a3:33:f1:bf:08:12:29:a5:17:
                    86:92:08:25:ed:2d:63:2a:f4:9c:b6:68:60:f9:69:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:08:C7:4C:0B:56:51:2D:03:E7:47:C8:73:36:2E:2E:DA:F8:42:81
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:ef:4f:49:1d:91:b6:4f:85:d4:58:35:87:94:59:2d:a7:
         70:15:9a:c6:a2:fb:65:a3:0c:ac:25:3e:c0:82:eb:46:17:ab:
         9e:7b:c0:3d:d1:30:43:02:85:98:7c:5b:fc:aa:81:8f:5f:65:
         11:e9:5f:f5:13:ac:b5:85:44:2d:03:2c:f9:a0:43:51:4a:01:
         1a:53:63:ca:75:54:25:db:ca:92:f3:c5:70:13:ff:cc:53:18:
         2e:2b:51:62:3f:93:2c:61:3f:f1:5a:03:14:5d:67:1f:c8:9f:
         2d:b0:e2:37:2c:9a:64:74:ed:28:36:f3:fa:39:2d:79:13:d5:
         9f:35:49:d3:57:2c:a3:fd:5a:d1:77:d5:a2:5e:30:b1:e9:51:
         e6:a9:5c:5f:9d:75:d5:0b:48:cb:e0:e9:ee:e7:35:58:f5:d7:
         5a:8c:d4:d5:d7:cf:98:f5:70:43:b8:90:c3:bd:ed:73:42:76:
         d1:94:33:7f:04:eb:a0:32:91:a9:14:55:08:09:e9:a6:35:37:
         10:d2:af:3c:21:ae:c0:5c:39:87:67:3a:e8:29:0d:b5:6c:b4:
         21:9b:f8:d4:63:f3:ef:ce:27:8d:f3:f6:18:94:e8:f7:bb:aa:
         56:7c:b9:34:32:e4:95:13:26:78:c8:14:cb:6d:96:16:40:ff:
         da:49:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:20:55 2026 by rpki-client