Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          9wGePh+hgZELOVR3aMClQ3crdyQKKpeCCPqhTrYYcqQ=
Subject key identifier:   51:A1:83:2F:8E:22:B0:E9:5B:81:80:20:E7:92:5A:7E:92:D2:73:32
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       01A0F7FBF0AECF0054283722968B20F83CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          0AD4
Signing time:             Thu 01 Oct 2026 15:01:18 +0000
Manifest this update:     Thu 01 Oct 2026 15:01:18 +0000
Manifest next update:     Fri 02 Oct 2026 15:01:18 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: zwokC2DAavdPo7DVfr37+7kwKPRPzYym5kBtQjYZtko=)
                          2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 15:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:fb:f0:ae:cf:00:54:28:37:22:96:8b:20:f8:3c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Oct  1 15:01:18 2026 GMT
            Not After : Oct  2 15:01:18 2026 GMT
        Subject: CN=51a1832f8e22b0e95b818020e7925a7e92d27332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:6b:b4:da:2e:3c:6a:3f:43:aa:4a:b3:77:
                    19:9b:62:3e:8d:03:83:66:68:9d:01:cf:e9:82:38:
                    bc:1b:a6:05:37:12:1f:35:87:ea:f5:0f:a7:5f:5b:
                    9e:f8:9c:73:99:e3:7f:9a:54:61:0c:b5:a1:68:6d:
                    b9:cb:25:a2:6b:ad:30:d1:10:87:ef:27:d2:b5:0b:
                    87:17:ab:2e:b4:ba:f3:88:3d:d5:1e:5c:2f:99:51:
                    e7:0e:64:a8:f6:d6:ac:d7:80:fe:2b:73:80:f3:f4:
                    8b:c0:b6:05:68:38:1a:28:ee:10:58:fe:ea:a4:25:
                    7e:1e:3d:94:a3:16:da:57:c3:2f:06:35:c1:7e:8d:
                    bb:d6:f4:f0:79:75:be:4f:dc:38:2b:8d:6e:58:67:
                    11:59:47:1e:2f:7a:f8:f4:18:5f:c5:e5:4f:07:c8:
                    1c:ad:6d:29:eb:15:d5:c9:16:12:cc:d1:7a:b7:5b:
                    95:54:7c:32:92:dd:ef:f3:34:4b:e3:44:80:d1:eb:
                    c5:0d:8b:23:3b:db:95:ec:61:2d:f9:b9:53:1a:ff:
                    a6:20:77:2a:8f:a7:e0:f2:f4:07:ec:64:d0:af:80:
                    92:03:5f:a0:01:84:08:e8:b7:c1:be:50:ce:e8:20:
                    77:5d:60:60:0f:81:b7:9f:4a:6c:38:22:0b:4e:0c:
                    af:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A1:83:2F:8E:22:B0:E9:5B:81:80:20:E7:92:5A:7E:92:D2:73:32
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:e6:a3:2a:39:e8:7c:03:27:74:a7:ef:09:a0:d4:e7:e9:
         39:7f:cc:b7:28:83:88:25:0c:9a:d2:35:01:1e:12:75:fc:63:
         8a:f7:0c:a0:26:4b:24:d3:6b:4e:e4:a6:6a:21:c6:9f:4d:f4:
         21:15:50:3f:f0:a0:6e:3d:8f:ba:87:ba:b6:ce:05:1a:9a:8b:
         20:3b:b0:cf:41:0d:2a:f0:66:58:dd:d4:7f:eb:74:41:b1:0e:
         44:e4:4e:14:ed:6a:4d:04:04:4b:98:c9:5b:1b:d4:7a:be:53:
         8f:fc:d1:25:d9:58:cf:45:b0:c9:f6:1f:08:72:3a:f9:e0:ea:
         d6:0c:66:34:b9:70:3b:91:3b:7c:59:c4:56:9c:8e:20:2e:a0:
         3b:0a:1c:6e:0a:82:ae:14:80:49:c7:c5:8e:4d:33:af:27:ae:
         bd:31:d0:8b:f7:89:5d:7c:b0:ca:a3:3b:80:ab:70:80:cc:75:
         b6:1c:c7:f0:98:f5:97:a5:1a:ba:95:1b:4b:e3:ed:4d:89:31:
         65:a5:05:76:d1:70:f9:47:4e:af:d6:62:b3:99:e9:01:21:66:
         82:8a:1c:06:8b:cb:bd:e4:bb:b1:83:9b:42:9a:58:c6:c0:0a:
         3d:06:5a:29:69:1a:40:c1:11:2c:07:c3:a1:1e:e2:cf:56:07:
         59:07:01:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:48:36 2026 by rpki-client