Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
File:                     6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft (raw, json)
Hash identifier:          iIj7xPbBC9fRiA7M+2IQymMN/ScsTGO6d6xEhdGMH74=
Subject key identifier:   67:9F:9F:81:D1:3D:0F:A4:0E:54:19:06:14:21:3D:70:40:D6:52:0F
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Certificate issuer:       /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial:       01A14015445EFAE4F8D25AAC9D1D9C8A5792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
Manifest number:          0CBF
Signing time:             Thu 15 Oct 2026 15:01:37 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:37 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:37 +0000
Files and hashes:         1: 4Z1I1mr8VGf6nL_WvnxWyJ0Dp_M.roa (hash: BIxTJbAdTSk3RkQmfEkQ9FBrNikv/7JE8hvp1Z+hKRA=)
                          2: 6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl (hash: XleKNnhEICIB0vHXF+lloURt+wuCzytmYgC4daWxZq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:44:5e:fa:e4:f8:d2:5a:ac:9d:1d:9c:8a:57:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
        Validity
            Not Before: Oct 15 15:01:37 2026 GMT
            Not After : Oct 16 15:01:37 2026 GMT
        Subject: CN=679f9f81d13d0fa40e54190614213d7040d6520f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:d5:ea:48:d3:6f:aa:b3:6d:aa:a7:24:ac:
                    1c:04:7f:3c:a7:fe:95:90:83:b0:ce:65:5f:42:e3:
                    38:84:86:af:77:b2:3c:79:3f:ca:98:01:a6:48:9a:
                    31:73:db:be:73:b0:e8:42:e5:9f:c8:bd:98:41:87:
                    37:df:c1:0f:13:42:31:e6:2a:11:ed:84:5f:d8:47:
                    bd:ee:62:0c:23:db:5d:0c:ec:1f:9c:13:4b:97:55:
                    d8:1f:94:1f:6c:86:ed:24:ce:32:68:91:f7:45:39:
                    9b:9e:94:8b:9c:f6:47:e4:17:2f:64:d8:6f:3e:66:
                    a2:a7:50:fc:e3:e2:b1:94:82:c9:e6:79:40:b9:7d:
                    bd:b3:bd:b5:66:d7:9f:47:1a:de:aa:d0:26:01:c3:
                    87:af:96:07:e5:70:74:c5:76:62:67:2b:9b:83:45:
                    cc:71:75:00:3d:ef:6e:2c:0d:19:9e:d7:2f:16:7c:
                    6d:1e:84:4e:e5:ad:de:56:f6:4e:c5:77:41:28:5c:
                    3a:69:1c:18:b5:1b:1d:d2:87:b4:30:62:cb:6d:1f:
                    8f:38:0a:38:67:15:bd:c3:d9:4f:01:3e:6a:85:14:
                    d3:8b:60:ac:8d:5a:4e:a8:0a:69:07:86:65:e2:d9:
                    da:46:d7:9c:be:b0:42:f0:d8:78:9f:da:44:b8:88:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9F:9F:81:D1:3D:0F:A4:0E:54:19:06:14:21:3D:70:40:D6:52:0F
            X509v3 Authority Key Identifier:
                keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1b:a1:cf:10:1c:11:c3:dc:e6:c9:a9:f1:53:40:98:08:51:
         2c:e3:54:ac:f1:7a:7c:54:b7:1d:01:81:61:b1:64:2f:54:23:
         c8:da:62:fe:d9:5c:7c:19:87:32:e7:c7:43:f2:60:33:b8:71:
         dd:35:56:d8:6a:65:7a:88:99:0c:80:2e:c7:84:24:74:c9:6c:
         91:bf:f8:43:ef:3c:7f:cc:aa:9e:08:25:cd:75:a1:1b:83:c4:
         46:b4:9e:7f:c4:01:bd:83:80:89:c0:15:51:b7:5c:17:9b:04:
         d3:37:a6:64:98:a3:4c:fc:cb:ff:c1:66:86:0e:39:7a:85:49:
         0a:77:1b:98:91:dd:01:cd:70:21:da:b1:1c:c7:48:41:0b:c5:
         5b:ce:0c:31:66:6f:be:fa:c6:fd:c1:e7:dc:c2:df:d8:5a:8d:
         9d:a7:26:c9:bf:85:7b:70:68:f7:56:35:af:2e:0b:11:96:26:
         bd:00:d8:9b:38:57:5a:6b:8a:a4:c4:03:6f:fb:d2:e4:da:cf:
         c9:4f:b2:28:53:94:a8:92:5d:2e:74:6d:c4:b0:98:28:bc:71:
         cb:49:00:ee:bd:f2:07:ba:1f:1d:fd:a8:d9:58:75:9b:5b:35:
         20:2b:5e:07:b5:43:6d:46:13:0e:3a:f4:85:fa:28:00:5c:65:
         42:58:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:25:56 2026 by rpki-client