Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
File:                     6p_5HGsceo7QKEKyXJsNBjipBCQ.mft (raw, json)
Hash identifier:          5Hmh+LkL8Z1x00gmUyRudQE198NrddclhJQP86mpY8o=
Subject key identifier:   4A:0F:B5:88:9F:9C:98:A1:A3:BB:96:BD:BC:35:BB:6C:76:86:6B:19
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Certificate issuer:       /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial:       01A1A25BE84FBBC06D1995B0EFB95785C288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
Manifest number:          14AB
Signing time:             Tue 03 Nov 2026 17:01:34 +0000
Manifest this update:     Tue 03 Nov 2026 17:01:34 +0000
Manifest next update:     Wed 04 Nov 2026 17:01:34 +0000
Files and hashes:         1: 6p_5HGsceo7QKEKyXJsNBjipBCQ.crl (hash: aXy8MmdOQHPrRsu4jRzqB6kr8wcXUBZWW0zdfAo02x0=)
                          2: DDzoLugVKHUosG6LnSil1zPyskM.roa (hash: JyTfSK96wfTfZYA0hAe3wAK9JdqgYlzHq8L5Cr8t14Y=)
                          3: bLtqLTgyo3jayEk8nrvrKrCEoZ0.roa (hash: NexaJDA35Gn2YwrlEltRLjOpLBsw+HT7zXIl0vhUiEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 16:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a2:5b:e8:4f:bb:c0:6d:19:95:b0:ef:b9:57:85:c2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
        Validity
            Not Before: Nov  3 17:01:34 2026 GMT
            Not After : Nov  4 17:01:34 2026 GMT
        Subject: CN=4a0fb5889f9c98a1a3bb96bdbc35bb6c76866b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:b0:14:c2:b5:78:36:d2:7b:16:3a:52:80:
                    88:5c:79:b7:01:86:d2:1a:87:d6:ec:54:ef:d6:56:
                    78:64:71:7b:84:fd:a4:73:ab:d6:2c:38:b1:84:0c:
                    cc:9c:fe:f9:9e:e6:d4:ad:b5:8b:63:dd:cd:e6:de:
                    78:84:c2:4d:be:26:d1:66:ec:25:33:af:a7:c3:ae:
                    2e:89:ed:b5:c1:9a:52:0e:38:6b:6b:2e:d8:6c:80:
                    93:ff:bd:bf:37:84:1b:46:b4:e9:bc:ef:03:17:28:
                    ce:f1:bf:e8:22:55:30:c0:c7:06:af:35:7c:2c:03:
                    2f:38:c2:9f:1f:6d:98:7f:22:3d:8c:ad:c4:5c:65:
                    0b:af:f9:d8:ea:21:6c:02:a4:47:71:5a:7c:38:c1:
                    33:58:2c:c0:58:5a:f7:61:a0:a2:10:8c:d1:73:91:
                    d1:0b:ee:55:48:98:04:68:61:2c:08:9b:e8:a1:01:
                    8d:00:59:0d:c4:4f:37:03:f6:df:73:84:32:9c:8f:
                    d6:a7:b3:9b:2d:00:78:4c:03:ff:bc:65:f3:10:3a:
                    2d:2b:b7:7e:3d:21:87:b9:a3:36:e9:01:9c:12:00:
                    4a:d8:88:13:0c:01:a7:eb:cd:1c:91:ea:2f:82:6d:
                    2f:fa:ef:59:67:1a:3b:8c:2a:57:4d:8c:53:39:d1:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0F:B5:88:9F:9C:98:A1:A3:BB:96:BD:BC:35:BB:6C:76:86:6B:19
            X509v3 Authority Key Identifier:
                keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1a:f2:66:54:ba:17:5c:f6:59:7a:b1:39:ad:63:cb:7d:6a:
         b8:42:a0:ce:aa:c8:90:10:f6:74:e6:0c:7b:1f:ba:2c:7a:a1:
         0d:f5:05:61:ca:b5:e5:f2:70:e3:11:3d:b2:03:fc:1b:a8:53:
         b4:2b:a4:62:8e:ca:43:7e:25:2d:69:cc:41:af:02:de:a2:41:
         2f:8f:bf:54:3e:74:5a:f9:6d:c5:8f:b7:0c:5d:8e:49:cd:cf:
         c6:d7:e5:b2:e4:82:8a:63:f4:3f:de:20:59:03:4a:05:fb:df:
         70:5e:1d:e6:d1:f6:21:6a:02:31:c4:66:44:57:b3:2d:38:3b:
         4c:0b:14:81:d3:fa:04:60:15:91:f1:53:3a:a1:e2:6d:a6:ba:
         d6:73:05:e8:25:22:5c:fb:10:5c:a6:b7:06:12:09:5a:f2:b3:
         9b:eb:0e:93:b3:23:a6:61:63:c1:a6:74:c2:10:42:28:64:14:
         4a:fb:5b:8f:fd:17:81:32:61:40:3a:ed:de:be:a5:5f:af:48:
         81:f5:dd:40:2a:61:85:be:ec:96:98:01:05:ea:89:b3:33:72:
         53:64:cb:23:d3:04:44:27:e3:55:a1:4a:ee:59:38:53:07:95:
         1c:eb:75:27:b7:5d:13:0f:51:a0:79:07:01:a5:14:a9:0e:2f:
         5d:1b:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 03:04:22 2026 by rpki-client