Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File:                     6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier:          2lVIMbXDGlmQJWv6jMr1ILilgLrpIUF12d0kZYOL6Oc=
Subject key identifier:   FD:AA:43:C3:6F:36:7C:EF:0A:14:77:D2:0F:AF:11:5D:4B:72:44:FE
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       01A14DD06C8C4742B8BF4393E70E8B4F04CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number:          1A7A
Signing time:             Sun 18 Oct 2026 07:01:07 +0000
Manifest this update:     Sun 18 Oct 2026 07:01:07 +0000
Manifest next update:     Mon 19 Oct 2026 07:01:07 +0000
Files and hashes:         1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: oePXroc+/x4RpyV/kt75bPXE+RyI+comAlNJU3OWmuc=)
                          2: p1kohFb8KaXP2aXevlAW3obI0Mk.roa (hash: MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:d0:6c:8c:47:42:b8:bf:43:93:e7:0e:8b:4f:04:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: Oct 18 07:01:07 2026 GMT
            Not After : Oct 19 07:01:07 2026 GMT
        Subject: CN=fdaa43c36f367cef0a1477d20faf115d4b7244fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:33:eb:c3:83:a9:59:e1:4a:d4:fc:06:51:
                    b7:eb:a4:a8:80:18:8e:76:37:d5:74:10:4b:b1:a7:
                    19:62:0d:1f:19:3e:0b:67:3a:c4:fc:e4:7b:6f:1c:
                    3c:fd:82:dc:85:36:83:06:8e:72:16:28:dd:39:fa:
                    6f:c1:62:44:80:73:2a:1b:c1:91:ef:f5:82:78:81:
                    88:e4:4f:9c:7d:c6:90:77:2b:70:9d:2a:3d:29:23:
                    0a:3a:75:22:f2:5c:01:64:1f:14:0d:44:87:03:c3:
                    fa:76:88:73:2d:06:c2:25:81:37:a4:43:d7:de:24:
                    c9:0e:1d:fc:f9:f2:00:f5:95:77:b0:cc:60:2e:80:
                    78:22:eb:a9:0b:fb:e2:90:fd:73:02:9e:05:57:45:
                    94:5d:c5:7a:a1:84:ce:b1:6d:b0:ca:be:a7:2d:ba:
                    2a:15:d9:ce:a2:cf:70:b6:20:f0:73:af:db:1f:96:
                    aa:ab:0b:c5:6a:4b:b2:15:c6:d1:00:b2:e4:b6:69:
                    98:8c:e9:ad:4c:0b:34:e9:6e:8e:ba:7f:fc:4a:cc:
                    e0:ee:bb:ff:66:ef:97:41:b8:46:1e:b7:48:25:90:
                    c5:40:57:d1:d1:30:7b:6c:bb:7e:11:95:62:21:3a:
                    84:8a:30:49:17:1e:e2:97:a1:a7:29:69:67:36:57:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AA:43:C3:6F:36:7C:EF:0A:14:77:D2:0F:AF:11:5D:4B:72:44:FE
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:bd:7d:0a:31:1c:c4:0e:56:36:96:d2:7c:1e:c0:eb:fe:
         76:f8:39:a6:38:2d:2b:7f:31:3e:5e:c1:27:28:33:9a:e8:ae:
         29:de:59:d7:f6:b0:b4:a6:95:21:a9:6f:c4:fc:81:96:f3:94:
         27:a6:bf:03:43:c9:75:ad:e1:2d:03:0f:9c:b1:5a:06:ee:76:
         b7:6a:6a:97:d5:f9:eb:70:35:39:5f:04:97:1f:7b:fc:79:7b:
         7f:bc:7f:22:0f:22:5b:75:9e:93:be:54:81:08:6c:ad:94:a2:
         5a:d2:5d:d4:58:23:c5:1e:80:da:dc:b7:59:31:a1:b9:2a:13:
         df:62:0b:bf:f9:7d:65:6c:61:80:d3:9e:61:cb:bc:33:e1:60:
         09:8f:cd:33:ac:c4:cc:48:17:20:9f:5f:92:b8:03:60:a0:dd:
         d3:33:94:00:a4:03:a0:03:83:a3:98:8e:a2:fb:80:08:5e:8a:
         a2:d2:61:69:d6:ca:ee:ab:b3:7d:90:92:15:97:75:05:2d:22:
         57:16:e7:da:20:68:fc:30:e5:cc:51:81:f0:97:d6:c3:48:82:
         94:39:78:70:b2:2f:63:69:4d:ef:28:c7:65:94:ad:8c:61:25:
         9f:b1:f7:e5:29:fc:e3:29:bf:fc:51:b9:92:af:e3:05:f6:53:
         8a:46:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:47:12 2026 by rpki-client