Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          tpewlr1IoGFIvEk+MIdPoj5k59UXFCfWlGHGLyyfbQY=
Subject key identifier:   3A:9B:EE:F3:DA:9C:E9:6B:30:FF:BD:EA:D0:24:0F:DD:B9:DA:33:74
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       01A13F70CA8AEB319D84329154E1BAA7FAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          13A6
Signing time:             Thu 15 Oct 2026 12:01:58 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:58 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:58 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: Y0uDvD/lzYJAk3n9lxe5/h3tQZPZnzHKqBctvodZ82k=)
                          2: JHZzuCbY7H0te7-M11FOsaEJkB4.roa (hash: KwT//EDVtL7MXcat5zcL7S0XiNpCz55laXIuKNdqZ68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:ca:8a:eb:31:9d:84:32:91:54:e1:ba:a7:fa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: Oct 15 12:01:58 2026 GMT
            Not After : Oct 16 12:01:58 2026 GMT
        Subject: CN=3a9beef3da9ce96b30ffbdead0240fddb9da3374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:43:0c:0e:18:cc:7a:26:f5:30:91:f1:87:
                    3e:06:75:51:df:00:a6:b8:b3:61:9b:46:25:41:80:
                    ce:da:f9:9e:df:04:76:b6:63:69:61:cb:e0:7b:7f:
                    b2:49:da:17:5e:9d:6a:0d:a4:1c:6f:50:86:db:c5:
                    20:8f:84:1f:77:b6:b4:9a:6c:72:80:34:8d:15:c4:
                    04:cc:d6:a7:f6:03:01:fc:04:04:65:0a:de:81:53:
                    27:17:4b:b1:24:cd:1d:0d:ab:fb:bb:57:51:ad:ee:
                    45:e1:26:c4:49:d6:56:b7:69:52:07:9d:c7:3e:e7:
                    cd:a2:a4:ab:ff:8a:b8:78:ef:c3:78:57:1f:89:c6:
                    cf:df:29:42:ea:40:f4:92:74:9f:00:a6:57:ea:a1:
                    a9:4b:84:dd:3e:18:04:06:5a:8c:08:8b:35:58:76:
                    f9:3f:ac:a0:05:fd:91:92:78:c2:e2:23:16:16:15:
                    9d:9e:ac:53:05:fd:5a:5b:32:09:44:db:d8:ac:86:
                    59:7a:c9:22:65:92:48:05:51:6f:90:f3:6f:05:e4:
                    27:91:77:d8:13:23:44:49:67:94:2f:59:d8:28:be:
                    79:8d:a5:4e:42:13:6b:33:f4:e4:ba:6c:d3:3f:62:
                    b4:35:67:d2:b3:e9:9f:69:a2:c7:df:5b:ae:86:c0:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9B:EE:F3:DA:9C:E9:6B:30:FF:BD:EA:D0:24:0F:DD:B9:DA:33:74
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:17:33:80:6d:c9:94:b3:61:d8:2a:02:43:13:21:7a:fc:
         78:75:fb:39:38:6c:db:57:5d:33:08:7d:61:b7:e3:9f:4d:dd:
         61:33:19:7b:ff:02:ab:99:ed:22:f9:8d:5a:cb:dd:a3:ce:1d:
         a5:45:7a:9f:45:13:b3:25:6b:cf:2f:74:20:e0:0a:c4:56:3f:
         50:79:2c:9c:db:00:d6:b4:2f:77:d0:33:ec:55:ae:19:63:08:
         a3:2e:bc:92:66:6e:a0:5d:5f:41:2d:57:00:4f:85:be:57:e6:
         d3:1a:24:5b:99:0b:50:17:cd:2e:d1:c2:8e:98:05:21:0e:ad:
         30:9a:cf:aa:21:b0:bf:1b:f1:1f:11:98:c5:0f:07:c7:27:f6:
         29:f5:c6:2d:e5:dc:9b:e2:ba:7d:e2:c2:02:d8:01:e0:ab:41:
         54:98:1b:5b:36:cc:ec:ea:3d:6d:88:65:80:08:29:cf:bf:3e:
         33:e9:50:dc:90:ea:f8:d4:5e:a2:f4:6b:b0:d2:8e:04:5d:22:
         44:30:24:77:b5:39:57:7c:36:20:dc:cf:c3:2f:99:2e:98:14:
         c9:59:5c:63:81:e1:e1:7e:fa:a1:89:35:0a:e6:82:7e:cb:a0:
         85:d0:e0:8f:f2:1d:92:ea:35:5c:ab:3b:58:70:f4:e4:36:22:
         05:2d:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:58 2026 by rpki-client