Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
File:                     e27QJ9N71hCaAxHihp00StlZNfk.mft (raw, json)
Hash identifier:          vUyyc5Zb5AaBhO3lQI9yge+KSwgwtfQKActwE+jm3qs=
Subject key identifier:   57:53:82:CA:C1:19:72:F4:F0:8C:01:B7:B4:9B:9C:64:EE:F4:58:FB
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Certificate issuer:       /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial:       01A186E4001A2C49F0A7A97DA1566323B85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
Manifest number:          1608
Signing time:             Thu 29 Oct 2026 09:00:51 +0000
Manifest this update:     Thu 29 Oct 2026 09:00:51 +0000
Manifest next update:     Fri 30 Oct 2026 09:00:51 +0000
Files and hashes:         1: e27QJ9N71hCaAxHihp00StlZNfk.crl (hash: Urc52xlsldvLfJ10tKL0JkMWLpldRUnX0BxXdmWD7oY=)
                          2: mqkbXzrPajAciz1rznIJtOvpuyM.roa (hash: tQe8xgR/BeAjkQiY4TisIF6fbpojr1Hl6k10jQeFvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:e4:00:1a:2c:49:f0:a7:a9:7d:a1:56:63:23:b8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
        Validity
            Not Before: Oct 29 09:00:51 2026 GMT
            Not After : Oct 30 09:00:51 2026 GMT
        Subject: CN=575382cac11972f4f08c01b7b49b9c64eef458fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:47:a5:f7:9b:7b:30:3f:a1:5f:2b:8c:82:
                    16:af:c6:77:a2:98:c7:a7:84:54:18:75:8b:d4:ff:
                    0c:e7:e5:02:08:2f:37:00:52:fc:43:40:26:5c:7c:
                    3e:a2:76:1f:23:9b:ae:cf:1e:e4:d8:23:49:d2:83:
                    f2:42:44:e8:9a:e4:ae:5b:f7:e0:03:14:c2:ea:6c:
                    2a:8f:0c:ff:4a:f4:e9:de:3e:62:e9:63:b6:f2:45:
                    ce:44:9a:12:7e:00:42:07:8a:93:4e:8b:87:03:0a:
                    62:26:04:69:b8:91:06:b6:cb:33:13:d3:2a:83:c5:
                    43:5b:ab:59:53:4e:4c:aa:0a:4e:38:4a:05:07:2c:
                    e3:9d:ba:d6:ce:fb:cf:f9:d3:78:d3:af:91:6f:f2:
                    df:8e:9e:09:ef:3c:3d:16:0f:b4:a6:31:0b:42:ae:
                    ac:ba:6c:6b:ab:8e:70:46:aa:a8:06:cd:42:48:43:
                    e7:ab:c6:77:d1:32:a9:98:a9:5e:01:86:ca:2b:a5:
                    ca:95:97:74:3f:3e:1b:48:6b:2d:9b:0c:4f:45:42:
                    fa:f4:0b:ee:a3:48:34:25:4a:6d:4d:91:57:b6:37:
                    01:81:76:47:b8:51:a7:e2:65:3a:a1:3a:cb:ca:65:
                    d9:9c:de:a1:fb:87:47:9e:f2:41:e7:79:64:d3:07:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:82:CA:C1:19:72:F4:F0:8C:01:B7:B4:9B:9C:64:EE:F4:58:FB
            X509v3 Authority Key Identifier:
                keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:89:b1:82:97:11:03:08:8a:66:77:33:94:a1:e4:9e:59:8f:
         f2:21:59:db:b0:03:9e:b7:07:25:52:ec:e8:21:0b:f8:cd:25:
         9d:f8:ed:ce:4b:e7:54:62:8d:0a:50:63:12:cc:49:ff:97:4b:
         43:6d:62:e0:fe:15:a7:4e:07:ec:2f:96:1a:a3:f1:24:88:63:
         8c:94:aa:a2:1d:72:29:ac:43:5e:70:ba:ae:93:a4:12:59:7d:
         f4:01:25:46:9f:8a:51:09:3d:f5:b0:22:8e:0d:d2:59:30:21:
         4f:dd:5e:8c:34:5b:37:e4:f0:2f:c7:52:69:35:47:01:85:da:
         76:93:c8:b1:a3:88:8f:a0:f6:00:7c:6a:c8:31:0d:68:45:6a:
         3c:7c:2f:a9:43:85:fd:02:2b:05:f6:f0:90:8c:b5:56:fd:58:
         df:72:1b:6e:9f:ef:fd:87:3a:6c:05:e0:c8:73:ef:b5:db:6c:
         97:a1:cd:b0:b6:10:09:bc:58:b4:d2:54:bf:35:25:04:81:8f:
         35:7b:9c:b2:6d:44:66:3e:06:7b:a5:19:97:1c:e8:fa:74:ad:
         3a:1a:a8:fe:a2:61:b2:84:e6:10:e8:b9:ca:97:07:29:ea:1a:
         2e:90:2b:42:1e:02:bb:fa:21:50:e5:7b:26:78:70:b7:0e:e4:
         8c:4f:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:12 2026 by rpki-client