Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          cmxGpFtGcRhxCjgWs9c/+vJRU0xpLaRZIn2xzbYCZ7w=
Subject key identifier:   F2:7D:8C:C7:75:19:F5:56:6B:98:3B:CB:9A:75:E5:73:66:7E:D4:05
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       01A12DD748C70CAE8A700AC532CE699EEC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          1AA0
Signing time:             Mon 12 Oct 2026 02:00:45 +0000
Manifest this update:     Mon 12 Oct 2026 02:00:45 +0000
Manifest next update:     Tue 13 Oct 2026 02:00:45 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: 0DYeHbzKwMriaEGiV7LosQLseWp9ToO0sKx97Z1YgFs=)
                          2: 7BfkeHY1c9ITTq9g1k9WZ_nopSA.asa (hash: WmBn1Lg+ApCIR17z2ta7o3ItFSZqllaqVi6a0oV3jKE=)
                          3: EQUgl00EZFitLJ6oysydLWzSpDI.roa (hash: YdDTBE8waxg/izLbB0CYt1PqKhzSZ1hn6bGE3MrL1iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:d7:48:c7:0c:ae:8a:70:0a:c5:32:ce:69:9e:ec:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Oct 12 02:00:45 2026 GMT
            Not After : Oct 13 02:00:45 2026 GMT
        Subject: CN=f27d8cc77519f5566b983bcb9a75e573667ed405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:58:70:63:f6:a2:02:3f:98:c3:0b:93:75:
                    bf:f9:b9:63:5d:5f:4e:cc:c6:c1:b9:e1:35:4c:ef:
                    86:15:dd:6f:87:f4:1a:95:b8:d4:1d:89:d7:5d:b5:
                    ee:f9:39:22:21:37:c3:72:89:68:bd:e5:ad:e8:30:
                    0d:4c:0c:05:5a:61:c1:0b:90:d7:c4:ef:ab:29:2a:
                    8f:9b:76:0c:9c:51:43:de:e8:ea:62:24:f6:e4:27:
                    71:1f:ee:c7:39:a0:63:d0:f5:49:0e:80:be:ac:06:
                    bf:c3:d7:60:22:58:27:cb:a5:d0:00:1a:c7:92:6c:
                    7e:21:68:ba:78:00:8a:40:bf:cc:e7:24:c3:a4:1e:
                    f1:6c:4e:05:62:ab:62:3e:9e:08:6e:b1:be:33:d6:
                    fc:a8:30:0b:ce:fb:33:70:a8:2f:92:dd:5f:1e:65:
                    fd:d6:5c:b9:77:2a:7c:6a:3b:30:5c:46:55:d6:94:
                    e9:43:5c:5f:ac:58:b9:85:88:6d:cc:ba:84:af:2b:
                    88:42:dd:ac:46:3f:9b:dd:04:ee:82:30:09:2b:c4:
                    01:bf:ef:aa:41:b1:22:92:b7:aa:0c:b0:34:52:12:
                    fe:c2:e0:c4:59:fe:45:93:d5:96:d0:64:b4:cb:87:
                    2f:91:ca:2b:36:d5:9c:2c:7c:d8:b2:ce:fb:d9:9e:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7D:8C:C7:75:19:F5:56:6B:98:3B:CB:9A:75:E5:73:66:7E:D4:05
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:55:78:02:ac:09:be:4a:06:34:02:9f:8c:70:a2:02:a2:6b:
         6e:36:96:35:98:81:01:30:e7:ee:8e:ab:cb:ab:2e:11:21:07:
         a2:09:74:ba:01:96:fb:2c:5b:be:2b:0f:20:e1:ae:66:f0:83:
         2e:c5:f1:dd:0c:e8:09:96:47:12:6d:a4:b1:9b:a3:4a:80:8b:
         25:af:6e:f4:7a:65:fd:9d:83:6b:18:2b:d8:72:eb:e0:f8:bb:
         cd:e0:38:ec:d3:12:c5:52:3b:73:15:ba:00:2f:30:d0:b7:38:
         83:c8:6b:24:5e:2f:c5:5c:b2:bf:a2:40:1a:f6:5f:73:8d:de:
         52:a6:5d:3a:39:eb:6d:0b:4f:79:23:95:76:57:55:3d:5d:23:
         8a:53:ef:4c:cd:f9:fd:c0:74:97:dd:fc:8e:3b:53:63:6d:5e:
         c1:56:99:49:94:84:38:29:c8:65:b0:ef:70:83:c6:b0:5e:cc:
         f6:53:63:e0:d4:68:fb:8c:06:11:05:8b:8f:35:81:a2:61:46:
         8a:0e:2c:8a:d3:30:2e:a3:fa:37:57:cf:55:65:51:d0:03:f8:
         b4:05:cd:ec:92:eb:96:cd:1a:5b:79:0e:81:f9:7c:68:61:46:
         d5:78:93:bc:fd:3e:83:9b:a9:ab:25:08:d2:ef:d6:01:21:84:
         5a:7b:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:22:36 2026 by rpki-client