Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
File:                     6xU9o8JM4SNuIMRoYWNdyO-1apI.mft (raw, json)
Hash identifier:          SfI7od/OMMEvTvdkRp9LxaQansF/XIBqHSg97xrCECE=
Subject key identifier:   46:FC:A2:EC:F2:92:4D:EF:F2:05:54:57:56:96:32:C8:EF:96:9E:DB
Authority key identifier: EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92
Certificate issuer:       /CN=eb153da3c24ce1236e20c46861635dc8efb56a92
Certificate serial:       01A181500ACB9898F8A873C19E3A10B34F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
Manifest number:          11AE
Signing time:             Wed 28 Oct 2026 07:01:08 +0000
Manifest this update:     Wed 28 Oct 2026 07:01:08 +0000
Manifest next update:     Thu 29 Oct 2026 07:01:08 +0000
Files and hashes:         1: 6xU9o8JM4SNuIMRoYWNdyO-1apI.crl (hash: kgEyCuG0Pvdb7MOK4YGK1PVz0wqDA4NW7gZ+aUJw4zk=)
                          2: BHtYTKXAhvuK5qQH2dMZrKgOMHg.roa (hash: x0aDgSbM0k6Qn4DXz0HQEQO8d3rc25aCpgfGk0kEatY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:50:0a:cb:98:98:f8:a8:73:c1:9e:3a:10:b3:4f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb153da3c24ce1236e20c46861635dc8efb56a92
        Validity
            Not Before: Oct 28 07:01:08 2026 GMT
            Not After : Oct 29 07:01:08 2026 GMT
        Subject: CN=46fca2ecf2924deff2055457569632c8ef969edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:5a:e6:a2:65:74:6a:1a:40:e2:e5:1b:5b:
                    bf:8f:9c:78:1a:26:bf:9f:7c:06:2b:5c:dd:2e:7a:
                    f1:b4:c6:fa:16:46:a3:3c:d7:17:57:1b:3d:af:a8:
                    d3:2c:d9:7f:04:ff:71:25:7f:69:0a:43:ed:d0:5a:
                    fb:01:3d:b7:56:e2:61:fe:c4:1d:65:62:67:8e:56:
                    98:1c:c6:1d:bf:38:ef:94:56:7a:2c:a6:8d:eb:bb:
                    14:5d:de:45:5d:7f:d0:d0:37:6a:2f:d4:95:03:e9:
                    26:41:4c:cd:f2:36:7c:9e:26:01:f3:cc:a9:c7:5d:
                    68:b5:c9:d2:8c:a2:6a:31:78:7f:3b:4e:4a:5a:c1:
                    61:26:09:72:7b:d6:ca:d3:9d:6e:73:18:08:0e:f4:
                    06:7a:7c:27:e0:5c:ec:7f:76:c4:da:18:ab:be:48:
                    e7:a6:40:e2:26:77:f9:e3:68:e7:fb:2e:81:24:9a:
                    d5:4d:3a:5a:95:09:77:d8:d7:56:9c:d5:58:3f:9f:
                    bb:16:45:fd:05:a8:f2:d8:0a:9a:f6:04:97:f5:75:
                    6d:88:a8:b0:ad:54:e7:3e:60:c7:6d:20:40:66:cf:
                    cc:33:d5:a8:c2:0a:d8:17:55:39:ac:8a:bf:b8:22:
                    19:6b:cd:7b:41:d1:1c:cb:24:fc:1f:d0:1b:79:67:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:A2:EC:F2:92:4D:EF:F2:05:54:57:56:96:32:C8:EF:96:9E:DB
            X509v3 Authority Key Identifier:
                keyid:EB:15:3D:A3:C2:4C:E1:23:6E:20:C4:68:61:63:5D:C8:EF:B5:6A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xU9o8JM4SNuIMRoYWNdyO-1apI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4bb067-c365-452e-a93e-39da1ae8b731/1/6xU9o8JM4SNuIMRoYWNdyO-1apI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:24:ac:82:c1:09:01:d3:25:f4:24:a8:d8:14:84:b4:97:
         62:e5:c9:2d:30:f1:0f:4b:fd:6c:6d:da:d8:0b:90:bc:b5:f2:
         e4:6a:52:45:19:c4:fe:a5:ae:d2:af:c4:c0:92:c0:e4:ed:5e:
         08:a8:8d:39:35:2a:9f:37:00:95:e7:c6:76:2b:27:91:b9:13:
         1d:9a:98:f6:85:55:fa:d2:be:1d:9a:9e:89:81:95:16:90:57:
         a7:51:0b:86:86:1e:73:41:df:5b:25:a8:ff:4c:bd:94:d9:ad:
         6a:9f:8e:7b:f4:26:8c:6e:7f:3a:43:36:10:e0:28:15:1c:ca:
         ca:dc:f3:41:65:e1:cf:b2:b7:dd:d5:cb:47:19:4a:c9:4d:77:
         c6:3b:c9:ca:1f:80:a1:4d:e0:5f:71:bc:39:3a:78:b5:e8:c9:
         09:c8:64:37:33:85:21:73:c2:75:e8:6b:08:ea:4a:57:56:7e:
         7f:f8:bf:69:f2:37:f7:48:17:ed:ea:c7:46:c9:7a:a3:46:43:
         06:70:4e:b7:d2:ab:01:78:0b:9b:4b:91:61:5f:5a:cb:03:4c:
         6d:1b:86:ea:52:d3:eb:3b:03:d6:f8:0f:3f:92:2f:af:db:e3:
         4c:31:c4:53:5b:83:e6:ab:65:a4:cf:7d:6a:ae:a9:45:78:4b:
         ba:6f:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:26 2026 by rpki-client