Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          dZWtmAkQ29VxaQS079NvG+1j5D1IwnKbOUqPjEWaYuc=
Subject key identifier:   05:8B:A3:96:94:AB:89:5F:52:D8:E8:6F:3B:C6:85:1E:75:51:B5:17
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       01A114BC5AC43958FF17C0F9E33C8F0AA9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          1A1B
Signing time:             Wed 07 Oct 2026 05:00:50 +0000
Manifest this update:     Wed 07 Oct 2026 05:00:50 +0000
Manifest next update:     Thu 08 Oct 2026 05:00:50 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: 58Zt3vPHY95ELASZAS73tVAiw/JndAdeC2TpymQDr0Y=)
                          2: OEcoV0x2ZiERZGgDrlv6frQzG3o.roa (hash: Fnf+bBSZRAjDDHsRlYG1QWMEEm9hP4YKSKPdjjCMdQc=)
                          3: U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa (hash: ynlZLfA1KKQGA9ays2zyoOPFiR0SmVJSMZZfG1zu6sk=)
                          4: f_5BjnEr80pGWfL1w3q_5fZIFf4.roa (hash: RpdasGSTz3LwfRMX6VuVLK5/qxPoIGc1oN473heL/WE=)
                          5: mtPVSWGGA9av5jGLn16eQn0UQjc.roa (hash: rVQVTg7c8+hdflSpxdf+lr1Hlsinw9GyRMav2V9r1s8=)
                          6: pK6hDJxmfZUaCBepnWZvEBb9jQ8.roa (hash: +OSS7va6u+BokiYgs5Z+5mtwaa42GT6KDBzxwPZg2k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:bc:5a:c4:39:58:ff:17:c0:f9:e3:3c:8f:0a:a9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Oct  7 05:00:50 2026 GMT
            Not After : Oct  8 05:00:50 2026 GMT
        Subject: CN=058ba39694ab895f52d8e86f3bc6851e7551b517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:70:39:5c:70:05:47:aa:44:85:a3:97:35:
                    e5:37:a3:c8:0c:77:33:01:72:ee:77:db:0b:f1:d3:
                    97:9c:29:00:ae:79:7c:58:f0:97:ad:76:7b:52:e3:
                    e8:6c:81:99:2b:60:b0:5d:00:a3:1f:19:2b:66:3c:
                    44:ed:f8:f1:4c:94:d6:aa:f6:74:0b:d7:2c:ac:df:
                    0d:6c:e3:83:42:af:e5:dc:50:4e:48:ec:1d:5b:58:
                    f3:8e:97:3b:86:39:2d:d2:21:c9:b3:92:d9:85:a4:
                    1a:e5:2c:5e:b7:97:4a:dd:11:a3:d1:c4:04:85:28:
                    25:1e:f9:77:13:4a:2e:08:f1:a4:54:8f:90:7e:97:
                    38:76:61:51:42:f8:28:9a:ef:30:47:2b:2b:99:a0:
                    7a:9b:c9:7e:67:00:d7:e5:6e:0c:85:79:80:07:6d:
                    3b:75:98:fa:5d:23:5e:aa:ee:d0:1d:e0:47:27:e6:
                    71:bb:8e:79:29:48:34:16:05:aa:fe:73:2c:92:1e:
                    3d:3f:46:49:a3:45:71:b9:de:8e:2c:09:65:e7:f7:
                    bd:8a:1e:d1:39:ce:d3:5c:cf:0e:05:f9:b9:00:0f:
                    e8:bc:6e:0e:64:b7:a5:78:51:48:b0:fc:81:93:ac:
                    ef:e1:3e:1b:87:1b:38:6d:d4:0a:01:90:72:91:8e:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8B:A3:96:94:AB:89:5F:52:D8:E8:6F:3B:C6:85:1E:75:51:B5:17
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:cf:5b:79:58:6d:32:79:7e:fd:24:fe:e6:6d:93:be:2e:
         6e:7a:ee:02:d8:8e:e4:ce:f8:25:00:60:a4:c4:b7:73:42:ff:
         06:a0:66:21:1a:eb:c0:1a:9a:03:58:34:61:db:50:27:53:c8:
         d5:1f:17:08:be:fa:54:96:30:46:1a:65:cf:64:f6:a6:7d:3b:
         a9:c6:24:c6:a6:e4:90:24:e5:67:e6:ed:73:ec:cd:8c:a0:97:
         e6:6b:45:e3:0e:af:e0:9e:97:36:d6:54:2d:5c:29:b3:6b:d1:
         ac:d2:b0:ad:a8:01:c2:c9:31:f1:5e:5c:5b:d8:0d:50:67:90:
         e1:b4:9e:33:64:fd:09:78:39:a0:b0:bd:0e:da:b9:6d:b5:67:
         91:b5:4b:6a:09:93:2f:74:43:c7:74:50:14:e9:cc:66:7b:98:
         0d:0d:2e:74:f5:6a:95:72:fe:32:fe:44:df:80:56:01:fd:8a:
         93:2b:3c:35:0a:a8:39:52:70:94:a2:ac:bb:46:12:a8:82:d3:
         10:23:4c:35:68:28:36:47:a7:ae:ff:a6:cd:22:e5:2b:80:4a:
         5e:63:2d:f5:77:7a:5b:99:0e:8d:51:be:ac:64:18:20:1f:b3:
         67:f9:09:0b:d6:e3:bd:a8:38:36:38:29:6e:9d:68:72:e1:94:
         d0:6f:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:11:48 2026 by rpki-client