Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          sEFKh4zYdPYux4XAViMOnRGg3s3ETk07ChOz1EQPBZU=
Subject key identifier:   B6:C5:22:58:B7:CF:4B:7C:83:0E:A0:A3:6B:1D:61:33:EA:86:EB:0A
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       01A16E002D37BB3B4D011A7CE0A5B4C4EB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          120E
Signing time:             Sat 24 Oct 2026 13:01:07 +0000
Manifest this update:     Sat 24 Oct 2026 13:01:07 +0000
Manifest next update:     Sun 25 Oct 2026 13:01:07 +0000
Files and hashes:         1: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (hash: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY=)
                          2: C-g37o81zdQC9_zopBXPpyRUrjU.roa (hash: 2ZRtUbahVnYhC9Kf/nNbZfgsN5/nT4ars1+NMI+6Czk=)
                          3: W5VTroF4zcGApX3Giz89KR2_wWg.roa (hash: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk=)
                          4: cWuGeJ6gM-3ve4HkKVmEZUSc7S8.roa (hash: P0kghOMwSQUMU4gKXJ4ASB+7Zwvt3QGVEmH46AdBNrw=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: WGGUtu3fLgo+rabfsJBT67D6s2BGCCY4fwOls5qMixk=)
                          6: mI1bOyES1SUvd3jXkMpsFL9UDNs.roa (hash: G8pWjV9esRmq6YgXU83pAW+6b6j1UXEhnMOTBHJgNSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:00:2d:37:bb:3b:4d:01:1a:7c:e0:a5:b4:c4:eb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Oct 24 13:01:07 2026 GMT
            Not After : Oct 25 13:01:07 2026 GMT
        Subject: CN=b6c52258b7cf4b7c830ea0a36b1d6133ea86eb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:e2:c6:0c:dc:ad:bd:e2:72:eb:98:f1:02:
                    b7:5a:22:8a:bb:1b:3e:62:88:21:d1:6d:e9:75:ac:
                    49:f6:47:69:3d:d8:e0:bf:2b:8e:05:9b:cb:af:bf:
                    62:47:72:6d:6f:14:65:5f:46:35:2a:0d:aa:78:03:
                    24:19:a1:87:95:22:7a:5e:4c:e0:43:67:52:96:a8:
                    29:a1:a3:e9:1f:9a:5f:11:c1:45:7c:f7:d9:1d:0d:
                    d4:e3:da:bc:a2:53:7b:07:fd:da:f6:d0:f8:50:1c:
                    18:49:6e:af:0b:49:e2:3e:10:68:6b:b7:38:d5:c5:
                    91:2a:9c:84:e4:e2:8c:a9:66:66:18:42:07:9c:2d:
                    08:db:ac:ea:3b:89:21:7f:34:2c:85:5b:1b:6c:37:
                    e4:4c:64:98:6f:b6:85:ea:20:36:5b:70:70:ef:fb:
                    af:0c:25:ec:94:fa:77:77:f1:c3:b7:52:e4:fa:97:
                    86:38:19:b0:96:9a:6a:e5:9f:66:cf:43:59:fb:e5:
                    c6:6c:39:dc:fe:a7:70:88:bf:e2:f9:e7:39:ad:86:
                    ac:d2:6c:a2:e5:06:8a:5e:c8:41:61:42:ce:83:01:
                    b4:6e:88:4f:2c:20:45:d5:f9:7b:08:7c:c4:1a:e0:
                    ad:73:82:27:b0:25:1b:db:5d:1f:11:2a:0c:68:74:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:22:58:B7:CF:4B:7C:83:0E:A0:A3:6B:1D:61:33:EA:86:EB:0A
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:00:62:e1:e0:e2:b1:db:3f:04:00:c9:04:8f:75:51:cb:
         0f:c0:78:f1:de:69:ef:b2:f6:f6:e4:06:b8:bf:50:c8:3b:18:
         42:e0:9b:5d:3d:f3:ac:bf:3d:0b:d6:c0:17:96:56:cf:bc:b1:
         72:09:bb:ab:e3:39:04:a0:43:52:83:01:13:49:f1:bf:c5:a0:
         1a:d7:d1:8c:ac:bd:57:96:64:91:13:10:99:0c:ac:cb:4e:00:
         5d:c5:37:8d:1a:ca:d9:ab:e9:4c:7d:5d:b1:ef:33:c6:81:5e:
         e2:bd:b2:84:cd:0f:4f:df:9f:08:5a:3d:c2:4b:a0:ea:1f:54:
         02:35:eb:d7:56:90:ed:40:e4:29:91:ce:c5:28:e5:ae:8a:eb:
         6c:d9:2d:fd:f7:a8:91:f0:21:ca:d2:b3:87:f7:39:94:c3:9c:
         7b:7f:40:61:96:b4:45:0d:95:3e:20:c4:13:5a:69:18:b7:7a:
         d1:75:2c:21:83:76:50:f2:75:8e:69:c0:af:16:a6:99:d7:36:
         69:ac:6d:b1:8a:e9:e9:24:38:15:c7:2a:fe:30:aa:7e:88:55:
         64:93:f3:2b:2e:5d:d6:16:6e:3d:14:7f:3a:40:72:70:5f:87:
         95:8d:b8:79:ef:42:ea:6f:5c:ff:48:0f:17:f3:6f:73:d6:16:
         77:ff:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:49:13 2026 by rpki-client