Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
File:                     6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft (raw, json)
Hash identifier:          6HqIEpxlINkniWg9PP5oClF+DYM1Mb3mxXNtHTbxil4=
Subject key identifier:   A4:0B:FF:B7:6D:E6:E3:6C:97:44:28:87:D8:EA:D0:3C:47:4A:BF:C1
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Certificate issuer:       /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial:       01A13ECBC8A85FE474FAD9D6577AE3613E21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
Manifest number:          0842
Signing time:             Thu 15 Oct 2026 09:01:44 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:44 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:44 +0000
Files and hashes:         1: 6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl (hash: uhMGPN8nARkSmB1Sy+Mz8q89vuVkOlvo8C/muffglFs=)
                          2: Vv3v0d-nTDGMZuu49LCG26ffQe4.roa (hash: XOSEPRFlrg1Vmh8itKZY3UX/895YyITNImtXjyH/Lf8=)
                          3: x_RZ35pFC_70oNViYCHn-IKufVM.roa (hash: aryTWCsqJLNJ0tKQxlCwfkXEmtVS+zAt9/NfJrwXvCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:c8:a8:5f:e4:74:fa:d9:d6:57:7a:e3:61:3e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
        Validity
            Not Before: Oct 15 09:01:44 2026 GMT
            Not After : Oct 16 09:01:44 2026 GMT
        Subject: CN=a40bffb76de6e36c97442887d8ead03c474abfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:d0:41:ee:6e:96:84:7b:d9:1f:68:48:92:
                    0f:f0:da:91:f0:9b:92:32:f6:2e:71:b8:5c:c5:d6:
                    1f:66:ba:8e:e4:22:25:64:ba:49:c2:39:1d:36:4e:
                    af:d5:58:59:85:29:f8:34:f7:e1:b7:37:69:3f:5f:
                    2c:e2:b5:07:c6:e3:11:cc:e0:f7:7f:11:10:c8:2a:
                    26:a7:96:64:ef:66:38:41:bf:2d:5d:29:9e:73:c2:
                    aa:67:df:1f:1e:28:08:e9:dc:53:af:2c:f8:75:eb:
                    f0:82:5f:ac:c5:3a:7e:67:db:f1:c3:6d:07:84:70:
                    33:4b:0f:2d:62:68:69:24:0f:86:6c:98:47:a3:9a:
                    f9:f0:08:3b:1d:d4:7a:ad:31:4c:dd:fe:74:20:10:
                    a6:0a:89:f9:31:ee:3d:84:d4:03:b3:fe:80:06:db:
                    8b:8e:6b:96:43:d7:4b:eb:16:9e:b9:b6:9e:1f:1f:
                    60:53:b8:28:da:dc:24:36:d1:80:6e:61:bd:6e:e9:
                    b9:24:06:77:a0:45:46:70:d7:e4:5e:e8:e8:b2:79:
                    65:67:26:fe:fd:f3:4e:51:80:a9:6c:35:af:7b:af:
                    7b:63:3c:0d:f9:2d:e2:69:ec:b3:1e:fb:cf:11:31:
                    a3:b8:3e:c1:aa:8d:f0:fd:5f:7d:91:45:cf:9c:3a:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0B:FF:B7:6D:E6:E3:6C:97:44:28:87:D8:EA:D0:3C:47:4A:BF:C1
            X509v3 Authority Key Identifier:
                keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:7f:b4:21:9e:6b:19:29:30:74:47:d7:ad:ef:f4:72:1f:
         1e:e0:4c:4e:e0:74:7b:2e:66:80:88:67:00:15:93:96:4c:c2:
         d2:16:79:52:5d:78:1c:46:9d:cd:af:7a:32:67:29:8b:67:a1:
         a7:75:3a:6a:ad:b7:7d:18:20:12:3f:bc:80:1d:be:4b:92:e5:
         00:1b:36:c7:61:60:fa:a4:52:ce:d5:8d:03:2b:59:ff:91:54:
         6e:9c:6f:8e:35:91:a0:a0:d9:2c:38:79:d5:b6:d4:42:c5:2f:
         e3:03:87:10:a7:11:e9:df:e2:f9:e8:dc:64:f4:01:3c:91:ec:
         d3:2e:f8:21:ba:99:5b:d9:7a:00:6c:f2:a7:9d:54:be:3a:b4:
         6f:5e:4a:08:02:dd:a5:20:6a:71:1e:9e:e2:59:4d:73:50:0c:
         e4:83:bd:48:ec:a1:a4:4c:23:98:45:39:91:96:e6:d9:3d:d0:
         ef:f5:5e:15:60:d5:97:58:0c:2a:af:6f:aa:97:94:7c:b8:01:
         e0:9a:f4:ea:14:02:53:04:33:6d:f5:b9:92:39:06:55:fc:00:
         e5:7b:54:b0:4c:a1:b1:14:94:78:5b:ee:63:b5:fc:57:6b:47:
         ce:2a:51:f8:d0:62:ca:01:e5:a5:6f:75:12:4f:20:45:94:b8:
         66:e7:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:47 2026 by rpki-client