Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
File:                     798-8o6In9MNzxN-fPEkjyVeZxo.mft (raw, json)
Hash identifier:          BHuEOR4BSxkRToCEXVd1IK9dz6Nmf9qXxAoU2d/DaJg=
Subject key identifier:   17:9C:36:66:D2:68:19:71:91:2A:3B:EE:DF:A9:4A:45:2C:DC:F7:93
Authority key identifier: EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
Certificate issuer:       /CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Certificate serial:       01A12AD668C78EF6DDF46E8BEDE760F27C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
Manifest number:          0114
Signing time:             Sun 11 Oct 2026 12:00:56 +0000
Manifest this update:     Sun 11 Oct 2026 12:00:56 +0000
Manifest next update:     Mon 12 Oct 2026 12:00:56 +0000
Files and hashes:         1: 798-8o6In9MNzxN-fPEkjyVeZxo.crl (hash: Xs64XD9uOg+DrkxcvBEXd2dU2otBgGs5y9ZTlvHN1Rk=)
                          2: uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa (hash: gQPzOCK/RXUj7ECDDWVHnreCZ/IrlUfLQtw8hRWnAl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:68:c7:8e:f6:dd:f4:6e:8b:ed:e7:60:f2:7c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
        Validity
            Not Before: Oct 11 12:00:56 2026 GMT
            Not After : Oct 12 12:00:56 2026 GMT
        Subject: CN=179c3666d2681971912a3beedfa94a452cdcf793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:a8:7e:ed:6e:80:e9:e4:89:c9:4a:3c:47:
                    c3:a2:4a:44:1f:d0:74:46:ad:71:cb:e9:31:13:ce:
                    0f:6f:c1:30:4d:8a:1b:05:b6:8d:5d:b2:89:a4:a5:
                    3b:82:ee:3b:23:3f:88:ad:ca:87:e4:4d:a6:51:eb:
                    a7:1f:4a:3c:84:b6:6a:1e:e9:68:2b:4a:c3:d6:82:
                    13:57:d6:1f:a0:6a:2f:03:03:1e:f2:f9:a5:68:e4:
                    c3:de:42:59:a9:93:0c:af:17:20:b0:41:7f:3f:da:
                    dd:00:ca:ac:7e:93:c4:43:b0:ad:4d:a3:5e:93:11:
                    b7:ce:0e:85:de:8b:21:72:0b:24:17:6f:87:9d:59:
                    2d:6b:08:50:2c:34:aa:b8:4b:1d:71:b1:5f:c7:ac:
                    3b:17:bf:09:45:2c:2d:27:17:ea:d3:a5:96:bc:ba:
                    cc:ea:9a:9a:01:3c:80:c8:4a:72:a4:42:67:d0:f8:
                    52:72:a1:5d:53:a6:19:6a:46:17:5a:b4:29:a4:b3:
                    18:ec:e6:e8:69:ee:8c:ce:13:c4:f4:9b:59:5a:e4:
                    94:fa:3d:a8:82:d0:96:5e:a8:b7:48:37:47:97:03:
                    48:0d:04:39:57:1b:6f:fc:ed:17:fe:25:70:4c:ba:
                    1d:e3:18:e0:54:f6:c1:e2:b9:47:6d:74:b9:da:7d:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9C:36:66:D2:68:19:71:91:2A:3B:EE:DF:A9:4A:45:2C:DC:F7:93
            X509v3 Authority Key Identifier:
                keyid:EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:3f:03:2d:9c:72:f5:6e:9c:a4:38:ae:27:26:e8:63:e1:
         3a:ee:e9:7b:dc:90:5b:9d:c3:70:35:b7:8d:d7:9a:d9:b8:01:
         95:f5:0c:47:08:de:f3:23:d8:cf:c3:da:b6:05:8b:8f:bf:7c:
         49:3c:11:99:ad:5a:dc:58:fc:c1:2e:4a:1e:6f:0d:e0:7a:97:
         4f:c6:9b:44:f4:d6:ed:64:3f:16:39:31:5f:db:1d:2c:0b:32:
         02:f8:e3:88:58:d7:ec:23:07:9c:ea:4f:df:84:cd:b3:8c:8d:
         04:af:0a:1d:74:3e:b9:cd:28:41:b4:54:d5:92:9e:ef:23:60:
         70:7b:a3:96:b5:82:fa:63:7f:81:74:60:c1:11:1a:2d:fb:c5:
         ae:5c:0d:cc:a0:30:ab:5a:97:5b:89:f1:5c:dc:b8:83:15:3e:
         d8:0f:5a:13:90:9b:40:f2:e4:a3:fe:a8:cb:8e:d4:a5:d8:52:
         81:0d:5d:f4:8a:ed:82:20:11:d9:06:d0:a5:d6:0c:f3:88:af:
         dd:2c:c7:20:05:4e:ef:ff:31:1a:6b:6c:25:e0:9f:09:e7:cc:
         a3:44:33:5c:87:a1:42:cf:dd:d9:1e:ca:eb:18:3d:7d:83:6b:
         40:06:0c:1f:6d:8a:6d:3b:56:8c:f9:d9:92:00:31:05:47:c2:
         b4:36:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:26:56 2026 by rpki-client