Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File:                     bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier:          n6I88dTM2zU6xrMnDGuYa6v8IkhZdXWOIDs0D012Zsk=
Subject key identifier:   98:30:46:95:0C:3F:F9:74:55:F4:9D:2E:27:24:CA:CA:4D:CE:C1:06
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer:       /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial:       01A12FFD3F19AD392EF466FBA26CB63EA5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number:          1268
Signing time:             Mon 12 Oct 2026 12:01:27 +0000
Manifest this update:     Mon 12 Oct 2026 12:01:27 +0000
Manifest next update:     Tue 13 Oct 2026 12:01:27 +0000
Files and hashes:         1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: z+9ZgslR3EPnUANGF71/zHIfAbEhVlBlWfT9vgyHx/8=)
                          2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 12:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:fd:3f:19:ad:39:2e:f4:66:fb:a2:6c:b6:3e:a5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
        Validity
            Not Before: Oct 12 12:01:27 2026 GMT
            Not After : Oct 13 12:01:27 2026 GMT
        Subject: CN=983046950c3ff97455f49d2e2724caca4dcec106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:76:79:85:f1:5b:64:e9:d1:ba:8f:a2:b9:
                    6a:31:b3:69:33:12:71:14:6d:63:35:94:75:47:d6:
                    4d:67:f6:85:ae:05:ed:e2:98:99:51:f7:2a:56:15:
                    6a:c9:24:87:20:07:b5:a8:98:05:b3:43:19:0f:92:
                    d8:98:61:ba:af:89:85:b1:85:8f:6d:7b:c8:77:ff:
                    0f:ba:8a:54:07:2f:7a:a0:4c:39:91:fc:cb:ba:37:
                    39:0e:05:06:2f:b8:6b:ae:ab:9d:c2:cb:99:27:08:
                    e5:d9:19:99:8b:0b:b7:a4:c4:42:08:be:26:b2:22:
                    87:9c:48:a9:1c:54:e2:82:e0:68:2c:36:dd:69:74:
                    89:a4:5a:10:4b:c1:59:6e:3d:aa:b8:e3:9c:49:25:
                    e9:03:86:0e:ec:d6:a1:3f:a7:37:ca:ea:36:c7:4a:
                    a1:d5:5a:a5:c1:32:ed:2a:07:bc:80:59:be:6b:b8:
                    f6:94:ab:c0:77:06:6b:64:41:7d:01:c4:db:df:1b:
                    d3:d8:2d:9b:36:39:0a:c8:2b:11:31:8e:88:e0:09:
                    8a:0a:f9:8a:e1:31:df:b3:fc:02:69:26:ba:a1:ab:
                    c4:3d:df:40:a7:84:64:27:7c:8c:b7:5e:be:ca:3d:
                    c7:6e:b4:65:b6:6f:9c:44:f0:bf:a6:30:4b:68:85:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:30:46:95:0C:3F:F9:74:55:F4:9D:2E:27:24:CA:CA:4D:CE:C1:06
            X509v3 Authority Key Identifier:
                keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2f:2c:90:a1:62:10:eb:f6:98:b0:0b:d6:ad:0a:d0:13:15:
         9d:ec:9b:d7:8c:68:05:31:65:55:6e:6b:64:9f:41:cd:ff:01:
         8f:da:6a:38:a1:fd:69:69:7c:10:6c:ad:87:0f:60:7b:77:3f:
         84:ee:92:0d:f9:27:dc:f3:77:98:49:e5:ba:0e:16:0c:af:29:
         76:28:29:87:68:20:d0:64:02:ae:7b:0e:00:9b:0d:fd:93:62:
         e9:1a:4e:f3:59:ea:5a:cb:1c:c8:f9:bb:68:f7:c4:c6:df:70:
         12:f0:08:ec:c1:54:dd:08:ec:a7:4c:b9:cb:c7:1f:72:4b:0c:
         a4:9e:4a:98:90:51:9e:6d:6c:f0:d9:e9:6e:0f:3a:be:ac:ab:
         82:b2:5f:e4:23:8f:ea:bc:eb:e1:04:97:17:da:bd:b1:13:18:
         21:6a:f8:c5:72:9e:20:42:89:ae:62:b6:91:86:40:67:b5:bd:
         7a:d1:7a:fc:a0:f4:07:b4:4a:bd:d6:3b:97:73:36:f8:3a:76:
         17:0c:73:6b:85:b8:18:42:59:b1:b3:c8:2d:c2:72:ad:da:3a:
         57:82:b5:75:00:58:9c:7f:86:60:95:76:75:f7:49:bc:13:5a:
         bb:08:1a:66:19:bd:68:d1:67:dd:c0:62:d9:bf:83:a8:f7:9c:
         9c:c3:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:51:16 2026 by rpki-client