Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File:                     6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier:          yTVifOjYadQoyyDGN5apOhUIWtvijKXP1rbBdNu8evE=
Subject key identifier:   D6:0F:DC:8C:A7:6D:C0:BF:A8:26:26:B4:4F:95:09:47:F3:DD:15:B7
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer:       /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial:       01A13DEF1065C15F20B9B72E2134AEA8FA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number:          1AA8
Signing time:             Thu 15 Oct 2026 05:00:39 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:39 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:39 +0000
Files and hashes:         1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: WOk5iGLTl7VcyiEGedaVxYa7N3Cook9WU4U5ugV5W0Y=)
                          2: Ol2LcIckb0JEorAeZ9ZW8Jfsn4Q.roa (hash: wPlF6pF4PXwOQzyCGkjuNlYnp29Vxy6PXU2oWbLVg5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ef:10:65:c1:5f:20:b9:b7:2e:21:34:ae:a8:fa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
        Validity
            Not Before: Oct 15 05:00:39 2026 GMT
            Not After : Oct 16 05:00:39 2026 GMT
        Subject: CN=d60fdc8ca76dc0bfa82626b44f950947f3dd15b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:4f:e4:db:59:54:a9:d7:00:b2:67:ed:be:
                    ba:71:05:a3:50:24:f1:64:37:78:d9:ac:07:88:de:
                    e6:d5:5a:f1:57:96:35:8c:79:74:53:f5:96:f2:31:
                    8d:67:8f:22:7b:47:1f:fd:4f:2a:b9:cb:a5:7c:32:
                    c1:6c:9f:e6:95:88:b0:8f:22:c5:f4:5c:38:60:c7:
                    83:1a:8d:b2:62:96:c1:5f:be:f0:0f:58:50:58:76:
                    c7:09:07:26:b0:58:0b:ab:a3:c5:ae:ad:ee:da:86:
                    a6:00:45:11:55:8e:01:78:7c:50:0f:ea:79:a7:d8:
                    28:01:16:8b:2e:9e:57:c7:42:00:bf:8f:f3:ad:9c:
                    ea:d1:aa:58:cd:90:a4:70:42:c5:53:b7:90:e3:a8:
                    b1:3e:3f:98:88:d4:16:cd:09:55:90:fc:f4:41:9e:
                    9b:ad:db:ad:a5:20:65:8c:d1:67:9d:8d:00:40:00:
                    33:a6:ab:32:9c:89:b3:8b:3b:11:0a:1c:cf:b3:a0:
                    8d:86:81:d5:7c:20:38:c4:1b:76:1b:88:6e:f5:43:
                    b6:05:a6:90:bb:74:d2:f6:46:28:d0:65:7e:a6:98:
                    3c:72:1e:84:fd:bf:b3:f9:f8:1b:17:d6:fc:34:f1:
                    c6:27:46:23:9f:26:0e:04:e4:88:48:65:9a:65:40:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:DC:8C:A7:6D:C0:BF:A8:26:26:B4:4F:95:09:47:F3:DD:15:B7
            X509v3 Authority Key Identifier:
                keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:af:64:e7:e7:54:f9:69:c6:3a:39:b6:30:c9:58:71:75:2a:
         21:89:fe:0e:1f:1c:13:fb:47:36:4c:40:73:1b:48:f8:07:23:
         bd:3e:29:db:2c:f4:bb:32:2a:87:91:89:02:c5:60:6a:3b:bb:
         3d:c4:ec:67:21:ee:df:bb:e3:53:fd:12:e8:17:29:f7:e0:cc:
         97:ed:e1:2d:23:6b:84:6c:1b:e4:5a:9d:22:c4:a1:84:fb:ff:
         50:fd:a1:0b:f2:1c:66:6e:ba:45:c0:b7:48:01:27:d1:65:36:
         d3:3a:dd:38:d0:77:7a:5c:7c:d4:3b:d8:0a:5e:0b:dc:eb:fd:
         2e:2a:3d:f2:7d:10:fe:ea:8f:b0:52:66:13:86:36:c8:f3:85:
         17:07:94:8c:a7:76:c7:f8:75:17:dd:86:bc:b2:f1:39:ce:c9:
         a3:fb:8e:66:86:71:2f:85:92:5c:56:02:5b:8b:2f:f6:61:d9:
         fe:f1:a0:86:e7:c2:0b:8b:1d:70:6d:56:f6:6d:35:35:92:e8:
         f8:62:3f:f9:e0:ed:98:27:2d:5b:e2:cb:a8:a9:be:e4:16:2d:
         58:27:9a:82:e5:cb:62:f0:b9:f3:1b:7e:cf:29:3c:8d:2c:e6:
         c6:fb:6e:73:5b:ac:80:37:68:fb:e0:a6:1b:ef:7b:62:f8:a4:
         2b:4c:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:11 2026 by rpki-client