Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
File:                     x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft (raw, json)
Hash identifier:          uuVGEZBS0xzOHPdrxIRArizV+qy8wOO/RP+bYC9KJVA=
Subject key identifier:   13:1B:1E:6E:87:AF:99:3F:D5:F7:0D:74:23:C2:15:10:04:E5:6C:5C
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Certificate issuer:       /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial:       01A16C112B0680AB1AD6C1252C5F7CFDB0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
Manifest number:          140F
Signing time:             Sat 24 Oct 2026 04:00:26 +0000
Manifest this update:     Sat 24 Oct 2026 04:00:26 +0000
Manifest next update:     Sun 25 Oct 2026 04:00:26 +0000
Files and hashes:         1: gnw06N0gGBhicL_ONKvoP4ddQbU.roa (hash: 4gwJwDTmq+vkyn3oS5mRGQ3lROpbTUw7uW4+i/6DJjc=)
                          2: kpH5WlJCrMlmeeDd1J72A3S1E9Q.roa (hash: x6Dsqlz32ptPq4ZLP9ca9ot80w2DB6vu3sGi4SsF0p4=)
                          3: nZFYyUW-U0GOW9DpQejYoKAABk8.roa (hash: A9mI4AyUEreH1zF5qVOwvuDaDAKnjfc/wviBAZmJU6w=)
                          4: rqNF1I8XEuKDsKwv-z0vODcozOI.roa (hash: XEf3TPaRLCkLG6LuuSH50p5GGro0k1ye4U4n69uzWYI=)
                          5: x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl (hash: oRDt1F3oyx2B6Y11RId1lEhNIxeKXRz5X84EHT0R9Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:11:2b:06:80:ab:1a:d6:c1:25:2c:5f:7c:fd:b0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
        Validity
            Not Before: Oct 24 04:00:26 2026 GMT
            Not After : Oct 25 04:00:26 2026 GMT
        Subject: CN=131b1e6e87af993fd5f70d7423c2151004e56c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:94:53:2b:f3:e3:22:a3:c5:aa:1a:05:53:
                    91:4e:6f:39:72:ac:62:a4:16:d8:40:21:a6:89:a4:
                    d0:82:69:8b:31:3b:2f:4c:df:ed:c9:5f:c6:dc:69:
                    70:25:c7:92:2d:f8:5a:5c:57:a2:1b:87:31:a4:63:
                    51:b9:3b:8e:1b:c5:24:d2:5e:7b:90:cb:9a:fc:89:
                    1d:58:7d:3e:34:b1:cc:b1:41:b4:97:4d:7b:6a:1d:
                    fe:d1:aa:33:b1:fc:8a:d9:21:e5:6c:51:c5:fb:b4:
                    3d:0c:eb:f7:40:b3:8b:61:a6:8c:c7:01:e5:99:5f:
                    30:42:08:79:4a:64:79:a6:36:ca:b8:6b:fe:59:fe:
                    d3:6a:35:78:e2:fd:61:3a:74:88:fd:40:31:b3:b2:
                    2f:6c:8e:99:5a:c7:f6:64:38:cd:56:fb:34:5a:3e:
                    0f:07:9d:0e:10:f0:bc:c9:9b:16:ef:0f:04:54:50:
                    42:2e:b4:bf:4b:f3:ac:0b:04:f4:7a:2e:e0:1b:bc:
                    75:be:87:88:48:14:30:ce:d0:a1:e0:59:41:90:49:
                    cc:1c:b8:f8:e9:40:cc:8a:7b:26:7e:25:a0:2f:5e:
                    d9:43:64:7c:08:53:17:30:28:c3:13:9a:fe:c3:0d:
                    bf:e8:1b:93:e4:ae:a4:76:5f:70:b2:58:86:e5:e8:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1B:1E:6E:87:AF:99:3F:D5:F7:0D:74:23:C2:15:10:04:E5:6C:5C
            X509v3 Authority Key Identifier:
                keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:54:b8:ee:66:29:1e:da:99:9c:88:8d:ac:c2:b4:ff:15:a7:
         cd:5f:84:46:dc:e3:2b:6c:a7:f4:6b:24:0d:66:1c:4b:fe:d5:
         7b:38:90:54:80:b9:90:9e:4e:91:84:64:3f:84:8f:07:c2:1a:
         f3:48:6e:18:f2:12:66:c4:d1:63:8b:7a:6a:bc:00:50:0c:b6:
         90:13:7a:b1:a3:cb:70:64:bd:2c:2d:ca:27:20:72:37:40:bf:
         94:23:c5:7f:79:dd:a8:10:f4:d4:a9:a8:7e:45:80:56:37:2a:
         3b:24:48:4a:65:b7:5c:d6:a9:0d:79:ca:25:0d:aa:da:c5:bd:
         78:d9:ab:a2:75:ee:0b:73:da:f7:b6:e7:7c:4b:bb:2a:71:02:
         4e:67:99:fe:5c:3f:6e:56:4c:2d:23:f7:31:04:4e:d4:7d:58:
         c0:68:78:3e:11:bb:b0:bb:71:72:8a:29:6c:bb:5e:f9:d0:f6:
         dc:95:d9:b5:a4:ba:34:f7:a8:c6:6e:39:db:37:c2:1f:b8:65:
         db:f5:ee:35:10:c0:f2:8d:de:49:58:e1:7a:a2:e0:c4:ac:d4:
         c9:93:e4:65:11:a5:cc:b2:ec:68:66:bc:f8:74:c6:e7:12:9a:
         60:8f:84:43:1e:52:a2:1f:9f:d6:c9:73:a0:08:19:80:c5:87:
         5a:63:a5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:18:14 2026 by rpki-client