Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          jwsNglqVmP4tXP+HkUeIUqQAf0nzyojiZlSLdKI8PNY=
Subject key identifier:   29:77:B6:D0:C9:8C:37:AE:03:D2:6A:4E:61:E2:3A:EC:D5:5A:30:D4
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       01A148AA26998D8E3B0989B9C5F842E49D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          07FD
Signing time:             Sat 17 Oct 2026 07:01:12 +0000
Manifest this update:     Sat 17 Oct 2026 07:01:12 +0000
Manifest next update:     Sun 18 Oct 2026 07:01:12 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: HhtQ48H9UFW0CpyPiaSVuB5wGkZZ4b2NKauLL5cyv1k=)
                          2: oGx7JfYX53D__g9_5hLujNutUzE.roa (hash: lRBSZN0vcGbFXwTasrFrwyAWF1DzSBb5tPanlgAqXJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:aa:26:99:8d:8e:3b:09:89:b9:c5:f8:42:e4:9d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Oct 17 07:01:12 2026 GMT
            Not After : Oct 18 07:01:12 2026 GMT
        Subject: CN=2977b6d0c98c37ae03d26a4e61e23aecd55a30d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:01:1d:2a:85:95:73:d3:fa:94:06:35:22:
                    a1:ef:19:75:a0:8c:1d:b3:af:ae:ec:99:88:a2:44:
                    95:b7:86:f3:4a:38:21:40:fc:3a:6c:93:08:7c:0b:
                    56:6c:b8:1f:ec:1c:28:a6:8a:c3:fb:b3:71:93:99:
                    66:5a:28:67:af:53:96:e6:52:75:0b:01:51:a9:3d:
                    76:ce:99:2c:a8:bb:e0:da:72:3f:70:bc:9d:ba:48:
                    c0:07:b4:8e:d6:fc:f3:ab:41:be:bd:66:33:00:fd:
                    6e:7e:ed:27:ff:4e:2d:b5:14:6b:f7:df:ee:78:d1:
                    8f:f8:6a:33:af:3a:83:d7:96:8d:fc:86:d5:e1:2a:
                    c1:ec:86:0c:34:c5:a6:d7:2c:80:1e:99:d2:1b:8f:
                    42:f9:8e:2c:d1:a1:f2:1d:c1:56:95:2f:a1:c4:4e:
                    51:5f:ec:a3:9d:fc:1d:f6:f5:10:29:cb:12:a2:01:
                    d0:b0:39:4d:26:09:f1:14:c8:5b:7b:5b:cf:d7:3f:
                    70:fe:14:28:1e:6c:77:95:71:55:b8:7f:70:a9:f3:
                    c6:3d:b1:ce:5d:a1:f9:fd:8f:84:44:f5:88:bc:e6:
                    fe:61:e0:33:a7:87:f7:79:89:58:51:1b:83:90:39:
                    a0:53:03:0f:2d:09:6c:67:f3:77:ff:58:03:6b:f4:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:77:B6:D0:C9:8C:37:AE:03:D2:6A:4E:61:E2:3A:EC:D5:5A:30:D4
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:fc:02:a9:e9:70:e4:51:97:0e:b1:17:51:69:e1:5c:41:96:
         ce:1b:38:12:22:d1:6c:bf:a8:ac:fe:72:cc:25:e1:01:09:d2:
         14:5f:ae:59:5e:19:5f:6d:2e:35:f3:3e:50:51:31:46:dc:58:
         49:ff:29:bf:1d:7a:38:75:13:1b:80:3e:54:eb:42:1c:82:11:
         44:c9:93:4d:50:65:27:ec:50:d4:eb:22:3d:43:2e:3b:d1:09:
         c2:09:28:bc:4f:df:fc:e7:88:ec:18:76:11:f1:d7:b9:5d:3a:
         42:80:48:ca:aa:40:a5:7c:70:a5:bf:f7:b8:d7:14:95:6a:00:
         ec:52:0a:3a:a1:26:a7:29:25:64:fc:d6:91:d6:9d:93:ed:02:
         55:c2:08:ec:d8:ee:49:de:3b:30:4b:92:4f:87:ba:11:42:82:
         a5:38:c9:5b:c8:cd:20:41:cf:bf:e5:75:4c:dd:ff:b6:57:79:
         b4:1e:73:ae:99:56:08:8e:95:c5:62:cd:bf:80:ff:ab:31:0f:
         92:9c:f8:de:28:11:fd:b6:2b:9f:69:a3:88:1c:8c:f3:ec:ae:
         0b:36:d7:d1:66:59:d1:5a:da:79:f8:64:02:26:0f:6f:59:20:
         65:ac:c2:00:eb:99:ca:14:fc:6d:4a:c1:27:ff:6a:cc:66:3f:
         bb:7e:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:47:12 2026 by rpki-client