Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          nlX8WH5ahj/OzpmcaEfWNDkybo2iNr0drYk+W3v76DA=
Subject key identifier:   2F:E7:09:7F:AB:51:F4:B8:6D:F0:3A:73:BA:6E:D9:F7:2F:F3:60:06
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       01A17E4EC2B395714AC8AFC3BA6CA3F65809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          1AEC
Signing time:             Tue 27 Oct 2026 17:00:53 +0000
Manifest this update:     Tue 27 Oct 2026 17:00:53 +0000
Manifest next update:     Wed 28 Oct 2026 17:00:53 +0000
Files and hashes:         1: 3QvNaBTxs1PjLqnE1VOIhI45V7c.roa (hash: WFmXAUAeTAg/52UhkkFJsciHEc280mGsBIoSVtzTk+c=)
                          2: 5ERvaJCjijofjZEEyshS2DN7G8w.roa (hash: L0qBBv8W1SeaQxwY+yM3qe9nhTQXTw1BhXzcHvSUW8A=)
                          3: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: SfIk9wW2qPkU8O4wAOTs0C8lKMEOjh10cXHXEP1WTZI=)
                          4: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (hash: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI=)
                          5: 9aKkqtdGa1ABukMG_yLakFtZfm8.roa (hash: KrI6Pr1fZmvsqfb7nSDh5Zvb9gr8g8QjzGikzHidhBA=)
                          6: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (hash: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4=)
                          7: Kg1pxmiChPV6fz5fVLcqDVZPGVA.roa (hash: SRNE2+sx9FNGp2a8VnJm35Y0pORouHxk0y7BXf1WH74=)
                          8: LD-3cK94EujojZ7ZiN9ZmU7leBA.roa (hash: cS7YGfmXGTnX+pBKgNWgV7kZw2s1r4jfbn1oYwmWhSE=)
                          9: LDB6M5jKAUAX0pW_Ow6Al3r3TVc.roa (hash: 0871MmeimwA3qa6fuNCLnFf75uwna79ZP/U6WsupA/A=)
                          10: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (hash: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=)
                          11: QwRlOQcYxSvdN2FJpOpcXHAZE5I.roa (hash: JFqMAVJTjeNtNUVkPs0ekqTe1vs1PCY+bp6cGNGb31A=)
                          12: RVyoE2mNMNeL3FMAr2YC6ZIeUpc.roa (hash: Mpj7iy2/6clWPzb2aVRARaYOeEI5SbFcnwOqd9+kHL4=)
                          13: Sjw15gl8TsiPxYWGxwle5yVmVpI.roa (hash: KyfTMSv87/ffxlDqBdVXEjJETz4cQjnD5+jWHw/lzng=)
                          14: SvEm-yXVhiOKZ90phjAW_AA8ALc.roa (hash: 7Oq7qPwBODUfGC8UgiLRJC3+bMOGG/2kfdhFT0x3Ngw=)
                          15: UOozdgMWkk0RJwT79mq5mSwdurM.roa (hash: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A=)
                          16: W80Mf4_ivkezZ0bshb3ksFAV6PY.roa (hash: GvDsjIe4MFxa+3NX/qnfQlgFppPBUAANoYbReZaXdUk=)
                          17: aWg21xYS3AUVunbtCCZYY0IE-qA.roa (hash: FfCb8eVmyUDpcRLrhqbLVf0Nu60pvL/vFuk4kk28e1o=)
                          18: dNvl41gDXbZfsDZ9RFpBvP6cYow.roa (hash: NaucFK+oQglGEexzweska9RmpWnDV2Wpe/l4R51xpK0=)
                          19: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (hash: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo=)
                          20: gb92OyPtFV8ggf63vEi-KCDdf-s.roa (hash: +rhI/ux5CfxH5KWi60cOU2i3sB6AO/30yOzY/E/1xts=)
                          21: hQ2GFL3dnEKzJSAPLs1axACh1nE.roa (hash: XfsYyUXshVaU5kesRq6m5zdn9J6jCqEigoDtxpwvnck=)
                          22: iHwdh7RQbqHYXi1tV5PT6-9KMZc.roa (hash: Vt5thfBB9WwucwEL2pJBtrKMfJA6iF3TBVYycl0yvI0=)
                          23: m5mX7hMQbCWq-GlbxcSu3T6pYEk.roa (hash: iTzlGtzNibw71SECgWWAtWLsGGjMg9WIxNFV2xfi6y4=)
                          24: mdu1Exn0vcwhf2D-oUz3A06rLz0.roa (hash: dkzkWhkhgt5FRBH7GshJAC2Twq+nZCCBlUCXlmzP+Ks=)
                          25: nVYscJl5lSrsIHBCJc12P0YYc1I.roa (hash: Qaq790oVJnBvnSmkP1Q9R1yIhbQhRqgrmHzuuPyL64c=)
                          26: quu8bKvWsrapvb9agdJWOzx8vCU.roa (hash: GuhXE2SWFgsGNwW07uZU74XAQZgfH3lzNUDa1zFBJKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4e:c2:b3:95:71:4a:c8:af:c3:ba:6c:a3:f6:58:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Oct 27 17:00:53 2026 GMT
            Not After : Oct 28 17:00:53 2026 GMT
        Subject: CN=2fe7097fab51f4b86df03a73ba6ed9f72ff36006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:36:fa:d2:95:db:e6:85:60:c1:cc:9b:17:
                    35:21:79:42:ff:19:72:ae:50:8c:99:8a:a6:95:95:
                    61:49:71:78:33:95:f1:94:6b:ad:b5:0d:f5:d2:9f:
                    85:13:bd:5d:db:b0:f7:b7:8c:37:21:b7:65:81:cd:
                    a4:88:12:23:02:06:0f:b3:4b:1c:c4:da:e9:a4:f6:
                    9e:24:ab:fe:57:e4:ee:8a:bb:28:3b:1a:54:87:03:
                    bc:44:ee:6e:80:c4:bb:bc:d3:e6:71:8c:b4:87:06:
                    f4:06:41:a3:af:7a:cd:c4:17:8a:18:ad:1f:a9:f9:
                    25:b9:c7:b8:2a:df:b1:44:37:f4:53:3b:90:fc:a3:
                    33:9f:9c:20:98:8e:87:9f:2a:9f:59:34:09:67:c9:
                    bc:6d:3e:f7:6e:d6:2c:da:b1:ba:12:44:d8:44:26:
                    36:11:8f:47:cb:4f:ed:ac:39:af:f7:d5:a2:c7:e4:
                    8e:66:1a:dc:fc:85:91:fe:4d:7c:18:f2:58:70:78:
                    fa:83:4e:0f:16:59:c5:21:52:c4:9b:de:61:64:f7:
                    1e:29:ef:98:6d:7a:96:d5:f8:b2:2b:05:19:c5:54:
                    e9:66:36:07:09:45:6c:62:be:bb:31:10:34:1c:6e:
                    30:fa:91:cd:bd:e0:cf:08:48:27:0b:42:b0:26:e2:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:09:7F:AB:51:F4:B8:6D:F0:3A:73:BA:6E:D9:F7:2F:F3:60:06
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:46:b6:f1:72:19:d7:4f:37:64:22:65:00:d5:fc:17:fb:47:
         d0:57:64:46:55:9a:f7:f1:ed:21:ae:ca:75:be:25:44:99:97:
         cd:55:16:f8:c0:d3:ac:43:99:da:bd:8c:b0:d2:6b:23:23:ac:
         64:6d:c4:27:8c:fb:b0:34:a7:e7:de:30:4c:55:6d:4a:74:91:
         2d:5a:af:3f:52:c5:ff:ab:e2:7f:26:1d:e6:d2:5d:b4:c4:5b:
         24:85:5f:59:0b:d4:ce:fc:a3:65:15:9b:a0:5a:04:41:20:60:
         bc:fd:ff:02:ea:b8:42:ac:8f:53:82:4a:29:dc:a1:be:c9:b1:
         34:9e:a5:fd:36:7b:29:36:e3:08:c5:f4:84:2b:fa:09:a2:94:
         07:0e:af:11:29:03:d8:80:e2:b8:d4:87:ff:ef:65:ed:38:fd:
         3b:8f:45:84:01:f7:59:40:2f:e4:c5:47:46:51:9a:fb:9a:a7:
         a3:3b:10:bc:83:24:b9:26:6d:30:09:b2:93:40:58:15:5d:52:
         6f:c6:3e:95:7d:c8:eb:24:40:55:72:8b:35:d1:c6:fa:8b:3a:
         91:36:82:05:02:36:29:2f:d6:72:aa:ca:7d:da:00:a3:6e:cb:
         da:19:30:3f:41:40:ff:0b:b2:57:ed:71:d6:07:fb:f9:20:13:
         14:1d:41:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:15 2026 by rpki-client