Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File:                     5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier:          2Ql8Vqyq9GO820F3U5Uz/GT7jIaVLQ0HT0n1Z4+BToI=
Subject key identifier:   6E:B0:F4:19:D3:11:19:FF:37:DE:D9:84:00:77:00:36:46:A6:C2:75
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer:       /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial:       01A1238A7C3AD8E8734B8B4B42385C2D39C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number:          151B
Signing time:             Sat 10 Oct 2026 02:00:40 +0000
Manifest this update:     Sat 10 Oct 2026 02:00:40 +0000
Manifest next update:     Sun 11 Oct 2026 02:00:40 +0000
Files and hashes:         1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: yDp/w7GlWP0phSwU4GuML2ati/d9XtIxjhvfs5xDTcc=)
                          2: 8aSgnBiee21nHnHdoWG0UhIValQ.roa (hash: YhuSs4FGn4TIHIwZ7BzCcCCzXr8oW9ygTIMAtZY8VYk=)
                          3: Pp2H3bThZ25FtqSAcHrrrq1QhOM.roa (hash: y6+Od+cDPN3tOCm1DH2AXWHd6equQ1v8StvCRb4Nogw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8a:7c:3a:d8:e8:73:4b:8b:4b:42:38:5c:2d:39:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
        Validity
            Not Before: Oct 10 02:00:40 2026 GMT
            Not After : Oct 11 02:00:40 2026 GMT
        Subject: CN=6eb0f419d31119ff37ded9840077003646a6c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:87:93:00:6b:23:ea:ab:07:86:d5:50:68:
                    4c:4a:0e:ac:83:50:bd:8e:c3:11:5b:c9:82:46:d3:
                    20:f0:41:f4:41:c6:fa:cc:3c:1f:af:98:24:88:cf:
                    6f:a3:4e:12:56:b3:2d:24:7f:50:ce:14:2a:f5:bc:
                    2b:18:a0:cd:23:75:4e:4a:74:fc:d4:00:7d:a1:b4:
                    84:bb:11:f9:b6:bb:65:01:84:c9:7b:7b:1f:22:2c:
                    31:b8:3f:03:9b:0c:44:98:d5:e6:0d:51:22:26:e3:
                    71:9d:c5:46:25:32:60:df:98:9a:fd:33:76:13:db:
                    57:e6:43:52:55:d0:56:f5:c1:66:67:7e:1c:10:a0:
                    f7:01:95:24:2d:cd:e8:0c:8f:0e:d5:f9:b5:2b:fb:
                    da:28:f2:e4:d1:dc:8a:33:0e:ac:58:d1:0b:c5:1b:
                    8b:59:be:6d:5e:db:65:8d:ce:9f:57:30:03:b5:82:
                    18:bf:81:51:4a:cd:d0:41:d7:f9:dd:b5:82:08:e0:
                    5f:75:7f:b0:f6:e8:9e:6c:dc:9e:b9:60:f5:ee:97:
                    f4:61:99:9a:3a:ce:3d:9d:53:bc:0b:6f:8b:ad:d7:
                    a5:0b:ea:11:ff:9f:fe:87:c5:42:11:28:76:57:0f:
                    a9:0e:4b:0d:62:2e:09:dd:0a:64:1a:95:76:fd:cd:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B0:F4:19:D3:11:19:FF:37:DE:D9:84:00:77:00:36:46:A6:C2:75
            X509v3 Authority Key Identifier:
                keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:26:a1:71:7e:36:b9:68:59:48:e3:14:75:76:31:cf:21:
         f3:dd:93:76:6c:3e:ef:69:a1:6c:ca:15:72:c0:8d:1a:c9:c8:
         96:61:5e:af:8a:0b:2f:39:0a:d0:53:93:be:ae:e6:a9:80:48:
         23:1a:e6:1a:d2:a5:0c:2b:bd:71:8a:dd:9e:9a:3e:04:45:dc:
         43:2f:00:cf:fd:b1:47:de:a5:3b:2e:65:40:05:dd:55:72:5d:
         9f:8e:fb:de:c1:a0:82:b2:b6:dd:1e:67:e7:06:b5:21:20:34:
         4e:ed:50:8f:e7:73:df:bc:f4:ea:4b:dc:7a:21:2a:e8:95:fc:
         78:fc:69:d3:10:af:1f:08:e2:f7:9b:3d:c7:ab:72:23:38:4e:
         cb:2a:b8:e6:e1:b4:f2:45:b0:ac:66:72:0d:58:6d:c7:db:ab:
         ae:ef:fc:f7:db:f0:d3:17:e5:32:64:d9:01:78:c9:56:8f:d6:
         04:cd:66:f0:df:f7:75:5d:6d:88:2b:63:0d:2c:a7:84:fe:78:
         98:8f:70:fe:50:53:1f:61:88:59:4b:4f:8b:af:96:35:5c:f2:
         14:3d:2d:c5:a4:4c:04:7b:83:ea:8f:db:f5:93:04:52:29:d0:
         1f:d6:f8:3f:41:b1:4d:5c:ca:13:85:09:32:2c:6c:92:0d:f6:
         1d:4c:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:39:07 2026 by rpki-client