Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
File:                     6uYgsFna8H5G_DUi0JsZCVFs_O8.mft (raw, json)
Hash identifier:          umNT1WDbDh1hkBDse0tLP+9OWv3w09qNGZnr7oc+2Vs=
Subject key identifier:   D1:99:BE:AB:CF:4A:DD:74:86:3D:C5:0B:22:38:78:1E:FF:71:F5:DA
Authority key identifier: EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF
Certificate issuer:       /CN=eae620b059daf07e46fc3522d09b1909516cfcef
Certificate serial:       01A0FCEB4DE991065BC08C99EAEE9205CC3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
Manifest number:          0297
Signing time:             Fri 02 Oct 2026 14:01:14 +0000
Manifest this update:     Fri 02 Oct 2026 14:01:14 +0000
Manifest next update:     Sat 03 Oct 2026 14:01:14 +0000
Files and hashes:         1: 14k9WBYTwB5rY8Es6FCkuGE_LQ0.asa (hash: EbDiuMLMeOTXlBB/rfAnpSziN3nz5jdOmMgYker4Qok=)
                          2: 6uYgsFna8H5G_DUi0JsZCVFs_O8.crl (hash: wzCjkY9nVtmqBCpAjePUxxOrt+2gsc8U3oIadjQpDuM=)
                          3: JufwG4y3MsIG7jxqVGEbh3ksTPA.roa (hash: fJpYP0RGygpZ8ZQop6IUb72Uh29ffAUMjbeCaPVw2Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:eb:4d:e9:91:06:5b:c0:8c:99:ea:ee:92:05:cc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae620b059daf07e46fc3522d09b1909516cfcef
        Validity
            Not Before: Oct  2 14:01:14 2026 GMT
            Not After : Oct  3 14:01:14 2026 GMT
        Subject: CN=d199beabcf4add74863dc50b2238781eff71f5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:d7:98:90:f7:24:91:c2:40:96:d1:82:fb:
                    5c:ad:e2:c1:35:c0:00:53:e6:98:ec:34:0b:85:58:
                    93:8b:47:33:19:78:fc:0a:3b:56:12:45:6d:e2:88:
                    1f:3d:f0:de:14:6d:8b:bf:04:78:39:a3:7d:8a:4b:
                    e3:57:d9:54:85:74:85:83:1e:27:6f:ff:ce:c5:38:
                    81:70:9a:20:b4:84:21:7a:47:e8:e1:67:db:47:0e:
                    65:78:d9:a3:7d:10:52:ac:7c:2b:74:5f:64:ef:3c:
                    7f:57:93:6d:7e:d9:4d:91:a5:2f:34:62:77:cd:c2:
                    29:85:4b:93:00:92:c7:30:c7:89:84:6c:11:49:c1:
                    c4:14:53:03:ec:50:04:64:57:b1:58:0a:e5:76:02:
                    f7:81:d1:c0:6a:2a:15:ef:84:e1:e6:bc:71:4f:89:
                    bc:86:6c:9b:14:78:47:37:12:66:cc:d8:0b:6a:70:
                    eb:12:aa:23:82:11:bc:8e:12:78:2d:6e:77:ba:26:
                    b1:a3:e7:26:3c:97:b2:17:0a:3d:ec:69:61:44:1b:
                    3b:dc:7d:61:11:ff:a3:3c:aa:ab:95:59:a9:c3:74:
                    1d:81:f0:45:19:94:58:fe:ea:9b:0e:d0:d8:c6:4d:
                    f2:e1:7f:99:af:6f:01:b8:d9:b0:b1:6d:e1:6a:65:
                    8a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:99:BE:AB:CF:4A:DD:74:86:3D:C5:0B:22:38:78:1E:FF:71:F5:DA
            X509v3 Authority Key Identifier:
                keyid:EA:E6:20:B0:59:DA:F0:7E:46:FC:35:22:D0:9B:19:09:51:6C:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uYgsFna8H5G_DUi0JsZCVFs_O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/901a5c-0d2b-4100-af16-f716bda207f3/1/6uYgsFna8H5G_DUi0JsZCVFs_O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8a:10:be:d7:9b:4e:39:73:80:32:7a:65:54:56:87:64:89:
         06:6e:38:58:4b:6b:c2:e5:24:f1:41:83:15:fc:96:2e:d8:bf:
         ab:7c:f9:ec:a4:fc:b7:83:2a:d7:42:99:e3:e3:0c:5f:38:c3:
         fa:80:47:26:bf:84:25:ed:95:a2:de:f1:cf:62:0d:d3:0d:b8:
         e4:3c:8e:5d:cd:4d:7b:4a:39:c8:a7:9f:be:4f:c9:ed:64:52:
         8f:8b:9e:68:13:65:04:59:0e:0f:90:92:ae:e4:9c:bb:b8:7d:
         41:4f:b3:11:d2:a1:7b:35:c7:e3:f8:98:34:61:a4:40:0d:73:
         c6:57:bc:28:b5:e3:0b:70:fe:a0:c3:8d:36:44:9c:6c:65:32:
         b7:36:c6:e8:4a:c7:65:6e:f7:4d:39:4e:ba:bf:6d:d0:ec:f5:
         65:28:77:50:e1:3f:3e:b3:07:86:0e:87:cc:0c:f5:af:c8:ea:
         23:0f:06:b3:27:04:3f:0f:f4:64:97:cb:2e:ae:de:bf:b9:0c:
         16:18:32:7b:94:a3:4c:ff:8f:c4:2b:ef:5e:6c:f1:e7:7d:97:
         c5:83:bf:2f:4c:ad:d5:97:b8:92:c2:b9:b2:5e:28:01:92:fa:
         96:f1:eb:29:3c:04:4a:da:8b:42:a0:8b:d7:42:b5:e3:4a:30:
         9f:55:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:53:34 2026 by rpki-client