Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File:                     svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier:          wNa9dQcK59FBHXP6mrv/JFjHnK4WpQajbdooqcg6Em4=
Subject key identifier:   C4:46:8C:4A:66:88:02:23:E3:38:E8:0C:D5:1A:8F:F9:2A:6D:54:54
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer:       /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial:       01A17D05A2DF8A9D4729EE8D862CB3FE06EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number:          136B
Signing time:             Tue 27 Oct 2026 11:01:23 +0000
Manifest this update:     Tue 27 Oct 2026 11:01:23 +0000
Manifest next update:     Wed 28 Oct 2026 11:01:23 +0000
Files and hashes:         1: PlNOWBYe5xFU6QU_i0vE5zBXu0E.roa (hash: NUmc1QVEGYCgpRZW6pi+g/fleA3EF++2rMWcLNwzwmc=)
                          2: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: 6yGEhhEwIMqeGozBepNkaEf3rNGBOKVk3g60rj7XxYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 11:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:a2:df:8a:9d:47:29:ee:8d:86:2c:b3:fe:06:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
        Validity
            Not Before: Oct 27 11:01:23 2026 GMT
            Not After : Oct 28 11:01:23 2026 GMT
        Subject: CN=c4468c4a66880223e338e80cd51a8ff92a6d5454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:08:b1:09:21:cd:8b:3b:99:3f:b5:97:09:
                    51:49:45:fd:a7:da:6d:81:eb:b7:f1:52:56:31:c9:
                    6e:34:d1:75:63:02:72:d9:6f:da:d8:83:be:fa:c9:
                    68:f1:8f:47:ac:6d:42:ff:eb:af:48:62:ac:66:79:
                    18:e1:49:e8:09:bf:d4:ee:3b:1d:b5:ea:3b:0d:e9:
                    48:99:a3:5e:68:c3:cd:4c:60:c0:b9:f3:32:89:6a:
                    2f:88:13:a6:2f:76:3a:6f:5b:5a:cf:45:96:11:42:
                    44:b0:8f:49:16:cd:e3:96:46:82:52:e5:6b:03:b9:
                    b3:cb:bb:b1:ec:f8:b9:78:07:5e:f7:a1:f9:28:bb:
                    3a:c3:bb:d4:b1:3d:83:8a:9b:8b:6b:25:91:60:b6:
                    0c:10:a5:2c:93:2c:bb:c1:58:39:ae:b7:cb:85:d5:
                    4a:54:2e:91:a6:76:4a:13:b9:c4:4b:38:43:93:bf:
                    17:8e:7c:c1:53:9b:98:a0:93:0a:8f:4b:0d:14:56:
                    a3:4b:bb:96:48:96:7e:cb:3c:8b:dd:07:b0:2b:8b:
                    ed:34:fc:e9:d2:59:9d:c1:f1:3d:e7:3d:42:49:be:
                    fb:ad:ad:4b:6a:cc:5f:a5:77:3a:92:c6:5c:fa:f1:
                    03:9e:04:7a:a1:87:11:73:ba:b6:ac:c7:89:bf:0e:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:46:8C:4A:66:88:02:23:E3:38:E8:0C:D5:1A:8F:F9:2A:6D:54:54
            X509v3 Authority Key Identifier:
                keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:3e:e3:5f:16:4d:52:fc:7d:2e:03:31:97:1c:e2:b3:2b:
         f8:71:a1:a1:4e:4a:07:ba:98:3a:31:d7:a9:49:56:14:d5:20:
         62:4e:c8:ba:ea:59:d5:f4:e4:c2:47:21:bb:2c:55:de:1f:e1:
         1b:10:99:c4:ff:5a:4c:f5:95:c7:9e:c9:ca:c4:c1:36:78:d2:
         29:8e:e2:6e:aa:70:01:56:0d:b0:52:5e:e0:76:08:25:27:68:
         51:cf:da:5c:62:83:14:52:41:22:7f:1f:3a:b3:9a:bb:d2:2c:
         af:b7:a0:d0:7f:8e:c6:14:45:29:52:5d:60:23:1c:f4:48:16:
         43:50:a5:ee:d6:88:57:b3:f2:24:70:d6:94:2a:fc:f3:80:0d:
         6b:0a:04:ed:4b:8a:fb:df:41:b1:29:9b:6a:86:93:6b:c2:ca:
         92:59:db:33:68:89:cc:5a:28:6c:f9:91:1f:05:d4:49:d0:bc:
         fe:ec:08:7a:19:83:cb:5c:66:a7:f2:67:9b:29:ab:64:57:ea:
         f2:f2:7b:a5:bd:1b:36:e3:c9:fb:eb:bd:4d:d3:e9:88:ec:a5:
         f4:91:31:59:21:1f:06:d8:c4:1d:a3:c7:ae:94:df:5d:4b:26:
         82:7e:16:f3:cd:e1:c3:b7:b7:a8:da:d2:82:a9:05:fd:63:84:
         18:6c:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:12:33 2026 by rpki-client