Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File:                     1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier:          904/qUEA3/fNzNgIKcQnsO1HGBGiXwCX33n8ymqfppI=
Subject key identifier:   CD:3E:43:B7:DB:41:3C:52:F4:0E:39:8E:72:D2:35:75:A0:3C:F6:ED
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer:       /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial:       01A17C29260966BA811BBA2299B0DAEC32F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number:          0E86
Signing time:             Tue 27 Oct 2026 07:00:33 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:33 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:33 +0000
Files and hashes:         1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: uAFfh9HmFE99h5B0dJEmAwqNR8H/Xb6ORWqhfDiibQM=)
                          2: 6aMislTch3zZwMzO58eJDtWMabg.asa (hash: LTp3zb/0TL8PMFq/FYhsEKwMy+Y343ohy5Z9X0x0oss=)
                          3: mwF9VOIvrElH23ZHoopKdym-Aho.roa (hash: W+Ohr/XPhsb0nPw8AWIrEke6fDAFH5wEmSuFFviMKNc=)
                          4: nRIsafAf78Gs7rWD8avvMiri3pc.roa (hash: bbrHnQr4yvaMpEsNaLQjRLRfE7DnAQFoP/N3kLyMl3I=)
                          5: pB_jEBT845qiq_XLt-ZbMdSYI9Y.roa (hash: EXgWfKPbjwdqrdAv9y6pI3rTT0729xGjj1/jOYtBdig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:26:09:66:ba:81:1b:ba:22:99:b0:da:ec:32:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
        Validity
            Not Before: Oct 27 07:00:33 2026 GMT
            Not After : Oct 28 07:00:33 2026 GMT
        Subject: CN=cd3e43b7db413c52f40e398e72d23575a03cf6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:35:1b:65:fd:31:a4:4e:d3:ac:b1:ce:b8:
                    0d:14:40:01:a9:10:65:7e:2b:c9:b5:de:f0:31:d0:
                    28:2e:8d:4c:59:07:c1:e5:77:65:68:36:8d:dd:7b:
                    db:51:c8:f3:1f:b6:8e:e4:07:a1:7d:a5:2f:6c:9b:
                    03:f3:42:f5:bb:dd:c7:e8:b6:79:e4:a9:61:af:1a:
                    f1:78:14:0a:25:59:c6:73:fe:7b:09:ec:e5:c5:cb:
                    c9:b2:38:df:60:a2:85:07:34:e7:3b:04:5e:ff:0f:
                    50:dc:7e:37:aa:8b:5a:55:60:1b:76:4c:0a:d3:77:
                    82:6e:94:05:14:34:74:c9:f1:eb:31:5b:69:55:eb:
                    6d:f9:23:90:76:18:68:9d:d1:b3:5c:fc:dc:11:e5:
                    2a:ed:7a:70:95:fa:24:fe:b1:c1:71:e8:2c:1f:91:
                    ab:5d:b4:42:44:d1:43:04:89:34:64:e9:fb:7c:57:
                    43:b9:0b:ce:03:e2:fd:90:23:6c:0b:3d:d2:76:df:
                    9e:57:44:1d:5c:ad:ec:bf:b3:d1:f4:9c:98:d5:8a:
                    7c:98:39:a4:b5:17:7d:5a:2d:41:ae:65:68:b2:0b:
                    ef:6a:43:8e:57:16:88:b5:ef:ea:14:20:67:8a:fe:
                    cc:19:3a:c3:0a:ee:f0:6d:10:d4:e1:b2:71:f6:f7:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:43:B7:DB:41:3C:52:F4:0E:39:8E:72:D2:35:75:A0:3C:F6:ED
            X509v3 Authority Key Identifier:
                keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:33:17:09:c5:f6:25:07:33:b7:5a:96:a0:ee:06:09:a5:e3:
         97:df:2f:59:ab:99:2b:52:ee:8b:36:00:4a:7b:de:f4:de:c1:
         1c:15:97:2f:b1:d6:d2:3a:c5:54:5a:32:64:37:38:83:f6:05:
         bc:6d:58:9a:34:30:c7:2f:fd:dd:6a:55:8e:90:10:be:62:48:
         50:03:b9:74:4f:3d:fe:e6:05:cf:1a:25:de:eb:c4:d7:86:fa:
         07:06:90:04:58:c5:4b:da:16:c0:9d:8e:29:f9:58:53:19:54:
         dc:3a:54:33:37:22:87:fa:31:e6:46:ee:ac:dc:2d:1f:f7:a8:
         f8:17:45:25:17:0d:87:a5:e2:e9:b1:5f:5b:2d:90:82:1c:82:
         fa:2b:dd:61:5e:35:48:bb:11:73:54:ac:02:d9:4f:76:0c:34:
         ca:a0:43:a7:50:59:36:10:72:cb:6f:c4:64:e7:4b:c8:2c:1d:
         d5:ee:02:ad:5a:6b:4e:36:48:36:71:96:31:5e:fe:4d:f1:77:
         61:59:02:2f:b3:bd:53:56:44:fa:54:ce:8b:69:e4:d8:6d:6e:
         14:3e:8e:c9:c2:ff:2e:df:f8:dd:83:87:26:fd:3f:11:c6:ff:
         1a:54:48:87:05:e8:7c:f8:77:18:a0:57:04:8c:c1:93:fc:90:
         ba:f9:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:32:17 2026 by rpki-client