Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
File:                     6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft (raw, json)
Hash identifier:          qjUxbu8hZihNQnEsVxjkdkbZI3DDDTXqX0B3cbUPyyQ=
Subject key identifier:   D7:20:42:8C:D1:4D:2D:10:80:32:5D:5B:7B:2A:BE:13:0B:FA:DA:9F
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Certificate issuer:       /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial:       01A125E7B7B36215844AA662E694E2FE72C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
Manifest number:          159F
Signing time:             Sat 10 Oct 2026 13:01:45 +0000
Manifest this update:     Sat 10 Oct 2026 13:01:45 +0000
Manifest next update:     Sun 11 Oct 2026 13:01:45 +0000
Files and hashes:         1: 6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl (hash: WwhxlW2u8n9kNKnKBS5LeFZTa7xBMqG+ZS7+HcehH3k=)
                          2: l_-ms9_QDftLZCKN9_q-vLa8Z1g.roa (hash: zRFmfmk1D1sRun+Y9I4hMktcVuNfXiGOIRhzxPU2++g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:e7:b7:b3:62:15:84:4a:a6:62:e6:94:e2:fe:72:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
        Validity
            Not Before: Oct 10 13:01:45 2026 GMT
            Not After : Oct 11 13:01:45 2026 GMT
        Subject: CN=d720428cd14d2d1080325d5b7b2abe130bfada9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:87:44:cb:71:82:99:e6:bd:2f:a9:32:cd:
                    f6:47:f1:ff:3a:51:53:d4:d3:0f:8e:13:38:b6:dc:
                    bb:43:98:99:e9:b1:b3:58:2b:2a:4f:a8:bc:84:0c:
                    11:2a:83:f9:39:46:58:94:ec:22:83:e1:d1:49:0e:
                    33:53:27:9c:ea:58:66:5b:56:77:fd:00:08:7e:74:
                    b2:4f:60:8c:75:f9:d7:79:19:08:49:82:e1:3d:0a:
                    71:ea:be:0d:ef:cc:43:87:1a:5a:28:9f:20:75:71:
                    ed:13:4a:bf:0a:79:43:77:87:1a:0c:c0:c9:8a:26:
                    f9:a8:8e:f7:a5:63:de:3b:7c:62:e8:6f:7b:3c:58:
                    d3:29:a9:8e:b3:e9:6c:57:e5:4d:c7:61:1c:a3:bf:
                    d8:fd:6c:c9:4e:9a:f0:69:3d:f4:e3:01:da:16:1b:
                    34:bd:90:1a:64:1a:2e:66:6e:c3:51:0f:13:87:a0:
                    35:c2:ec:27:fb:ae:4e:71:f9:7d:05:37:98:24:06:
                    9a:b1:a9:a8:04:2e:ae:f5:17:ae:26:8e:a0:a1:3c:
                    3f:20:6f:12:d0:88:75:e0:3c:d6:d0:db:73:01:23:
                    34:a1:95:35:18:c4:75:bf:e4:46:9b:ed:cc:c2:05:
                    a2:06:c8:a8:84:67:25:7d:e6:53:e7:e7:39:2b:0d:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:20:42:8C:D1:4D:2D:10:80:32:5D:5B:7B:2A:BE:13:0B:FA:DA:9F
            X509v3 Authority Key Identifier:
                keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:08:be:71:88:1e:3c:88:a1:d0:d5:57:b7:ad:ad:ac:de:f1:
         df:39:b1:88:58:6b:9a:98:3f:7e:73:41:18:92:d1:24:73:f6:
         84:21:86:98:4b:ea:17:f5:5a:27:2f:e7:44:86:e9:ba:f3:8d:
         7b:39:9c:19:d5:22:ba:d8:b8:e8:ff:01:75:29:4b:df:d3:db:
         08:e7:5e:6e:85:31:b3:c0:9a:04:85:2e:62:84:2f:3a:52:65:
         1c:d6:6f:42:57:cc:94:6e:d8:b3:c7:d5:81:7e:5f:f9:49:88:
         fb:c9:d4:bd:0e:bf:cc:37:eb:11:09:2f:50:2c:1e:27:46:30:
         f3:36:de:c9:70:e3:84:0e:6a:8f:98:50:29:ed:a1:e7:bf:ee:
         b5:f1:24:7d:5d:b2:81:1f:ff:13:4b:24:83:1d:39:3a:88:43:
         83:ed:36:64:2f:99:32:0c:14:18:f8:c6:c6:c1:08:e2:eb:5d:
         e8:79:c1:0c:64:5d:1f:a3:b8:13:b0:53:3b:ef:82:de:e6:13:
         13:2b:49:de:7b:5f:7a:84:9d:e6:f4:95:8b:15:2b:dc:95:73:
         e0:46:14:79:9d:a7:7b:4d:bd:79:ea:1c:ab:35:e7:77:f6:ed:
         a0:e5:4f:b9:b3:66:b4:41:ce:76:ee:3d:34:85:f8:0f:f7:03:
         5d:2a:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:26:24 2026 by rpki-client