Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File:                     A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier:          r6IQCcnTsDsfxPUFuz7CaPZoTy4Rz7WRW45D75KVGrA=
Subject key identifier:   6A:81:7E:DB:29:54:95:03:CB:6E:5D:82:AD:9F:98:48:00:87:84:21
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer:       /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial:       01A1084AFF56BC236C48F619C960AE2A769B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number:          1511
Signing time:             Sun 04 Oct 2026 19:01:35 +0000
Manifest this update:     Sun 04 Oct 2026 19:01:35 +0000
Manifest next update:     Mon 05 Oct 2026 19:01:35 +0000
Files and hashes:         1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: qR2/G8YqB6OeHy54+NQS1irmRKw3dMkf/31iE74soK8=)
                          2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:4a:ff:56:bc:23:6c:48:f6:19:c9:60:ae:2a:76:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
        Validity
            Not Before: Oct  4 19:01:35 2026 GMT
            Not After : Oct  5 19:01:35 2026 GMT
        Subject: CN=6a817edb29549503cb6e5d82ad9f984800878421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:fa:19:45:fb:18:97:1d:d8:b3:07:5b:3e:
                    95:64:89:9a:b2:87:6f:6c:ef:79:21:0b:d0:12:00:
                    36:69:8b:d4:f1:d2:a4:34:f8:06:82:ce:f4:5b:33:
                    24:a1:3b:dc:0a:ef:0f:1d:a6:78:86:7e:68:c9:a6:
                    fd:b2:fe:40:0c:9e:07:93:5c:de:bf:5f:b0:d8:71:
                    fc:fc:d3:4c:f6:ea:2c:15:54:7d:8a:a0:d2:b7:07:
                    d2:e7:8d:c3:67:30:9c:7f:ad:78:8e:5e:48:c7:b2:
                    7d:2b:0d:50:68:cf:13:e3:cd:6e:87:3d:21:0f:c6:
                    6d:a4:a9:2a:52:ec:e4:b9:3b:9d:3f:d7:05:60:91:
                    a5:60:a2:82:25:bb:86:d8:29:67:e2:5b:9f:27:05:
                    e6:0f:aa:09:af:22:42:f7:ca:f4:c3:d0:fb:5d:63:
                    ca:5c:06:33:ab:c8:72:fd:25:88:a2:0e:cf:9e:cd:
                    16:b4:c3:bc:a4:68:45:ea:3d:93:d1:aa:e9:93:41:
                    17:ec:bb:d9:c1:40:ac:28:8a:53:6b:5e:d4:c5:34:
                    09:85:23:6d:6d:55:49:f9:36:22:20:e4:bf:aa:86:
                    53:fd:72:d5:cb:ca:e2:95:ea:16:7e:29:dc:07:51:
                    f9:ba:5a:48:e2:fb:65:8a:d1:12:a2:cf:f9:1c:2a:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:81:7E:DB:29:54:95:03:CB:6E:5D:82:AD:9F:98:48:00:87:84:21
            X509v3 Authority Key Identifier:
                keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:ca:05:7a:08:7d:dd:f1:fe:b7:5c:f2:31:45:07:40:9e:
         58:da:69:93:21:88:08:0a:34:be:2b:5f:36:81:bd:26:2e:f4:
         01:a5:2b:5d:00:a5:13:c0:11:79:6d:64:e7:9d:b6:11:c3:8d:
         32:3e:17:f2:ef:90:29:de:c4:b2:73:7c:d3:7e:82:42:dd:70:
         dd:88:76:d4:2c:2f:8d:a5:12:7e:74:da:4d:d6:8d:76:c4:43:
         69:e2:50:79:1c:eb:d7:0b:49:b5:78:2c:e1:9d:f2:fb:cb:3a:
         00:6c:19:df:0c:e7:f9:46:b4:28:59:96:6b:a9:e9:81:86:f4:
         f8:bc:ca:ce:0c:b2:13:e3:37:f4:a2:f7:87:f1:65:65:c4:bc:
         a9:18:67:b1:21:c6:04:81:8e:da:1e:a1:10:cb:9b:6e:ec:a5:
         6c:71:35:3a:c6:41:e3:4d:31:d4:86:ab:15:48:d4:c7:41:48:
         b2:93:23:d1:9d:ba:41:cd:17:c0:e7:ea:40:64:14:6d:6e:a1:
         de:97:8c:b2:9f:86:39:eb:90:ed:42:91:3c:33:9b:4a:9d:c5:
         e9:6e:49:30:c9:f0:76:10:06:83:66:6e:27:72:9d:42:af:9e:
         af:bd:76:6e:ea:08:2d:41:43:06:b4:43:8b:a2:e9:b7:65:10:
         6c:af:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:34:34 2026 by rpki-client