Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
File:                     6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft (raw, json)
Hash identifier:          rOgeWoRmEAghB/2G2RX4hF1JzyToP38K74Io7GtZZ+o=
Subject key identifier:   5A:59:92:CF:44:E2:05:DF:20:05:05:D9:89:FC:F0:C5:7F:0C:F5:4B
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Certificate issuer:       /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial:       01A11D5139A32A3065690E4D8BB74F2D1181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
Manifest number:          1AA2
Signing time:             Thu 08 Oct 2026 21:00:24 +0000
Manifest this update:     Thu 08 Oct 2026 21:00:24 +0000
Manifest next update:     Fri 09 Oct 2026 21:00:24 +0000
Files and hashes:         1: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl (hash: hs5O2mqttLchLLFV7bfATLFqXCnizNAE+QBTz6LNXL0=)
                          2: 7G0pA-14PphE7MmIfOehnWXP2Po.roa (hash: nn7cZJcF/v39DflPT/vchUr23vbedk/c6L/FyiqCxZo=)
                          3: DJeaERHkmET5-eHHAlZRzWddnHY.roa (hash: xrunQdxCV1231jVsKRShGLTYC9bF1uR6vdQtrsPx3Dc=)
                          4: SczvjYYK5nld6MzW-faIC7ezPu0.roa (hash: O1Bz/8a2Ks8omEaPLLDeQnXY6v+h1TehDDmwSh6scXw=)
                          5: ru0_3NDOl86gYPSlVCdGuegyidk.roa (hash: FadD8JITUr9vffUiSHO92yQ0svt1O66Z6S1J5wnXeFM=)
                          6: unxwdf81gpRWB7U0VMJrWq-VwSc.roa (hash: kyyuEv5ut2js57ZjOSryT6crB/LNxjqzyJucRjWFp8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:51:39:a3:2a:30:65:69:0e:4d:8b:b7:4f:2d:11:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf760c05773c15d73676450344668fefb723447
        Validity
            Not Before: Oct  8 21:00:24 2026 GMT
            Not After : Oct  9 21:00:24 2026 GMT
        Subject: CN=5a5992cf44e205df200505d989fcf0c57f0cf54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:aa:fe:5c:3c:e3:17:b9:7d:74:66:cd:6d:
                    d4:fa:88:1f:ad:21:3c:46:e5:fd:9e:cc:f8:81:d2:
                    83:d7:0e:a9:81:64:84:b4:5b:69:ab:4e:57:a2:10:
                    f5:36:78:75:7b:3e:59:e8:eb:af:e6:6e:3f:27:30:
                    b4:d9:07:fa:0d:27:08:74:8b:40:a3:f5:eb:90:fc:
                    ef:c2:13:0d:f8:a3:3a:f4:96:ee:0f:cf:66:bd:5b:
                    fb:af:53:d9:cc:5a:ab:7f:74:4b:d3:4d:f8:3e:4b:
                    19:39:e9:97:b1:76:06:a1:fc:9c:0d:a5:ab:fb:a7:
                    9f:b3:11:ec:df:52:34:6c:c3:92:d4:86:b5:c9:05:
                    56:2d:df:86:eb:c9:47:bf:6f:fc:e9:d2:ab:32:3b:
                    d3:a5:b0:a7:81:2d:9d:9d:d8:83:9d:c9:13:55:1d:
                    e1:4e:1c:4a:bc:fe:1d:fa:48:23:da:a6:dc:7b:2b:
                    bb:04:d7:f7:11:4b:df:e3:59:21:93:df:ed:27:25:
                    6d:44:7e:05:4e:16:db:57:92:bc:b4:6a:05:63:a9:
                    6c:60:01:64:d6:c8:6b:2d:07:e5:9c:4f:5e:5e:99:
                    2e:ab:03:d2:6b:86:e5:9a:ef:20:95:e7:64:e3:d1:
                    2d:17:fa:de:4f:9e:11:5a:9b:59:1e:8f:e3:da:0a:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:59:92:CF:44:E2:05:DF:20:05:05:D9:89:FC:F0:C5:7F:0C:F5:4B
            X509v3 Authority Key Identifier:
                keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:00:93:a7:f8:cf:29:34:b6:59:0f:d7:c7:d2:4e:b6:1e:fb:
         79:09:41:6d:58:87:ba:61:07:16:d3:4d:ec:2c:32:b6:5a:b8:
         d1:fd:7d:6f:27:27:c2:97:2f:db:ba:3a:00:ac:b5:b0:e0:9a:
         e4:5e:3e:d5:00:4b:e5:1f:52:6e:e9:80:0a:c8:39:bf:f4:24:
         4f:94:52:e4:dc:08:1b:f9:15:33:68:1b:a1:d6:81:89:6b:11:
         e0:ec:df:9d:07:42:0c:61:fd:51:1d:7a:6c:15:fb:11:3a:ce:
         a4:8a:19:48:7b:39:c0:37:b7:48:a4:2c:e1:75:70:93:ce:b5:
         82:e2:22:07:b5:c7:1e:26:2c:67:7d:f0:61:dd:df:7b:b7:95:
         22:0e:4d:93:9e:d4:31:62:26:f8:52:f6:66:48:7b:31:c5:bc:
         33:52:a3:21:3d:ca:cf:ce:1f:88:8f:b9:c7:6e:f4:b4:7d:cc:
         1b:82:7f:e7:da:65:99:d3:3d:89:f7:f7:78:e7:11:51:e6:fe:
         43:23:06:92:48:22:30:1d:af:7a:29:c5:4f:fa:05:52:33:20:
         e6:6d:47:7c:59:8f:28:da:a3:aa:ee:6a:d8:91:c8:7a:0b:52:
         01:3b:9e:28:1c:cc:ff:2b:39:25:b1:bd:4d:77:37:ed:1d:d4:
         f1:1d:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:31:26 2026 by rpki-client