Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
File:                     6LboSZ_-MeH21ngNAwF-g0c_LTw.mft (raw, json)
Hash identifier:          9VgabD2GOWyN8ZGI0OpPljNje4Wp+cP2ru6paDnyBHg=
Subject key identifier:   40:41:EA:4D:E8:27:33:27:DC:B7:B1:DE:E0:87:37:E2:B0:FA:A4:2B
Authority key identifier: E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C
Certificate issuer:       /CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
Certificate serial:       01A17BBB393BC6337BE95905023B002A8B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
Manifest number:          1ACB
Signing time:             Tue 27 Oct 2026 05:00:29 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:29 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:29 +0000
Files and hashes:         1: 6LboSZ_-MeH21ngNAwF-g0c_LTw.crl (hash: SgZbC1uiPmBufaYPnex71Z5kUqLtdFt7yJ0/AgXfvqA=)
                          2: HqL-Hvnw7BiN4tgcnbDNFcjZ_aM.roa (hash: xw5CfW5J5onW901VpbqzGBBSaIilUy9bpVV6YaV/DxM=)
                          3: aAFXMbFTINoxMuF0hZtweA-ykGI.roa (hash: Al30HWkjRUnkIGeLcIOnmzvSzYnDvHiYrDwOMo4WcF8=)
                          4: tN946_fedyvYqjcv1qVNuCe5qL8.roa (hash: e0nnRcrz2HzfnayUkxVdyx09YiT6CY4cb9MRimDfgbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:39:3b:c6:33:7b:e9:59:05:02:3b:00:2a:8b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b6e8499ffe31e1f6d6780d03017e83473f2d3c
        Validity
            Not Before: Oct 27 05:00:29 2026 GMT
            Not After : Oct 28 05:00:29 2026 GMT
        Subject: CN=4041ea4de8273327dcb7b1dee08737e2b0faa42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:86:82:d0:53:3f:6f:b1:20:c7:9f:e5:c1:
                    ac:35:f6:13:bd:34:32:2b:49:78:ec:2e:85:94:40:
                    08:8f:11:d7:b6:73:df:f7:86:6e:7b:09:1e:8d:ac:
                    d9:c4:92:9f:36:e0:f3:7e:7d:e0:7c:0b:1d:6b:ef:
                    43:23:1e:72:2e:6a:47:98:c3:53:7c:f6:e1:0c:14:
                    26:38:32:94:0f:fd:5a:1f:36:25:97:c0:6d:1c:f9:
                    88:7d:85:50:38:df:4e:d3:ae:c7:c2:e5:71:cf:6c:
                    af:57:26:10:ad:a3:06:b9:c2:01:4f:ac:f1:8b:7a:
                    81:6b:5d:4e:eb:04:29:4d:9f:d1:a6:51:dd:78:52:
                    74:4b:e3:de:33:f2:f7:4b:64:bd:12:1c:c8:65:b6:
                    6a:8b:84:8e:bf:e1:fc:f0:71:79:be:eb:96:2d:14:
                    d6:35:a7:0f:8a:ea:a9:e8:d9:66:60:93:d9:26:a1:
                    0b:e7:ed:b7:59:72:4c:dd:1c:13:56:c3:fe:a3:91:
                    aa:b0:94:ea:93:b2:a9:c4:f5:36:61:c5:67:43:d4:
                    09:0d:23:70:f5:9b:a9:d4:83:17:8f:7d:57:0f:8b:
                    c9:c7:9c:6b:18:b4:95:c2:e4:ab:01:a0:5a:b0:6d:
                    30:7b:8b:3c:06:08:a1:4a:d5:0f:99:f3:05:03:46:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:EA:4D:E8:27:33:27:DC:B7:B1:DE:E0:87:37:E2:B0:FA:A4:2B
            X509v3 Authority Key Identifier:
                keyid:E8:B6:E8:49:9F:FE:31:E1:F6:D6:78:0D:03:01:7E:83:47:3F:2D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LboSZ_-MeH21ngNAwF-g0c_LTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e5b520-8d4c-4cd8-a54c-681c4a5d5b74/1/6LboSZ_-MeH21ngNAwF-g0c_LTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:4c:f0:47:6a:73:bf:e1:43:f7:97:20:20:19:fb:a9:10:
         b4:28:1f:94:27:5a:c8:46:ac:54:a1:79:08:3f:15:57:21:81:
         d5:5d:93:9c:5c:45:56:4c:37:56:f9:2a:2d:59:34:13:a1:20:
         bb:78:af:81:fc:d8:56:ff:2a:42:61:c7:d7:4f:93:87:38:c8:
         ba:45:d9:37:1a:30:68:bf:cc:0f:05:f7:98:00:3b:a3:95:2f:
         7c:05:d7:45:8a:97:d5:48:d0:8c:f4:3a:d6:5b:41:59:fe:fd:
         56:33:21:8d:68:9b:fd:3e:80:60:a6:a8:39:a1:2a:12:b9:f9:
         2d:d7:e6:b7:e5:d4:f5:67:ce:cb:42:20:57:9a:ee:cf:c7:6e:
         80:5f:e1:df:4d:12:53:10:43:0e:e9:74:5f:de:6c:b9:20:91:
         4d:b7:1b:55:21:70:df:79:89:15:66:c8:b6:26:4f:6c:99:09:
         4b:08:f1:35:fd:e1:3a:ec:2c:82:c8:b2:78:91:45:a0:a3:2b:
         aa:0e:73:55:83:eb:a0:c2:05:ed:70:ae:86:4a:aa:f8:72:b6:
         b3:d2:a3:5d:af:3a:1e:38:2b:4d:3f:bc:ef:50:8a:b8:e4:f4:
         d9:cd:38:06:11:44:b3:83:4c:3c:ba:88:cb:dc:a6:84:8f:20:
         df:16:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:33 2026 by rpki-client