Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
File:                     6Ul4d56TDgH7_n4MX8tBYREp1Og.mft (raw, json)
Hash identifier:          zkES+SDwnRivx+nxerc34YC44A9uEetVLoBAVYIR6zc=
Subject key identifier:   C0:52:D7:F1:4E:45:61:7C:75:ED:E2:93:1E:1B:66:4C:BE:F7:83:7E
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Certificate issuer:       /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial:       01A11BD0A79C286C54FA183A5EC56FEC8D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
Manifest number:          1AA1
Signing time:             Thu 08 Oct 2026 14:00:21 +0000
Manifest this update:     Thu 08 Oct 2026 14:00:21 +0000
Manifest next update:     Fri 09 Oct 2026 14:00:21 +0000
Files and hashes:         1: 6Ul4d56TDgH7_n4MX8tBYREp1Og.crl (hash: Jj+OCs6cSMffm4pclapicwrw/vuARjV6N+4m/IxcHa0=)
                          2: BGFPLk7ZldT6kSj2inC4qix-xtI.roa (hash: Noz95cmWs+k+wVGfQHBTa00dItJf0QaQtrsl4dLGxf4=)
                          3: Fa0kRYifVQx1ih9ljAG--S0xhdo.roa (hash: xDClJitXglcWv+daXM9auWd8dPPX+1tonc7rSHwTaTE=)
                          4: RzFwab2bz7rD1X-LudvVbNjO5mU.roa (hash: GwSOH4+cGYHAvcYmYqJUyTbBZaiHkn4iJ0qSxXFV6l4=)
                          5: ZNe0Xl8zEfZuTmVGimCb--629no.roa (hash: yJmE+qP+eDX9ILRziQ3wyT8miAz05JmtYTPQLAQ0NIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:d0:a7:9c:28:6c:54:fa:18:3a:5e:c5:6f:ec:8d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
        Validity
            Not Before: Oct  8 14:00:21 2026 GMT
            Not After : Oct  9 14:00:21 2026 GMT
        Subject: CN=c052d7f14e45617c75ede2931e1b664cbef7837e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:10:77:9d:d6:11:46:26:d3:08:0a:4e:ab:
                    de:f5:9d:31:43:f8:65:3b:a0:76:cc:8d:c4:8c:d7:
                    e9:74:48:c8:67:71:f9:f2:de:e8:a7:4c:4b:b0:be:
                    b8:de:81:b8:4d:1f:b9:f2:fe:17:90:46:71:98:06:
                    09:9a:25:29:7c:75:fa:0e:b5:fa:f4:a4:e9:62:04:
                    93:08:b2:2a:a8:07:a3:31:68:08:b0:01:04:05:95:
                    c4:7d:ed:87:44:0c:2a:73:5f:b7:06:25:79:54:07:
                    62:02:8c:2e:23:2e:d0:30:1b:bf:68:2a:2a:85:a2:
                    af:d3:36:d5:25:64:e7:da:51:40:5b:f4:da:6d:25:
                    17:f6:c3:19:e6:64:5a:5d:6d:7a:27:48:e6:45:26:
                    ae:d3:d5:58:52:61:3f:73:13:43:2b:c0:b1:3f:1f:
                    f2:a0:cb:d7:c4:7a:9e:ed:32:07:31:96:9c:70:09:
                    b3:bc:a4:a5:ee:8b:af:01:71:3a:b9:2d:6e:7e:b7:
                    8d:e9:15:5e:8a:80:e9:5d:84:f7:0e:a0:7d:f0:10:
                    b5:1f:dc:f2:48:08:e3:5a:30:ee:c2:81:96:92:bb:
                    c1:3e:ac:a9:39:d1:44:71:52:76:56:9a:d6:7a:e3:
                    b3:99:79:27:46:0e:98:b4:ec:b5:37:f9:52:cc:0d:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:52:D7:F1:4E:45:61:7C:75:ED:E2:93:1E:1B:66:4C:BE:F7:83:7E
            X509v3 Authority Key Identifier:
                keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9f:df:ff:16:d3:5d:f7:16:a9:c3:70:83:e3:8d:48:1a:71:
         5b:c9:dc:ed:3e:df:d2:a9:63:13:90:4a:24:a5:eb:6d:94:06:
         3d:76:0e:f1:e2:96:ec:52:79:bc:e1:96:5e:52:0a:3a:ef:5f:
         5a:1c:aa:d0:23:99:2f:d2:c0:3b:e4:78:42:c5:6e:0a:84:14:
         63:df:76:5c:fa:9f:61:b1:a7:1d:e0:a9:08:84:d7:f7:ff:29:
         47:b4:c0:b2:58:d5:c1:a7:6e:ba:33:4f:a0:77:64:e2:7c:0e:
         b0:b1:07:1e:5a:ed:24:4c:78:4b:25:cc:e8:29:1a:a3:e3:56:
         32:2e:83:77:23:23:d6:ca:68:b1:5c:62:d7:a4:3e:bc:4b:ca:
         c9:26:23:57:bf:ab:a8:f8:d1:2b:f9:4d:68:9c:39:47:b0:09:
         fb:e1:04:bc:df:a9:8a:db:98:3c:5f:78:70:f3:09:d1:b4:91:
         6d:e7:75:a5:37:ff:1c:95:cb:ac:aa:16:69:19:9a:35:0d:35:
         fe:9b:ad:97:0e:25:b3:3d:d0:e3:36:02:7d:9f:c2:1b:71:53:
         63:55:84:d8:92:1f:75:4a:8c:ae:1a:81:80:6e:58:c0:eb:b2:
         ea:2e:ec:0a:21:dd:d6:ec:0e:55:00:0e:8c:4f:5f:11:b8:4b:
         92:fc:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:27:15 2026 by rpki-client