Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File:                     6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier:          gfZfe+5JuZ+7nO7CVi5lbljmGNQqrxPf/Mg6KcXWzVE=
Subject key identifier:   43:12:AF:92:6E:31:9B:7A:79:99:22:86:AB:7A:9E:12:92:3B:27:C0
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer:       /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial:       01A17C28DBDC502D896B597A080F2037DED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number:          052F
Signing time:             Tue 27 Oct 2026 07:00:14 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:14 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:14 +0000
Files and hashes:         1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: j7lNGFUeruNbdhIYAGs6w1UzN/R8wxrr0BLB/Jp8j68=)
                          2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
                          3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
                          4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
                          5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
                          6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
                          7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
                          8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:28:db:dc:50:2d:89:6b:59:7a:08:0f:20:37:de:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
        Validity
            Not Before: Oct 27 07:00:14 2026 GMT
            Not After : Oct 28 07:00:14 2026 GMT
        Subject: CN=4312af926e319b7a79992286ab7a9e12923b27c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:e2:ae:e8:7e:d7:85:16:b7:94:36:95:7e:
                    14:c5:a2:cc:79:b4:bc:2e:d6:83:2e:b2:5d:d7:af:
                    f5:f8:d1:d9:73:e9:65:05:39:51:5f:50:73:63:d5:
                    18:5c:17:07:81:18:57:22:f7:30:de:a3:da:e8:a2:
                    83:55:3c:9c:42:5a:80:9f:ae:be:a7:cf:aa:ce:84:
                    ff:2b:e6:a6:bc:d1:0b:ab:47:35:3f:c6:ba:97:af:
                    7d:92:0b:21:bc:a9:d4:86:c8:01:18:b4:30:89:bf:
                    88:97:02:cc:02:63:ef:28:8a:c0:12:d8:09:cf:c1:
                    f4:27:63:20:fc:3b:4b:2b:10:4d:19:fe:b0:88:b1:
                    76:a7:03:ab:13:33:33:21:ca:1d:ca:ea:e4:35:f1:
                    8a:c5:50:fc:c5:52:e9:70:7e:49:0b:2c:43:09:7f:
                    fc:f7:e1:05:73:32:60:5b:82:18:6e:c8:46:a7:34:
                    54:31:7e:3b:c0:46:db:53:9c:28:14:70:49:37:09:
                    be:29:c7:15:19:0b:7e:eb:fc:a4:ef:f8:3b:33:78:
                    2d:f6:be:9a:1f:8f:46:5b:81:8b:0a:da:db:d8:39:
                    1d:f2:a0:17:da:49:87:6b:b9:63:68:48:31:41:fe:
                    52:0c:b0:3b:35:09:8f:56:20:d7:23:66:79:90:33:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:12:AF:92:6E:31:9B:7A:79:99:22:86:AB:7A:9E:12:92:3B:27:C0
            X509v3 Authority Key Identifier:
                keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d7:cb:c6:a6:0d:68:d0:17:78:74:a3:c3:83:53:67:46:dc:
         c4:75:e0:5c:77:47:3c:64:af:64:a4:51:88:15:eb:5d:44:0a:
         b6:a4:45:2e:1c:68:9e:66:87:e1:e3:32:99:51:d8:cc:f1:1d:
         40:96:bc:64:0a:2a:75:e9:75:f4:4f:71:8b:2d:e9:03:de:d4:
         4c:8c:07:b8:61:ae:6f:28:db:c2:dc:59:af:79:f4:27:cb:43:
         d8:fb:74:ee:05:b0:b1:0c:76:44:7c:96:0a:5d:1a:f6:35:3b:
         fd:80:98:f6:42:81:ec:fc:f7:f0:c0:74:1e:71:70:06:25:ec:
         8e:4f:18:96:1c:6a:a3:fc:ec:9f:8a:a6:80:6e:87:eb:9a:64:
         41:b9:50:9e:84:c4:86:9a:17:df:18:72:66:dd:2b:7d:8f:dc:
         aa:31:fc:54:86:8d:32:47:3b:c5:b5:9f:ea:e0:06:9f:ff:73:
         c4:c8:42:6f:81:ce:5e:78:a3:16:78:6d:9b:2b:6f:11:ae:50:
         de:46:27:92:63:bf:60:16:c9:50:0b:87:ba:47:42:d3:69:8f:
         d5:cb:1a:43:f7:9b:6f:36:0a:89:be:46:1c:d3:5b:d4:fb:7c:
         a4:17:47:02:4d:27:60:dc:51:f6:5e:94:04:58:a8:de:b5:45:
         10:8a:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:26:59 2026 by rpki-client