Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
File:                     6p03bVRB9Is91QhRWxb-lcWhF4I.mft (raw, json)
Hash identifier:          jFPOcyMTf7mdCDLu1JtDotRN4ZgQurcPgwHTf6C6tZc=
Subject key identifier:   FB:66:88:F2:0E:8E:02:DD:A7:01:65:55:FB:B3:76:64:8E:28:A5:20
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Certificate issuer:       /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial:       01A13F70A6648850D80B08FF6004CA059F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 12:01:49 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:49 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:49 +0000
Files and hashes:         1: 6p03bVRB9Is91QhRWxb-lcWhF4I.crl (hash: fLowoiDFeHHM3IUVgmcpGIH9uqZtquM1bO18+rSE484=)
                          2: QNvj6tUUilZewAiCGmyYMu4YKY8.roa (hash: HQZTu9j4FF8eevUrS/YHuhLDP0eBM9CMdSTMPaaRMr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:a6:64:88:50:d8:0b:08:ff:60:04:ca:05:9f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
        Validity
            Not Before: Oct 15 12:01:49 2026 GMT
            Not After : Oct 16 12:01:49 2026 GMT
        Subject: CN=fb6688f20e8e02dda7016555fbb376648e28a520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:09:df:aa:b1:56:35:a0:5a:64:77:80:e4:
                    1c:36:51:75:4e:84:43:f5:ab:6f:1f:61:48:99:5b:
                    c2:5d:c3:a1:06:ab:16:60:a2:bb:c9:69:fa:11:77:
                    8d:19:4a:f5:3e:09:4d:53:fb:1c:82:48:77:d8:6a:
                    e2:f7:42:d4:2d:c2:e8:36:fc:59:87:b9:a6:4a:12:
                    6f:cb:3f:fd:a9:3c:f8:c6:0c:9a:c6:40:36:d5:05:
                    6e:2d:ae:b9:bb:af:cc:0f:71:be:97:5f:15:9f:8c:
                    04:78:2b:4d:2e:ed:7b:d1:a3:25:c6:cd:f1:1c:2b:
                    fd:2c:22:dc:e4:84:fa:a0:1d:57:a6:bc:4e:75:ac:
                    cb:c9:39:39:60:2b:c3:2a:3d:de:b5:36:db:78:86:
                    65:cb:23:4f:6d:80:cc:21:3f:13:8e:27:80:d8:f8:
                    2c:ad:b1:4c:61:91:d4:f8:a4:b9:ce:6c:4f:ad:3e:
                    b9:b4:5b:4a:4a:98:de:d2:17:bf:ae:b1:e5:0f:9f:
                    70:f8:9b:0e:99:74:b5:ef:c9:4c:e8:e9:c8:a7:d8:
                    35:d4:23:19:06:99:0f:3e:24:93:69:d2:eb:cf:37:
                    5e:1d:23:ac:9a:74:e8:0c:08:6c:e5:6b:b3:ec:15:
                    b1:4b:41:56:8d:19:47:84:e6:92:c3:ce:e2:28:e9:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:66:88:F2:0E:8E:02:DD:A7:01:65:55:FB:B3:76:64:8E:28:A5:20
            X509v3 Authority Key Identifier:
                keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b7:a4:fd:46:ac:6a:00:4b:64:2c:c6:fd:97:61:6b:e1:ac:
         67:6d:dd:d8:5f:1c:f8:f2:b4:59:eb:d7:13:9f:50:00:56:7d:
         33:28:ca:d3:17:dc:58:2b:2f:9e:b5:a0:f0:2a:b5:20:70:36:
         9e:fb:e3:b7:49:1b:00:a5:8d:e4:67:47:9e:d5:7f:73:e2:73:
         f4:91:22:90:8b:1c:07:b3:c6:81:35:13:44:1a:3a:bd:f1:89:
         64:f2:9e:25:f5:f4:16:f4:ed:60:aa:1c:5f:ec:d0:10:5c:3e:
         15:5b:9f:ff:e4:19:5c:7c:58:c9:94:c1:c0:e4:15:08:66:a9:
         bf:b1:1a:7a:20:d1:82:28:21:82:4b:ef:9a:58:cd:bc:d1:2a:
         8f:7c:e5:fc:b9:f5:5e:2d:ba:18:13:ee:d5:f7:1b:cd:d9:3c:
         a7:c3:ac:a2:0f:80:fe:6d:c1:cf:11:d4:a2:aa:e9:c1:bf:f8:
         67:d1:ec:5c:25:52:b3:e7:17:c7:e3:08:10:f4:98:64:f1:26:
         1a:72:95:ff:fc:48:20:b5:cf:bc:e7:37:34:60:da:3a:89:94:
         bf:e0:73:4b:9c:94:7d:80:30:a3:e3:f1:ea:a0:30:43:5f:77:
         c6:bc:1e:f7:9f:4f:0f:f5:4e:1f:63:d9:75:4d:d5:26:97:6d:
         cc:7c:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:13 2026 by rpki-client