Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          QOPsZRF0hWxFntHza7yigXrYnbuIWBZ8d8Mt/dRxzfQ=
Subject key identifier:   68:6F:E2:A2:D3:70:A7:58:18:BF:3F:FF:09:16:58:6E:B0:BD:24:30
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       01A175B935C37460E7B621F641BDB3755390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          0A4A
Signing time:             Mon 26 Oct 2026 01:00:34 +0000
Manifest this update:     Mon 26 Oct 2026 01:00:34 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:34 +0000
Files and hashes:         1: 1MgOvVYS625zLZr0pYcAc_RYnck.roa (hash: KLucCpMsOnM4RVzjVFHmx+L/GQ7weJQIzjYzFg6y9OY=)
                          2: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: pW5GCmjTo/D3YDYGrMly7LBA5+HpxVvUfTEEot1WUrg=)
                          3: 8F8L8owaFRCyZZEp_-hHKAx7UA4.roa (hash: 4LuFlAc6nwjWSNlcmIBkZzcWiRqOGHRGDYH2lVGI9nI=)
                          4: fiv0OI-AqtRVVrzWS5rFRgZaVys.roa (hash: oh8Kp8XMS/i+hHdda1I22uBBGuzEAYFA2en/nHrlnSs=)
                          5: t6lgkHq_yX1UUQpXP9q-fixqi2U.roa (hash: 9jhzSx3sRpcWk1SmGy5yNN1p0fpW4FrfXA1QrYfjQi8=)
                          6: t8aFQS7lWhuM_-J21qq8wpHr948.asa (hash: IcDTJWBpBF8MZ144faOgduVI2vqGFOUYWFm0kF+tK60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:35:c3:74:60:e7:b6:21:f6:41:bd:b3:75:53:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Oct 26 01:00:34 2026 GMT
            Not After : Oct 27 01:00:34 2026 GMT
        Subject: CN=686fe2a2d370a75818bf3fff0916586eb0bd2430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:dd:f1:c7:f2:86:a8:e0:7e:c1:fc:31:b5:
                    a7:da:cc:79:8a:f8:6d:bf:dd:f6:2a:00:63:f8:f8:
                    f6:33:9f:35:49:ac:c3:df:99:fe:00:61:f0:3f:79:
                    32:b5:43:d4:17:47:d9:b5:14:09:b2:4a:e5:7c:da:
                    9e:c4:27:04:a6:ef:98:de:a3:a8:48:d2:44:df:9c:
                    5f:7b:a3:b6:9b:3c:1b:17:0e:2f:6e:67:1c:e0:b9:
                    7f:29:a7:53:a6:e1:f6:b0:d6:db:24:fe:18:9f:eb:
                    7e:f6:71:85:3f:47:c3:06:e3:59:78:67:69:12:a9:
                    10:c7:e2:c0:7f:d4:2f:fd:4f:42:7a:27:29:62:b3:
                    56:6e:c7:6e:6a:97:36:dd:87:15:05:89:bc:6a:5c:
                    dc:a1:45:e3:39:a5:34:59:f7:c1:7b:3c:86:3c:94:
                    51:e0:7d:49:1a:b3:8f:74:74:eb:de:70:3b:79:2d:
                    67:bd:28:39:98:f0:fe:08:2f:ac:ec:51:4f:9c:42:
                    0b:df:ea:31:ee:79:b6:74:76:1f:d7:23:31:28:a7:
                    93:b4:36:02:e9:00:ed:d0:fc:0c:00:e7:da:86:04:
                    a1:09:54:6a:1d:ce:66:7d:0c:3a:a7:4b:93:5f:7d:
                    6a:71:16:82:f0:7e:36:f3:10:c8:25:c8:e3:16:3a:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6F:E2:A2:D3:70:A7:58:18:BF:3F:FF:09:16:58:6E:B0:BD:24:30
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:10:28:29:3f:0e:be:f5:13:29:71:f6:8c:83:96:4b:f3:aa:
         ce:3a:e1:72:c1:3e:e7:4e:fb:98:38:c5:59:c8:61:fb:26:8d:
         53:ba:15:9c:b5:7a:0c:8b:98:0c:fb:3b:84:d9:37:ed:78:05:
         ba:18:af:ef:af:93:84:70:97:7a:0c:48:98:3e:1a:b2:dc:ee:
         80:4a:c3:a0:ee:b9:b5:8e:1e:d9:44:56:35:a5:9e:41:b6:f1:
         49:1d:9e:90:57:b0:19:58:2a:e1:8d:43:1f:7b:e7:43:d6:76:
         49:b5:f1:f2:44:a9:7a:1c:8e:05:21:8c:d5:75:c1:0b:5a:ab:
         47:02:9d:48:1d:57:fb:76:ae:2d:cb:18:2b:42:c7:bd:21:dc:
         ce:37:67:5d:98:07:9b:32:f0:59:79:0c:a1:ae:1b:10:48:76:
         d7:29:09:d7:27:c8:a8:f2:30:46:ad:0c:e8:a6:74:6c:8d:99:
         72:c4:81:3d:71:22:9d:89:f7:f2:51:f5:9d:7b:6d:af:d2:bc:
         30:bf:5b:b9:70:97:30:c1:ef:28:2b:c0:d7:f3:78:45:08:e8:
         da:91:0c:bb:f8:84:b6:70:15:de:d1:3a:d4:ef:a8:84:d9:ff:
         c1:a5:6d:88:09:3f:2f:c5:b9:65:d9:c0:83:71:b7:69:03:16:
         0a:45:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:08 2026 by rpki-client