Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File:                     6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier:          m5FSMFxPDtWvfoRyRrL7XSsvJYnZ5+MLgIB5P3Z4jq8=
Subject key identifier:   AA:7E:62:C4:EB:EE:B7:72:79:C0:12:D6:EE:6B:12:A9:5C:48:AA:08
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       01A13ECB2C331BAFE2CDAACE5397F1E1B622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number:          1B1D
Signing time:             Thu 15 Oct 2026 09:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:04 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:04 +0000
Files and hashes:         1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: H3RLcb1LRDZ4idPrROUGQnOPRVmFYFzRsqaXQ9wKTdg=)
                          2: DJ6nN3NSd1YO8q5t_zT7bPuhQIQ.roa (hash: 5lkywxbhaLRKhID4/jyJTUETlBZ/IhU7RvT2pJBvhJo=)
                          3: Gv6v2CuTYSuw1fxGRbIukftGmrE.roa (hash: LzIPy5gAnB2m5Fwrsrc5loi4EBJfHWamJu0+xufW+gM=)
                          4: HmF9BlW0N9Gf90qlurIxvLh06Qk.roa (hash: ZSkQkLJR9FAk0rQTmxE9Q0nn/fbR18zVkksGDExkMjk=)
                          5: PrWnje5pwuyLLung5cAWo-Sdq5o.roa (hash: i3OyNFwt3PIeOGKHaRbK8pFHgXOUNE3Am1N1aLetXS8=)
                          6: am9wGnnaAwnbbl-GeKSLoRk_nTs.roa (hash: lT6hqTkoXScWiRJIwaGV6urFE0P+0XxY6z4DqV2dR4w=)
                          7: kDoooTn7_d9rJiLyXZVvZxYYDxY.roa (hash: OFQHZn0JA/oknUFklltDGx8uk2qRQsfn+A1b0e8eT3g=)
                          8: nhhkg_jIxt4rVXWEx9XQblCSEZ4.roa (hash: y1FUEKnJ06vvn88HA1FBYat4W4h49NECAE4Wk6psYL4=)
                          9: q3cJGJcUFmhZQxfVUYW7w5lnkIs.roa (hash: Na/vhBzQ6zuGC+WNUTNRWnoDoEf33ziXx8vOjXZ7zak=)
                          10: wmwwuc2J8lTkXFaf4tOjpW8KxnA.roa (hash: cU6AgM/v4ffZ1Oc0+CAzIkq1QF3SV3vuE/LeuVRBHyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:2c:33:1b:af:e2:cd:aa:ce:53:97:f1:e1:b6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Oct 15 09:01:04 2026 GMT
            Not After : Oct 16 09:01:04 2026 GMT
        Subject: CN=aa7e62c4ebeeb77279c012d6ee6b12a95c48aa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:d1:80:41:c9:45:90:d5:41:a7:49:28:e1:
                    78:af:0f:c4:5d:2b:6f:bc:50:d8:c9:67:c3:3b:6a:
                    05:5a:06:b2:90:5b:3b:04:65:5d:91:88:17:9a:79:
                    69:b5:c3:fa:5d:84:de:a6:11:d6:4a:37:87:09:c1:
                    c6:ad:5f:82:46:ce:6e:c1:e0:a5:a5:c6:68:31:30:
                    c0:a3:98:6a:7e:71:53:17:0e:ec:b3:6e:7d:92:cf:
                    d3:60:4d:f1:29:72:6d:30:d5:31:b8:44:5a:ec:bc:
                    55:3e:b6:5f:75:f6:f8:a8:2b:f0:41:35:b0:e1:82:
                    ea:56:11:40:66:62:5e:5c:e2:53:7d:ae:6c:6c:f0:
                    78:b7:92:aa:b6:21:f6:b0:78:c6:98:af:15:e4:84:
                    9b:0f:ef:d1:b6:e5:7d:ca:48:f6:b9:cc:d3:45:c9:
                    57:c4:a8:0f:24:91:be:f8:83:35:fb:86:2e:59:1f:
                    85:0f:d7:c4:b4:12:d0:f6:c1:68:eb:a4:0b:3a:92:
                    a7:ed:dc:2d:e8:a7:a2:75:97:10:f2:15:a5:03:e8:
                    d5:b4:ce:01:42:49:ea:06:3e:88:4d:49:1e:77:53:
                    ee:f9:5d:b5:d0:a8:f4:65:d6:1a:fa:bb:87:06:5b:
                    8e:3f:f2:b4:3c:03:b7:f1:72:ad:44:1e:80:78:32:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:62:C4:EB:EE:B7:72:79:C0:12:D6:EE:6B:12:A9:5C:48:AA:08
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:94:60:87:12:c5:27:48:f1:d0:f1:6b:75:c0:70:06:5d:95:
         26:5e:ee:8a:fc:13:24:88:d1:03:19:fd:cf:f2:b1:21:af:40:
         26:4a:f1:18:3c:41:99:78:37:13:67:7b:75:d7:b2:cd:6f:e1:
         74:82:0c:c2:f4:21:2a:9d:a8:c9:c2:05:4c:f6:df:80:95:2e:
         3c:64:a6:7d:5f:44:21:e2:3c:d9:72:b8:12:20:cd:7b:e2:74:
         3a:9e:e2:43:d7:ba:72:5c:ca:0e:47:28:c3:b0:91:90:bd:9c:
         0e:18:2d:ea:30:d6:8a:ca:74:2a:db:52:71:4e:0e:6b:a6:3b:
         f0:3d:06:b4:fc:2f:aa:f7:f0:b8:93:85:c6:cc:63:38:8f:f3:
         48:8c:e2:bd:78:20:12:dc:09:39:14:dd:cb:f4:67:13:5e:29:
         25:86:8b:69:9b:c4:60:9e:4f:1d:2a:23:80:36:bb:90:d6:30:
         bb:37:7b:05:f6:eb:42:14:ea:76:51:21:c9:a5:02:ef:eb:d8:
         8c:3a:cf:6f:24:85:85:2a:4c:b0:0b:49:3f:9e:c4:3d:da:3e:
         a8:89:58:c9:f3:63:1e:22:3f:0e:31:d9:a2:bb:85:20:9a:3f:
         42:8f:e1:7c:e3:32:85:44:6f:06:14:ba:c9:f2:58:f8:ac:79:
         db:95:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:16 2026 by rpki-client