Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          eec4TTDkKTbIexdNF2s84VgslaUG1nklDUBnLLumlfk=
Subject key identifier:   BD:B0:64:75:D1:4F:84:28:04:CA:FF:C8:37:B1:D9:F4:15:9C:9C:E2
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       01A16B6CF77EF15D9ACF03F65F68CB63DC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          073A
Signing time:             Sat 24 Oct 2026 01:01:05 +0000
Manifest this update:     Sat 24 Oct 2026 01:01:05 +0000
Manifest next update:     Sun 25 Oct 2026 01:01:05 +0000
Files and hashes:         1: 1-l1XYb54g6dJ2IJlw79HqDOL1T8.roa (hash: 4KNw2FZJhBfZz/48eB8kUaq/nOVXJqe8YKN+AfMvBMc=)
                          2: 6Rv-YhkvK1GX0Te8-Dludeyqizk.roa (hash: UKGgcZcFKJuJZXLZiTLAH1hiVg42URiO+gpL2ayx09I=)
                          3: M63i7t4WYWQQDzdvsxsD0FnhDM0.roa (hash: /hhr1Y2Fr2l9zEhKAXJKXJb3IP8nSXMJwlawHmCx9tk=)
                          4: NKFYjT8NOU2nNm75iC1mMdUvWRg.roa (hash: T+3lCMY+jPZeKCOFr2ByuWF+cVwT3gGdpsce+k/SCB4=)
                          5: O92NJ5Awv2BDng61oOd15HuLqPA.roa (hash: X8BuUjbEcw4gYt0kVOFHS871nwSuI6STGkEuR3rs+f4=)
                          6: TNsgJfRo8T4wYAftDqW5Y2ISiSw.roa (hash: 3A8wQr5AdN0RkrLyZ9wt0wnQNwX319OG4uYDw/IVg1U=)
                          7: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: A/fznIuUZBoQcfiTCsqs4V6anWTGnE+7+arFyltQb5g=)
                          8: kSe32ld6D3y8ZGSUCU3Nuw3483g.roa (hash: ibN4bInbBvAjLJ4kDOjWiNxovvHCVDwVdOJCJprQRIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6b:6c:f7:7e:f1:5d:9a:cf:03:f6:5f:68:cb:63:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Oct 24 01:01:05 2026 GMT
            Not After : Oct 25 01:01:05 2026 GMT
        Subject: CN=bdb06475d14f842804caffc837b1d9f4159c9ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:ca:d9:7f:ea:a5:45:4c:54:31:2e:7d:b3:
                    8f:ce:ce:a2:45:33:8d:c3:60:ce:c9:07:ac:be:df:
                    a1:89:56:98:31:1e:d9:f5:01:a0:62:a1:15:3a:53:
                    68:1c:2f:af:94:77:0a:a1:77:ab:ac:96:0f:ac:b7:
                    19:3e:f8:45:ab:0d:8e:25:ab:a0:53:d7:fe:ab:b3:
                    ca:b5:95:2f:14:50:03:19:1d:66:9c:19:ac:9e:70:
                    f6:2d:5a:1e:96:87:c8:9f:ec:04:d6:97:f5:fb:07:
                    27:fc:9d:58:96:dd:0f:2a:f7:54:dd:2d:f5:fd:17:
                    fa:83:dc:ed:1d:4b:38:a8:5c:51:92:94:dd:d8:a5:
                    5d:d0:1f:1c:57:24:ce:e3:ce:26:dd:4b:02:8a:b9:
                    73:c4:a3:1b:c2:a4:b8:c5:77:1f:45:13:c9:9c:2c:
                    95:3f:bd:98:65:17:06:3e:ac:1e:4b:d9:d7:f8:87:
                    0e:53:db:b1:2f:f8:01:05:fc:f0:73:1d:ac:fd:2b:
                    02:94:7d:ae:2a:48:1e:b7:94:f9:94:09:e0:3d:bc:
                    e7:d5:6c:82:b7:54:d5:56:33:9a:9c:d0:5c:40:b6:
                    84:26:52:38:73:43:7c:01:4a:01:3a:a3:57:49:fb:
                    61:43:84:b1:e5:2d:4c:2e:10:6e:ce:81:59:b8:ef:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B0:64:75:D1:4F:84:28:04:CA:FF:C8:37:B1:D9:F4:15:9C:9C:E2
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:66:15:ab:c2:f9:c9:8c:25:cf:cd:b4:29:6d:01:d4:11:83:
         40:59:e5:26:fd:39:c0:6d:5f:2f:ad:db:eb:a2:09:ed:6b:b5:
         72:26:e6:6d:bc:13:30:18:c4:85:7d:e4:70:d1:4c:3c:9d:82:
         61:5a:b8:40:a8:25:27:0e:d3:92:17:39:d0:a0:e2:78:8e:18:
         81:7c:84:02:b5:1b:43:16:61:7a:f2:85:40:df:b8:37:fc:55:
         51:71:25:52:67:38:25:ad:67:bf:e5:03:72:a8:4b:00:04:70:
         ab:44:b8:f7:5a:05:57:88:28:8c:6c:6e:03:47:26:26:ac:f5:
         7c:42:6d:de:6c:bb:49:5c:e8:7d:1c:5c:be:3c:75:de:81:d4:
         90:97:c5:bd:8f:29:7c:cb:8d:a1:78:dc:12:f3:64:03:31:3f:
         c1:74:41:ef:02:d1:fe:78:75:51:8b:13:05:a2:7f:fe:2b:9e:
         0c:e5:37:2b:d4:c0:4c:df:f3:6b:5e:0a:c1:9c:cb:1c:23:7c:
         26:7f:49:f6:c5:1a:03:28:dd:5c:18:87:68:30:c1:47:f8:a3:
         ab:a9:f0:71:50:3b:bf:c9:9e:38:85:74:65:15:03:51:68:f8:
         6e:c0:cf:a4:b6:93:ba:78:2b:e5:c4:31:86:a6:51:4e:49:1c:
         f4:08:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:18:53 2026 by rpki-client