Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          MyG9gO6YK0VwsHFL2kCBigVzAgKm09NnWF3ZQETAX+Y=
Subject key identifier:   4B:41:07:DA:DD:2C:28:33:17:F0:C9:9B:C9:E5:CF:78:83:10:0E:05
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       01A13FDDF2370E89D525D9B579E32933BFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 14:01:12 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:12 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:12 +0000
Files and hashes:         1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: inH6WG0nAFb/8WNleI2dy6vT+Re7a/M6wa0FcfEZqgI=)
                          2: NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (hash: b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:dd:f2:37:0e:89:d5:25:d9:b5:79:e3:29:33:bf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Oct 15 14:01:12 2026 GMT
            Not After : Oct 16 14:01:12 2026 GMT
        Subject: CN=4b4107dadd2c283317f0c99bc9e5cf7883100e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:d2:9d:9b:b5:35:13:e7:3e:72:03:f5:8b:
                    ce:10:2f:77:34:a6:61:e5:a9:30:19:fa:82:df:a6:
                    dd:57:25:64:fd:7a:52:07:ff:d4:0f:95:a3:2d:a8:
                    20:7b:86:4b:34:aa:a0:44:cb:6c:13:3f:85:76:14:
                    7a:fb:f9:47:03:64:a3:b4:14:f3:b4:f8:02:96:bb:
                    99:8f:2a:1e:64:73:48:6a:b1:af:ff:cf:1b:cf:30:
                    cb:37:1d:bb:eb:ff:7a:92:b9:fe:c9:12:f0:44:27:
                    17:41:7f:e3:e7:02:88:b0:b4:3e:d5:d6:16:ad:c5:
                    44:f6:75:e8:2e:e7:16:e0:0e:be:4a:74:85:94:57:
                    f5:51:9f:68:86:6c:4a:cc:a6:4b:be:f7:4e:be:e4:
                    28:22:e2:32:a4:2e:ec:0b:3c:1e:14:00:fc:3e:ee:
                    db:37:24:0c:6a:6e:87:1f:54:05:23:7b:b9:f1:c4:
                    bc:f5:c1:96:a6:5e:4e:eb:91:3b:5c:06:3f:57:03:
                    53:61:44:59:5d:6c:05:36:e9:0b:75:32:cf:d3:b3:
                    4e:8f:85:c0:4d:45:9b:d1:74:23:06:44:3b:47:57:
                    59:43:dc:53:6e:4d:96:9e:5c:ab:82:6b:86:7e:a2:
                    62:99:b3:be:27:4d:a4:fa:13:8f:7c:ee:93:67:ee:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:41:07:DA:DD:2C:28:33:17:F0:C9:9B:C9:E5:CF:78:83:10:0E:05
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a0:02:73:2f:c9:e3:17:2a:52:e1:4f:2c:58:ee:c6:2d:11:
         ff:51:ab:1b:dc:70:6e:2f:7d:d6:f8:e0:04:b8:91:78:d6:ef:
         2d:05:20:3d:8e:30:26:bb:e2:ae:ff:d3:69:e0:10:3c:c1:ad:
         e4:57:ac:35:df:5d:bf:3c:74:94:63:b3:dc:1c:eb:80:94:c7:
         35:ac:14:6e:1a:00:9c:a3:53:a9:f9:50:3b:91:20:76:6f:4a:
         cc:7f:eb:8e:49:dc:23:01:ac:f5:bf:b9:ed:c6:c0:3a:9f:ae:
         2b:bd:6c:53:3d:db:7b:0a:df:ba:ac:3c:d1:c9:32:bb:53:7a:
         32:3c:84:1c:0b:bb:97:87:94:97:5d:69:4a:57:17:e5:6f:83:
         f4:e0:56:91:c5:0f:26:ab:ef:0b:6f:c4:ed:ba:1d:53:b9:59:
         37:40:56:70:2c:f2:96:bd:8f:17:83:a2:cf:1f:ed:d1:7c:42:
         d5:65:41:fd:f7:6d:cd:9b:8d:d7:3c:8a:76:31:7b:7a:a9:bb:
         46:82:85:5c:9d:e1:c2:bf:ba:99:72:c3:f2:39:80:70:e7:f0:
         2c:9a:94:af:96:ff:72:aa:31:a4:64:2a:0e:d5:6e:8f:a1:3b:
         9d:61:ac:ad:46:82:32:1d:87:91:6f:0e:36:ec:61:17:44:1c:
         a8:ba:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:29 2026 by rpki-client