Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
File:                     F6b6gLLRxD7J6oJOfoOV95KU44o.mft (raw, json)
Hash identifier:          BucaMn/pO8G/LtG1h5D+ytReWU/tZJWF03ac2wEstS4=
Subject key identifier:   4F:AD:8F:08:3A:EE:6A:FE:50:10:29:A5:9A:8E:09:FC:93:8C:73:D7
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Certificate issuer:       /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial:       01A10D710D21BE47C527B513902ACB2A1155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
Manifest number:          1A8A
Signing time:             Mon 05 Oct 2026 19:01:15 +0000
Manifest this update:     Mon 05 Oct 2026 19:01:15 +0000
Manifest next update:     Tue 06 Oct 2026 19:01:15 +0000
Files and hashes:         1: F6b6gLLRxD7J6oJOfoOV95KU44o.crl (hash: HdpA/aqiFjOVPNnGP5lexPC2Gku72t7UkDOnYKx0aFY=)
                          2: G_oOSvatA_MkA8PUOvQG0SjlBP8.roa (hash: QfgbrckpcKZmIdbq0sGOrc2SbZS9wiTACRQ29trGbAU=)
                          3: Gf7lU_Sk5Y4hQW5uJobfq5qbd-g.roa (hash: 7A1GTsJbZzCBO8fZOhHeSTwon1kGffXk7Ew7vArc6aY=)
                          4: rGC0qGxT2A4D9RYY1RQ2RceWQrc.roa (hash: Ewm/EyxXbRoL5Dvk+LI/Mhdsnb2ZmI7M0pe6WUV9GxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:71:0d:21:be:47:c5:27:b5:13:90:2a:cb:2a:11:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
        Validity
            Not Before: Oct  5 19:01:15 2026 GMT
            Not After : Oct  6 19:01:15 2026 GMT
        Subject: CN=4fad8f083aee6afe501029a59a8e09fc938c73d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:35:ae:10:90:98:51:b6:e3:6a:4c:16:6d:
                    32:b4:dd:79:8f:2b:6d:d9:9d:0e:2d:4b:87:a2:21:
                    53:42:60:77:84:8f:b3:67:af:53:68:3e:fb:c4:36:
                    60:84:3c:44:44:07:6e:dc:2f:58:45:0c:86:a3:de:
                    17:92:61:0c:a3:67:3e:e7:43:91:88:99:63:64:61:
                    b2:9e:3a:3e:0f:e6:77:53:f9:a9:e8:37:de:3f:b7:
                    7f:29:35:33:5f:eb:61:2f:e1:0e:7e:5c:dc:45:ed:
                    fb:eb:8d:4c:41:7a:82:70:8d:d4:69:f0:50:7f:dc:
                    02:d5:b7:60:2d:6c:7b:b0:f1:54:a8:08:d4:46:ff:
                    97:09:72:90:ca:fd:c9:4c:32:7e:58:63:65:76:87:
                    65:a8:2b:5b:9d:59:b7:16:47:c1:6b:8a:6b:bd:63:
                    d9:88:8d:2a:74:38:fc:aa:22:8c:c6:3a:b7:9c:79:
                    03:30:f8:f8:71:c3:17:50:d1:e6:16:9e:25:e1:af:
                    56:d8:e1:14:91:9b:56:20:af:f7:4c:d8:a4:4d:46:
                    0b:65:a4:da:55:4f:30:a2:20:b6:d8:5b:e6:b3:e0:
                    09:ac:e0:fe:12:90:a4:d5:7c:65:58:7a:2e:19:75:
                    ad:ab:d0:fb:af:b7:88:8a:1a:65:3c:97:c7:c6:e7:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AD:8F:08:3A:EE:6A:FE:50:10:29:A5:9A:8E:09:FC:93:8C:73:D7
            X509v3 Authority Key Identifier:
                keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:c6:7d:5e:59:40:2d:05:71:42:ba:f7:3e:95:32:fa:73:38:
         71:9b:99:d9:2f:38:cf:85:54:3e:07:2b:5b:c1:8c:b6:8f:34:
         bb:61:5c:05:55:15:d6:99:ff:13:98:f0:b6:69:7d:ff:25:bd:
         ac:f5:2c:f7:da:87:95:f5:df:b2:73:3e:ca:44:be:a4:75:97:
         0f:93:a4:5a:ba:3f:8d:ed:bf:83:65:4c:db:9f:d8:22:f4:aa:
         14:9d:28:bd:10:62:46:e9:fd:47:2c:3b:87:c6:b6:20:49:79:
         46:64:f9:b8:bf:96:5e:8e:84:dd:b6:b5:05:7b:be:51:a5:5c:
         0e:2f:ed:c0:53:74:d1:b8:f6:52:af:70:4c:63:d2:81:46:33:
         8c:94:91:86:c7:ec:b2:0f:bc:a1:79:b2:3d:95:05:53:62:b8:
         4c:fd:c6:51:2c:dc:51:73:a3:54:69:43:c8:59:51:66:da:a8:
         61:9b:a1:37:49:36:49:80:a0:04:bc:5a:6a:f6:9b:91:d6:86:
         93:a0:01:8c:c7:d0:5e:d0:56:b5:9f:5c:ca:82:2c:56:33:4b:
         56:70:26:9a:3e:db:45:4e:d1:a8:7c:0c:b6:29:bf:d1:dc:4d:
         98:1a:72:f8:da:81:e2:b0:75:47:f9:37:1a:c7:95:14:db:39:
         0e:21:e1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:17:58 2026 by rpki-client