Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
File:                     6_q_pigGP2uOmIhWb18_z6eYxiE.mft (raw, json)
Hash identifier:          V+jtpl3DOojpQDK3um5jIWwnN0OcJp9zzNFGVi9JLf8=
Subject key identifier:   99:F8:63:70:66:EF:98:C4:0D:21:93:BF:91:74:0D:BB:A1:BA:3E:91
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Certificate issuer:       /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial:       01A17B4D22C4DF93060B148BB75D05D6D319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
Manifest number:          1AC4
Signing time:             Tue 27 Oct 2026 03:00:15 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:15 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:15 +0000
Files and hashes:         1: 6_q_pigGP2uOmIhWb18_z6eYxiE.crl (hash: +TQ7sV3d06xw4/hNjPKt+cfAPMAS+yXsIb11pybVyvQ=)
                          2: CDDBIhPlFZ0la4xFUCyUslJRm_w.roa (hash: APBpif6BQi/aq1agj/dNgGEFPrydGKCzR1HfGBm5Jbw=)
                          3: VEYj2LHmN-togd_mlPbNrhUEwf4.roa (hash: 9Rwuw5dPRTSkAe/qbyFWR8ARVN2r+Tl0lHJCSvWgs68=)
                          4: dnwGTH0FieAd94oqN2OTApOST_Q.roa (hash: aIR54WoUK0WT8TJ7U0JAbOT4DOCp5Eb6XBrXkWKbnto=)
                          5: istOwulN0TBtCeTz_FD-nhvpIck.roa (hash: IbiJxrUh2vHPG6p5xcqxXoKoxW9imoB9piUbP1LLjPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:22:c4:df:93:06:0b:14:8b:b7:5d:05:d6:d3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
        Validity
            Not Before: Oct 27 03:00:15 2026 GMT
            Not After : Oct 28 03:00:15 2026 GMT
        Subject: CN=99f8637066ef98c40d2193bf91740dbba1ba3e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:16:40:a2:9a:1a:48:af:a8:83:b7:4f:83:
                    55:7f:cd:70:b1:84:fc:70:5b:fe:fc:29:1b:56:cf:
                    c9:af:59:cc:4c:d9:b1:73:07:7a:75:26:30:d3:ea:
                    6b:e6:b4:bb:5e:61:ad:fe:c9:25:ad:0d:02:6a:54:
                    fe:59:8d:fd:61:92:e5:76:49:23:e9:99:8a:62:d1:
                    f8:f7:12:d0:5a:b8:fe:f6:6d:61:cb:3b:41:32:24:
                    2a:64:10:d0:e0:23:cf:05:dd:c6:b0:0e:4f:62:37:
                    28:ca:bc:b8:0c:38:58:2d:07:1d:ed:4d:5a:03:4d:
                    e3:a0:a3:9b:ba:31:58:bd:87:91:78:99:a9:10:df:
                    3e:88:3b:84:a0:69:ba:ee:05:ce:ea:fb:c1:41:c1:
                    f7:1f:8e:fb:67:e3:b5:b3:e5:a5:94:2b:54:9c:78:
                    71:c3:45:8b:70:3a:a0:55:e2:eb:e7:b5:8e:f2:41:
                    66:8c:62:82:df:40:6b:63:c2:8e:77:b6:ee:29:f5:
                    22:d3:b8:0d:1f:89:a8:45:a1:f8:3d:0e:ea:5c:26:
                    11:08:ac:22:55:cc:d0:a1:21:ce:de:8d:08:a7:40:
                    50:9f:fc:5d:33:f2:b9:c6:46:2e:66:3c:20:62:46:
                    d9:28:2d:89:d5:e9:08:a8:21:18:15:8d:35:f4:66:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F8:63:70:66:EF:98:C4:0D:21:93:BF:91:74:0D:BB:A1:BA:3E:91
            X509v3 Authority Key Identifier:
                keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:7f:d6:67:22:43:78:af:75:78:07:fd:73:13:3a:47:2c:
         45:2d:0f:77:01:5b:24:f4:d5:a1:61:87:10:4b:e5:ed:85:6e:
         17:cf:1a:9d:45:c6:07:96:7a:6c:f7:20:21:0c:1a:19:80:fe:
         0a:0e:81:75:f9:d1:d1:b3:4f:98:bf:52:a6:44:a2:20:06:12:
         59:fd:bf:56:a2:e4:90:52:fb:95:c9:98:6d:10:eb:a9:da:84:
         2f:8a:ea:88:09:d4:a1:0c:d6:91:46:18:51:9c:82:d8:22:1c:
         fc:2f:f2:c3:81:46:49:0e:19:af:72:1a:fb:4c:67:f5:87:77:
         6e:10:c7:69:f3:6a:6f:b9:58:10:4e:d2:02:95:c1:4e:a5:96:
         f6:a1:95:ad:36:8e:38:17:32:0b:1b:a0:1f:65:b4:7d:32:d3:
         ff:da:e7:14:0b:b9:34:54:75:03:25:3b:e5:d8:8e:06:1f:de:
         53:03:3d:8e:b9:ce:7a:4d:e0:ac:b1:d7:e9:9b:28:c1:45:71:
         19:9a:57:04:9e:bc:c8:dc:a3:47:ba:5b:49:91:8e:b8:6a:5a:
         ef:54:74:65:93:80:d7:b9:4b:c0:a8:45:35:3c:fe:1a:f0:a5:
         ea:1c:7c:13:6f:5e:84:6c:ac:02:0e:cf:2f:d6:55:f1:0b:cc:
         8e:4a:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:16:59 2026 by rpki-client