Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
File:                     t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft (raw, json)
Hash identifier:          gAVdM2sV9ej2p+5WSNXsc0s7TOck/CJloaJPGlxs3Pk=
Subject key identifier:   F7:1F:2F:56:73:37:3D:F2:B4:DF:DE:97:CA:1F:63:95:E8:9F:C0:74
Authority key identifier: B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0
Certificate issuer:       /CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
Certificate serial:       01A1795EB449639820FD06F595E44533FBA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
Manifest number:          1527
Signing time:             Mon 26 Oct 2026 18:00:11 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:11 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:11 +0000
Files and hashes:         1: 0lcAJcxkpyfEG67zvFLpBBWGRlo.roa (hash: D20ksOVfGRUnFokbm6FfRrXfye0JmM7Jy6FfAsNTS7g=)
                          2: t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl (hash: Z6r9oLBreQ0MGbWPuR0Gvh7pB2UXqZrM/7r+aERhdHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5e:b4:49:63:98:20:fd:06:f5:95:e4:45:33:fb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a230316b3e258e9255f46b20802ae2f3cb46a0
        Validity
            Not Before: Oct 26 18:00:11 2026 GMT
            Not After : Oct 27 18:00:11 2026 GMT
        Subject: CN=f71f2f5673373df2b4dfde97ca1f6395e89fc074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:5b:49:1a:9d:4b:d5:7e:de:1b:01:8a:ae:
                    65:c8:1e:56:1d:26:d1:2f:ff:87:64:f1:78:90:e4:
                    7e:a0:e1:52:cc:ab:8b:46:49:a5:b4:0b:db:4f:35:
                    e1:53:c2:a4:e1:49:d6:a3:d6:7b:1d:0b:e0:d0:2d:
                    19:95:19:3c:fc:87:45:6f:df:a5:8e:77:05:02:50:
                    32:7d:54:59:fe:44:d5:69:8a:ba:55:ce:47:75:18:
                    f9:4a:e0:1a:a8:0b:44:1e:0d:f1:8c:e7:fa:83:12:
                    f3:d2:96:cc:f8:9e:5c:9b:32:ad:7c:15:66:e1:d2:
                    2c:75:81:8f:1a:15:0d:57:ff:4d:8a:58:f0:6a:ea:
                    47:19:23:02:aa:b0:d9:d2:85:1f:70:8e:f0:c7:e4:
                    ca:09:29:fa:40:b7:87:3c:b1:ad:2b:b7:1b:07:1e:
                    70:e3:01:c2:62:4d:1a:98:ef:20:04:bc:5f:69:16:
                    c3:70:3a:19:59:cd:1a:0b:6e:25:2d:ba:2d:3c:d6:
                    4e:c5:f0:09:79:7d:b7:20:af:4f:c7:50:6c:2f:25:
                    56:1d:9d:36:ae:e2:2a:73:9d:03:87:47:36:c6:a7:
                    11:d7:b8:0b:ff:25:38:a5:24:ed:3e:a2:6e:cf:19:
                    0b:75:9a:a2:d1:b4:6b:3f:5b:fa:ef:7a:0b:9a:38:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1F:2F:56:73:37:3D:F2:B4:DF:DE:97:CA:1F:63:95:E8:9F:C0:74
            X509v3 Authority Key Identifier:
                keyid:B7:A2:30:31:6B:3E:25:8E:92:55:F4:6B:20:80:2A:E2:F3:CB:46:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6IwMWs-JY6SVfRrIIAq4vPLRqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7fe559-2f1d-47e8-8466-ef9135a2c82f/1/t6IwMWs-JY6SVfRrIIAq4vPLRqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:32:bf:8d:e7:d9:58:8b:49:51:ed:06:ab:95:b3:8b:85:99:
         8b:87:ff:bb:ec:43:0f:c1:3e:8d:60:5a:57:81:9d:37:3c:f2:
         6b:84:48:78:b0:e0:46:f1:c5:09:22:2b:aa:6a:b9:ac:8c:ba:
         27:ce:89:96:88:63:4c:57:d0:8f:06:01:ab:2d:0f:6f:44:79:
         e1:d0:f1:87:f4:ef:51:dd:6c:77:ca:8e:0f:e5:4d:94:ae:a3:
         88:49:eb:c1:3e:22:63:ce:2e:6f:e7:04:ee:69:d8:42:02:e0:
         31:cf:20:5f:0e:0a:3e:5f:30:eb:d4:36:85:f5:42:f5:d9:d7:
         f5:4e:e4:8a:b2:30:01:62:09:41:f4:4c:65:e9:48:eb:ae:02:
         5b:0a:5b:e7:8d:f8:94:14:db:8a:fa:7e:cc:1b:f0:ae:7c:c3:
         82:65:10:19:62:60:f0:59:49:d0:14:b3:4b:35:e1:28:d0:6e:
         ab:61:f5:90:69:ea:62:90:7a:8c:3b:fe:41:7b:6f:93:da:d0:
         4c:dc:6d:32:83:10:c8:92:15:88:6e:9c:be:20:d2:94:ee:8f:
         ed:a2:7c:6c:1a:f7:f6:1d:9a:83:4e:94:2b:0c:f2:a1:d7:38:
         03:2c:57:42:3d:2a:39:fc:ac:ed:34:b9:bd:0c:70:ec:84:71:
         4b:b6:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:09:16 2026 by rpki-client