Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          gWb8o2lWRPbXilgcW8o0mB3JqUzDqDF0YfV9jtZ2yxQ=
Subject key identifier:   87:97:C9:02:C5:C9:E4:3D:95:EB:29:34:5B:93:64:31:CA:F1:DF:CE
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       01A13C6E871F5F80A9CDDD5FA37DB7BD50B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          0A04
Signing time:             Wed 14 Oct 2026 22:00:38 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:38 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:38 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: w6Ofxqfs1THk6x5oMO3kr8wZTqQ4x5+dZD8O3pntmi8=)
                          2: G-GZ443-EHFADO4B2PIjruGrydE.roa (hash: 1mWeGQkDzF19EY23jEdW/hmm8Hx4UKf+LzFcM45j8wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:87:1f:5f:80:a9:cd:dd:5f:a3:7d:b7:bd:50:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Oct 14 22:00:38 2026 GMT
            Not After : Oct 15 22:00:38 2026 GMT
        Subject: CN=8797c902c5c9e43d95eb29345b936431caf1dfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:e2:68:d7:bb:fb:58:b1:49:f0:0a:c8:c9:
                    ba:9f:50:8d:f3:c1:03:f2:6c:21:64:e6:a3:ce:0a:
                    43:4d:f5:82:94:82:63:59:d5:77:7b:d1:06:b2:d4:
                    bd:d0:5b:f1:18:f1:5f:e3:0b:53:65:bf:68:2f:eb:
                    41:e0:8d:c5:e3:d9:86:99:5c:4d:70:20:2b:2f:77:
                    45:35:e1:ce:a7:6f:90:8b:8a:02:d1:d9:f3:3a:ca:
                    da:8a:b1:86:1e:fd:8f:14:e5:3e:7a:da:aa:70:0d:
                    17:73:7e:44:29:e1:31:90:b6:89:1e:f4:21:5c:d3:
                    c8:11:b8:35:ee:d6:1f:c1:f4:3c:c9:d6:0d:0a:91:
                    d6:e3:2b:70:29:14:35:6d:74:de:7d:16:5e:d7:af:
                    a4:e2:38:e1:34:b5:b9:ad:5b:aa:0f:db:e5:e1:32:
                    ff:d9:91:f7:eb:15:6f:09:c4:43:9a:68:ee:0b:69:
                    00:47:a2:04:1f:fa:cb:cb:35:91:6d:f6:ca:4e:8d:
                    6f:16:4b:3a:df:a0:22:bf:23:1d:70:88:43:cc:e1:
                    cf:4a:c8:c8:8d:8f:5d:e8:8f:27:9c:21:e2:0b:09:
                    9d:fb:f5:e0:58:af:c4:7c:0d:12:16:7c:e1:a4:68:
                    06:ea:f8:55:1e:6b:5b:da:7f:0f:76:94:b2:4b:9d:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:97:C9:02:C5:C9:E4:3D:95:EB:29:34:5B:93:64:31:CA:F1:DF:CE
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d1:d1:e0:87:10:2b:3d:00:53:bd:72:d9:7f:ea:29:85:79:
         25:6c:80:a1:ea:2d:12:68:cf:3e:32:b2:2f:ac:c4:93:0a:60:
         3b:79:61:b6:84:f9:4f:34:65:25:ef:c0:63:0c:a5:63:57:54:
         28:35:28:2f:08:37:e2:e3:f0:13:9e:d5:c7:cc:93:83:59:13:
         d3:23:f7:c9:80:c4:a5:75:bf:2b:bc:a0:f7:2c:7b:da:df:88:
         73:ec:b2:f4:61:45:d6:7d:da:37:dc:8b:69:31:0c:ec:ee:bc:
         8c:19:fc:5b:1d:80:1b:82:b1:98:57:ae:f4:4d:93:3b:b2:bc:
         0b:fc:4a:09:48:a1:35:9a:38:8e:4e:a0:86:01:a1:fd:e3:72:
         47:0d:45:02:90:5c:68:1b:e2:52:ca:5f:50:0a:9b:4d:6e:71:
         a8:60:2b:b6:68:7b:30:6c:29:66:ed:fa:07:c9:3c:6d:4f:f3:
         93:3a:a6:77:b3:91:1b:c9:43:51:7a:5c:27:cb:4a:c7:c7:04:
         4a:7e:9b:96:14:75:d7:7c:de:12:79:94:5c:7b:6c:79:ff:21:
         ed:a1:67:47:99:f0:f2:aa:5d:fd:e9:eb:fe:ab:8b:62:ef:43:
         b0:2d:62:7d:24:f2:9e:31:4b:50:48:d4:93:32:48:0b:ad:9a:
         64:ae:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:47 2026 by rpki-client