Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
File:                     6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft (raw, json)
Hash identifier:          v5jJ78UfQXUeWGj3Dp5xeRok0CnrWlwYoSKBkJWHujQ=
Subject key identifier:   CF:A9:BB:C1:B1:4F:6B:32:35:B9:57:43:20:AF:39:EF:D1:1C:35:B7
Authority key identifier: E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3
Certificate issuer:       /CN=e87244897c7917b791e100d4680339c4a3593fc3
Certificate serial:       01A14083A0887B1E573D71138864AA1BD104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 17:02:10 +0000
Manifest this update:     Thu 15 Oct 2026 17:02:10 +0000
Manifest next update:     Fri 16 Oct 2026 17:02:10 +0000
Files and hashes:         1: 6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl (hash: 31NajhJOq1tysHSt0v9UqqW1NlP1h51VKaLetROSxgk=)
                          2: 6LijVWJ9huOp4_NEt8OMuQAhPhQ.roa (hash: dVZr4TJEBF6mTwqRW8xt5DyX1OCYoQva4+f32i+KSaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:83:a0:88:7b:1e:57:3d:71:13:88:64:aa:1b:d1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87244897c7917b791e100d4680339c4a3593fc3
        Validity
            Not Before: Oct 15 17:02:10 2026 GMT
            Not After : Oct 16 17:02:10 2026 GMT
        Subject: CN=cfa9bbc1b14f6b3235b9574320af39efd11c35b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:2c:c1:2f:93:f8:29:5c:cc:a4:f4:6b:37:
                    5b:3e:79:82:b2:d6:3f:05:18:5d:de:7d:e2:1a:59:
                    01:89:6c:ef:0b:7c:65:01:3d:ff:82:cd:1e:91:20:
                    9a:ba:cc:b9:b7:82:d3:34:47:cb:e5:40:43:d0:74:
                    25:34:ec:15:02:89:4e:41:c1:51:08:b1:8a:cb:05:
                    61:15:2e:3a:3e:9d:91:6e:2a:cf:5a:9d:c8:87:10:
                    5e:0f:3b:e0:4f:a6:ea:b9:31:b7:62:08:4a:9e:99:
                    cc:d8:87:e0:e5:f7:56:59:46:db:ca:9f:e4:80:da:
                    78:78:39:79:16:78:52:84:57:a3:24:63:2a:8d:1d:
                    1e:72:9b:b5:94:32:e7:b8:18:dc:5e:6b:9b:1a:31:
                    3c:6a:af:87:86:a8:3b:4e:73:a1:f6:bf:39:11:3c:
                    40:fd:8b:5b:ef:55:2a:a2:34:ba:71:17:d8:ce:78:
                    34:1e:4b:e3:7a:56:8f:b7:f2:c8:a3:d1:c1:18:ce:
                    d2:a1:4b:8e:9a:a9:06:2c:9c:ba:a1:89:a5:56:eb:
                    c5:46:d3:d5:ee:5f:00:b9:f0:3e:c8:47:9e:fc:4a:
                    a4:b8:cb:00:49:38:94:94:19:a9:31:9d:28:c8:65:
                    c5:11:f5:8d:2f:8c:38:17:9a:4b:00:46:1c:1f:51:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:BB:C1:B1:4F:6B:32:35:B9:57:43:20:AF:39:EF:D1:1C:35:B7
            X509v3 Authority Key Identifier:
                keyid:E8:72:44:89:7C:79:17:B7:91:E1:00:D4:68:03:39:C4:A3:59:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HJEiXx5F7eR4QDUaAM5xKNZP8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b4597f-ee1c-462b-ab84-ebe59e274840/1/6HJEiXx5F7eR4QDUaAM5xKNZP8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:e5:32:b0:9e:d2:e9:a7:fd:04:62:9e:1f:36:35:42:90:
         d9:0b:d4:05:9b:14:c5:56:fe:6b:74:9a:aa:bd:19:08:1b:e5:
         7b:40:af:7b:04:c6:b0:2f:b8:cc:2f:d8:53:15:c3:15:01:d1:
         5f:62:d6:c1:25:da:cc:3f:62:90:52:dc:ff:4a:9c:a3:c8:91:
         1e:3d:44:3d:01:f2:e0:ac:ec:3b:7c:b6:cb:d9:c0:f1:9e:d9:
         e3:f1:86:10:3b:63:e1:74:16:f9:e5:24:79:8d:d5:7c:e1:72:
         7f:40:48:a7:9a:dd:e1:94:be:16:9f:a3:df:51:b3:3b:a2:93:
         25:a6:c8:75:04:01:11:a2:0d:af:61:0a:3f:0a:25:25:60:86:
         68:8a:0e:cc:6a:f6:b5:5c:26:4c:62:fa:c1:05:51:8c:45:2b:
         eb:c1:38:ad:12:78:fa:12:a0:b9:4f:c5:46:9c:94:c2:2b:c4:
         d3:a8:e9:d5:0a:18:a9:70:ff:1a:8e:20:83:b0:83:71:72:b6:
         cc:5c:6e:43:f1:ef:04:dd:c7:aa:ef:55:d8:f9:2f:b0:78:d0:
         f7:66:13:d0:0c:b7:ad:0a:bd:1f:b1:bd:68:c7:28:3e:fa:4b:
         e6:23:48:3c:52:a4:ab:fa:aa:36:fe:3c:cf:40:95:e5:d7:82:
         4a:77:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:11 2026 by rpki-client