Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File:                     6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier:          FETjVbgBfXEaAHFwkEAEaiioDzw2qIHjnR2CO69nbZU=
Subject key identifier:   C9:45:FF:BC:8B:5A:C7:79:19:96:6E:C7:CB:72:86:2E:24:3B:8D:4D
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer:       /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial:       01A000254A2BA8D28D0C2C9270002ADE4C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number:          1A05
Signing time:             Fri 14 Aug 2026 12:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 12:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 12:00:38 +0000
Files and hashes:         1: 1-uAgTFytjfQ2ckH7_TAX-TvGxDw.roa (hash: xn38BGRi79f6/jqPvFZVsKi+tmY/L4hGFFUPT+YH0JI=)
                          2: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: kq6fVIm1dl923SEJoKRjKFyXafjqXswghX9kUTP2v7o=)
                          3: M9gXh3Ye6TS9xUzQp1X1eJno0dg.roa (hash: lAB0vTky9FECb8JWHkfQm6v4LaD80/MiZF2Q6KaOlC8=)
                          4: jTpwteJckLxk88W-0IFWft0YYq0.roa (hash: qmbAR8GlWHjPRVsTXR8d6LEMmz3CLKUUkjmNaODWk7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:4a:2b:a8:d2:8d:0c:2c:92:70:00:2a:de:4c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
        Validity
            Not Before: Aug 14 12:00:38 2026 GMT
            Not After : Aug 15 12:00:38 2026 GMT
        Subject: CN=c945ffbc8b5ac77919966ec7cb72862e243b8d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:ff:b8:33:16:34:af:87:31:3b:1e:2b:cd:
                    7c:87:02:31:fb:d1:87:1c:e8:05:bc:83:0e:6d:36:
                    fa:e0:d2:a4:80:16:f4:6d:36:2c:df:44:36:b3:9f:
                    5f:25:fd:a3:61:9d:ba:e5:cc:f4:62:61:6a:cc:08:
                    d8:72:1b:d0:55:43:a7:07:d6:16:00:24:e7:62:69:
                    ad:87:e5:88:26:5d:f3:6e:4a:32:78:20:e9:18:75:
                    fe:6a:97:e4:27:cb:e1:6a:ce:c4:44:7c:e0:da:15:
                    d4:93:61:95:0e:82:5d:aa:bb:d8:25:c0:52:d1:29:
                    61:a6:fd:64:57:f8:df:14:85:4a:00:c9:74:76:ad:
                    59:ff:21:05:cc:de:36:7d:ec:9b:fd:b2:3a:a5:8a:
                    26:56:39:3f:95:03:04:0d:df:7e:33:16:2b:91:91:
                    21:67:df:67:80:60:78:87:ec:3a:9d:a1:1e:e4:ff:
                    f0:61:01:cc:26:e6:39:3e:c6:68:67:97:e5:5b:4c:
                    ca:c7:fb:3e:39:01:59:dd:30:6e:11:98:ac:52:35:
                    99:4e:62:2f:f3:6d:ad:5d:f0:57:b4:00:93:ea:f7:
                    7f:3c:86:84:51:01:e3:85:24:70:58:e8:19:61:ae:
                    cb:2b:f3:f4:fc:47:eb:d2:b1:b2:b3:0b:13:8e:cb:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:45:FF:BC:8B:5A:C7:79:19:96:6E:C7:CB:72:86:2E:24:3B:8D:4D
            X509v3 Authority Key Identifier:
                keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ca:34:9d:9f:ad:58:54:d0:22:01:e2:3c:46:1f:24:7d:47:
         e9:6e:fa:80:fa:08:01:55:cd:17:0d:e0:1d:3f:68:ad:8c:93:
         33:50:c6:f2:cf:74:8b:45:c2:75:ec:ac:83:71:6c:e4:72:1e:
         28:01:d8:0b:be:3d:bf:42:53:9e:d2:4f:b9:cf:77:99:c7:d9:
         a2:f5:1a:ef:02:69:8a:3e:8f:92:db:41:81:d8:64:16:54:0e:
         3c:0e:cb:70:ea:0c:e4:e8:f6:e9:04:b0:9f:fd:5a:43:2b:13:
         53:73:e8:23:2b:eb:62:1d:5e:d7:8b:da:63:c6:32:9f:b9:15:
         2b:09:5f:6d:0d:19:c0:80:5e:e5:6e:82:73:dc:19:a4:91:f4:
         07:61:60:7c:2a:38:54:ba:27:3c:0e:0f:fa:0c:d0:f7:47:1b:
         e6:f7:e0:3b:05:e1:68:47:ca:b6:ee:b8:9a:ef:f0:21:0e:19:
         a9:6b:8b:f0:ca:2a:b9:6b:72:f1:2b:92:fa:0a:03:46:6d:91:
         dc:9c:dd:04:49:c6:ad:6e:5b:43:8a:c3:92:e8:dd:83:d0:e4:
         b3:ae:d6:8e:d7:23:ef:c1:49:15:7f:36:8b:2a:e7:a3:c5:ba:
         08:b5:3d:01:9a:f6:85:e7:86:47:7e:39:77:37:77:b6:e2:5d:
         6a:75:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:08 2026 by rpki-client