Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          NL3MLAdqr0c8ZnoS9GP8XTP7o+dUe0L/24DZJEP51r8=
Subject key identifier:   64:65:DA:10:2E:32:71:AF:60:EA:DE:23:E9:E3:46:32:93:5B:66:F5
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       01A140F0F8C5AAAAAC3C2C34F47F2FBB7A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 19:01:36 +0000
Manifest this update:     Thu 15 Oct 2026 19:01:36 +0000
Manifest next update:     Fri 16 Oct 2026 19:01:36 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: r5t+kZigonzUaphS7m8pKfr6nOw9f5lZR3MJQO/5rIg=)
                          2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:f0:f8:c5:aa:aa:ac:3c:2c:34:f4:7f:2f:bb:7a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: Oct 15 19:01:36 2026 GMT
            Not After : Oct 16 19:01:36 2026 GMT
        Subject: CN=6465da102e3271af60eade23e9e34632935b66f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:40:65:aa:75:56:0c:59:ad:cf:d5:d4:58:
                    05:b1:93:c9:41:39:5f:24:27:e1:01:b0:68:59:d7:
                    9b:f6:7f:d1:d1:68:8c:2f:1f:c7:1f:63:df:b1:8a:
                    e3:55:61:81:ad:6d:cd:40:7a:49:19:ea:8e:b3:20:
                    38:bb:d5:dc:ad:84:7c:db:0d:4a:47:45:a3:7f:db:
                    cf:1b:68:77:66:20:1e:82:48:dc:38:30:8a:d7:f3:
                    de:6e:86:28:67:bd:0d:1d:15:12:4a:84:e3:0a:08:
                    8d:23:9e:d3:21:3a:70:72:eb:c2:32:ab:b7:f6:4c:
                    6a:cb:6b:f7:58:7c:c3:98:9d:4e:c1:5b:5e:c4:4f:
                    e1:8b:26:65:da:26:7d:16:6b:50:02:02:69:36:96:
                    8d:0c:a0:1c:63:ff:c6:e4:23:ba:72:b6:a5:f9:62:
                    7b:d8:7e:f1:84:60:53:9b:36:88:26:dc:03:79:38:
                    df:20:33:2d:9d:c6:82:b0:b6:92:18:d9:de:cb:ac:
                    e7:bd:0e:ea:33:b6:29:68:0a:9e:52:10:dc:10:85:
                    42:6e:ea:b9:1e:cc:1b:bb:c3:81:d7:0e:bb:57:44:
                    3d:67:32:76:8a:1d:b4:2a:cc:43:13:43:8c:96:0c:
                    c9:f6:c6:77:1b:38:89:24:28:45:b8:1d:f0:62:7f:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:DA:10:2E:32:71:AF:60:EA:DE:23:E9:E3:46:32:93:5B:66:F5
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:05:5e:4c:39:1e:c0:b3:61:68:bc:7c:2f:27:bf:4b:fe:51:
         94:b8:99:51:32:de:9d:20:a3:8d:26:ba:72:4d:00:22:54:60:
         d2:f8:ac:92:bc:76:10:39:bd:c8:47:29:2c:c5:16:33:69:09:
         a1:ca:ee:79:57:b1:d0:7c:3d:ab:51:ba:12:9a:b7:74:e9:8f:
         b8:75:2f:49:9d:dc:08:ba:35:73:4a:e5:c1:d5:fc:bc:0d:e0:
         30:63:ec:95:52:86:dc:04:d4:7b:ae:d9:a1:47:1c:07:05:e2:
         ee:f7:b4:cb:92:e8:b9:71:2e:f9:ff:47:83:04:b0:b3:19:b2:
         97:ed:2c:b3:6d:fb:87:14:ea:1c:0e:ad:fc:f9:83:c7:94:9b:
         ce:1d:59:92:21:e6:a3:fc:5e:81:3a:c8:20:a4:af:52:8c:25:
         b8:28:a5:e1:ae:66:e0:12:e0:b7:ea:ad:e9:1b:ee:e1:23:69:
         f6:f6:53:91:52:4a:5f:2f:dd:ea:7b:95:53:e9:9e:b2:15:9a:
         56:5d:1b:f5:14:4a:82:3b:28:e6:d0:df:0c:e4:fc:9a:3e:fc:
         67:12:e5:85:fe:98:cb:07:14:f0:55:5b:49:06:77:e6:7c:2e:
         70:ad:c9:bd:61:9d:41:a8:4b:d8:3f:83:44:08:cd:65:33:5e:
         23:38:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:07:47 2026 by rpki-client