Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File:                     RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier:          yzTsO/r5EXiV6TdiVSoH4kKNf/aBNMn7qpN/Qv/9bLw=
Subject key identifier:   6E:17:2A:58:2B:34:66:1C:48:31:20:23:5E:BB:EE:6E:8F:5C:07:2E
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer:       /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial:       01A172B8F65B398D116444BFC90189B1DDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number:          09F6
Signing time:             Sun 25 Oct 2026 11:01:26 +0000
Manifest this update:     Sun 25 Oct 2026 11:01:26 +0000
Manifest next update:     Mon 26 Oct 2026 11:01:26 +0000
Files and hashes:         1: 0mENkr9R3Eaz0bgbzTHZ_lmoh-k.roa (hash: awpYUvwutpxyVAYPBKGZqnzY4J1Y2wVFIsJg6l5sbpw=)
                          2: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: xUYHmBA2k7VFlm0xZQCcH8WOpsPLPVGfKTriSFb40po=)
                          3: o3zLYzfT2580u-9CLddXhuyulyE.roa (hash: mwi/4c6LgdDRlLk19tfzSF9ChskElpBtCMQAXkoaQJk=)
                          4: uU9WSNDEX66vzzhhXOoe21fcdxo.roa (hash: 6MvyTg+A5MSPoBXPWElfN6DEbE9gMvp/ra0DMu41c84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 11:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:72:b8:f6:5b:39:8d:11:64:44:bf:c9:01:89:b1:dd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
        Validity
            Not Before: Oct 25 11:01:26 2026 GMT
            Not After : Oct 26 11:01:26 2026 GMT
        Subject: CN=6e172a582b34661c483120235ebbee6e8f5c072e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:f8:1e:ef:ae:2b:04:61:5b:1b:72:80:65:
                    28:9a:2f:90:35:2a:38:87:bf:db:bc:94:1f:1d:4c:
                    64:76:ee:e1:0e:a8:fd:61:31:df:ad:87:2d:2f:d9:
                    38:cd:e0:77:da:15:40:a8:8a:3e:db:eb:3e:0f:05:
                    f2:df:d2:38:02:8d:d5:62:81:d4:df:35:e9:62:80:
                    6c:78:03:80:02:7c:55:2e:08:47:50:7f:fe:91:32:
                    82:1e:32:cd:37:07:ff:5b:c0:9c:fe:43:13:26:cf:
                    73:aa:c5:29:38:20:f0:d7:3f:c6:7c:16:3d:5e:64:
                    62:35:b9:8b:3e:b9:d2:f3:82:02:aa:8c:76:6d:9c:
                    6e:a3:ab:b6:6e:b0:95:c5:4a:0f:d2:8b:92:75:ca:
                    85:d0:4d:a6:38:01:0f:a7:c9:cc:f6:a9:08:26:29:
                    3b:b0:25:9a:3e:44:cb:c5:dd:53:0a:f4:d2:87:4b:
                    69:49:c0:5a:e0:84:76:86:84:1c:f5:62:87:e3:81:
                    ac:06:76:1a:c4:b5:74:31:57:58:4b:a3:e6:29:8e:
                    a0:dc:e6:96:da:36:03:60:95:24:21:e4:2a:e1:b8:
                    8f:9c:bb:46:83:68:84:32:df:26:03:e4:cd:9f:c1:
                    fd:5a:87:5e:df:a6:d2:bf:fb:00:a2:a5:8e:e0:77:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:2A:58:2B:34:66:1C:48:31:20:23:5E:BB:EE:6E:8F:5C:07:2E
            X509v3 Authority Key Identifier:
                keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:21:e1:0e:17:9b:9d:b5:8e:ca:d2:b0:6d:b1:5c:1e:e1:
         5d:70:4e:48:9d:7e:1d:b4:82:58:74:6c:fe:c5:a3:7a:c0:08:
         04:96:41:fd:81:88:3f:33:72:85:b3:21:df:9f:73:6a:9e:a0:
         5b:b2:48:84:72:8c:97:a9:0b:43:4b:4f:f4:22:75:f7:3c:4d:
         38:9a:65:e6:91:85:f3:8d:2a:6b:56:3a:d1:2b:db:0f:4f:05:
         05:07:1e:1c:cd:0e:b7:ea:c2:46:eb:a5:4b:08:9c:b2:61:f0:
         c1:bd:b3:d4:70:84:1e:a5:38:f0:f3:b3:63:5b:32:12:b3:3e:
         d2:36:55:70:7a:46:0c:df:0f:fe:1a:e8:7f:ca:0a:85:cb:b9:
         46:30:0d:83:2e:e6:e6:6e:85:36:1e:07:a3:4c:1b:84:26:39:
         79:11:89:20:c1:4f:5d:1f:1d:1e:1a:63:6f:5d:ee:0c:1f:06:
         6f:b4:8f:ea:15:f2:b1:89:95:68:f0:de:48:90:31:cb:f4:bc:
         88:0b:5c:7d:9c:b8:ef:33:d8:b9:9b:6f:70:da:34:5c:b6:42:
         c9:13:60:80:b2:78:e0:c7:90:f9:84:a5:8f:94:91:bf:ff:93:
         e7:6b:2f:8d:d5:1d:00:e4:90:44:1b:f2:6d:2c:65:9e:8a:5d:
         9b:25:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:08:13 2026 by rpki-client