Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
File:                     P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft (raw, json)
Hash identifier:          n84do6xesZsBEo+i7LHX5VUC6c0OxxuVB3GNgM8c8v0=
Subject key identifier:   20:49:5E:D5:7F:8B:0D:FD:FB:76:59:9D:C0:D7:C9:3F:81:9A:82:7F
Authority key identifier: 3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D
Certificate issuer:       /CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
Certificate serial:       01A193FAAB1EDE1EB0D63AD59B6E158DB421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
Manifest number:          17E6
Signing time:             Sat 31 Oct 2026 22:00:40 +0000
Manifest this update:     Sat 31 Oct 2026 22:00:40 +0000
Manifest next update:     Sun 01 Nov 2026 22:00:40 +0000
Files and hashes:         1: P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl (hash: nqeqpifXX8Vjw1j2geCMS6CuYMeiDUPjrb6esoeLvFw=)
                          2: VkA42phGlJyZrV1jv1DKyhX6v0k.roa (hash: kJXaDBGXOFcG4EkK5sw7F5PzTM60vQj0BJ4YnDEVl34=)
                          3: jsHCAHi_rkbcLptlH_ZcV4fwk28.roa (hash: zyH/plaJ2XfnSn4akwAuw1IF7XZNkyTy9jtwAKcGKuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:fa:ab:1e:de:1e:b0:d6:3a:d5:9b:6e:15:8d:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fafd07dc086dd7feec69e64e094dee5f49cea7d
        Validity
            Not Before: Oct 31 22:00:40 2026 GMT
            Not After : Nov  1 22:00:40 2026 GMT
        Subject: CN=20495ed57f8b0dfdfb76599dc0d7c93f819a827f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:72:77:13:8b:b1:e4:74:2e:5a:ba:ad:e8:5b:
                    1e:0e:e5:cf:bc:f4:58:e9:b7:6e:f9:5c:98:dc:96:
                    53:49:95:1e:8b:cf:a4:78:42:f2:e8:46:39:b0:5e:
                    c5:af:9d:8f:2c:d5:98:ad:0d:4a:7e:aa:8d:fe:4d:
                    bf:06:5a:55:57:de:0a:b2:92:79:d4:08:cd:b2:95:
                    e2:24:1f:41:ee:76:44:06:fb:b0:bb:42:c8:26:82:
                    61:83:1e:74:37:6c:62:fb:df:01:48:67:ee:28:0c:
                    79:cc:3f:89:0c:af:6f:c8:0e:6a:97:3e:cf:2b:79:
                    55:c9:e4:b3:05:b9:d4:aa:b8:4b:bd:0d:24:5f:e6:
                    f2:07:8f:3e:21:37:41:54:31:75:09:c2:c6:23:ab:
                    33:7b:66:1f:48:7c:53:86:c2:1c:f3:ce:50:c5:a8:
                    fc:0a:c6:2c:25:68:0a:d3:7b:65:9c:f6:69:d4:44:
                    cf:61:da:cc:16:9f:e4:9f:6d:aa:08:7a:5b:08:09:
                    6d:81:7f:2a:7e:4f:dc:7d:34:af:16:3f:ae:fc:be:
                    38:4e:ff:27:40:ef:31:b8:28:7c:06:37:2d:53:5a:
                    f5:fc:98:0e:56:60:db:a7:10:08:c9:eb:39:2c:1c:
                    0c:2f:8c:f1:c8:4d:6f:25:6f:4e:d6:d2:82:8a:8d:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:49:5E:D5:7F:8B:0D:FD:FB:76:59:9D:C0:D7:C9:3F:81:9A:82:7F
            X509v3 Authority Key Identifier:
                keyid:3F:AF:D0:7D:C0:86:DD:7F:EE:C6:9E:64:E0:94:DE:E5:F4:9C:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6_QfcCG3X_uxp5k4JTe5fSc6n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/fb823f-7296-4279-9721-92e08ba5e2bf/1/P6_QfcCG3X_uxp5k4JTe5fSc6n0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e6:74:ea:2f:b7:bd:4f:ec:f6:55:90:73:d0:52:65:32:3f:
         86:7e:81:16:87:5d:97:1d:4c:c0:de:df:7d:ce:41:c5:ab:3e:
         9b:24:d8:08:23:b9:66:5a:eb:84:d1:1e:4f:8c:76:29:c9:a8:
         73:a4:b1:af:39:b8:bd:4f:d9:67:24:c7:4c:5f:eb:31:08:29:
         d8:7c:97:81:42:4c:0f:8d:71:c1:c1:e1:1b:86:da:ca:44:4c:
         65:3c:23:0a:f9:f3:36:42:9f:3c:d6:26:62:cb:06:bf:54:bd:
         12:f2:a4:d9:2f:ee:be:8f:f5:4b:4d:53:f6:29:37:b2:e6:95:
         44:d2:4a:be:cc:b2:30:7c:8f:dd:48:15:80:9b:ea:1c:07:39:
         bd:e6:e4:ea:2d:46:6f:2a:c8:1b:d5:99:d5:a7:ba:bc:c0:dc:
         e2:17:26:0b:54:e0:dd:12:df:5c:05:7f:63:61:8f:e8:28:70:
         1d:7e:2c:77:be:69:15:37:fd:f6:78:3f:e1:1e:96:fe:65:b3:
         dc:84:59:28:ac:72:6f:da:90:2a:5d:5a:89:36:b9:ca:e6:d6:
         98:26:c0:97:ac:6d:76:2a:dc:7b:ec:96:8d:47:6c:f0:51:17:
         8f:0d:66:d8:da:e3:70:35:be:6b:86:50:ec:41:f1:79:71:47:
         bf:cf:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:21:51 2026 by rpki-client