Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File:                     6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier:          W9AOZ5rhBSVutpaIWLAraidPBXN1dz74RSoz2l3/oqI=
Subject key identifier:   9D:6C:B1:62:30:94:DB:0B:3B:D5:42:E1:12:98:DF:6E:34:64:51:95
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer:       /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial:       01A1DDCC4FA2F055CE185261F7242D55FA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number:          060A
Signing time:             Sun 15 Nov 2026 06:01:56 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:56 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:56 +0000
Files and hashes:         1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: wzLPrCfYtrs9mD4rFKCfEtdFSMAsodX/QVfGPLNSK7Y=)
                          2: YEUnSBKT0NF45geJlh4cxnhY8-E.roa (hash: 5LwvyUlMx6bjG2YlDe+tTCT9lSdQEoPSopftalcppUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:4f:a2:f0:55:ce:18:52:61:f7:24:2d:55:fa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
        Validity
            Not Before: Nov 15 06:01:56 2026 GMT
            Not After : Nov 16 06:01:56 2026 GMT
        Subject: CN=9d6cb1623094db0b3bd542e11298df6e34645195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:c8:7a:39:be:d9:da:0f:9d:f7:0f:23:3d:
                    56:5a:30:52:61:63:e7:18:4f:38:b4:e0:38:6f:22:
                    61:51:cd:88:18:4f:fc:d2:30:85:83:92:3b:c0:5a:
                    f8:82:d9:6d:9a:96:82:e2:10:4f:21:5e:53:ba:68:
                    ec:d8:46:ec:c9:03:1b:95:16:cd:ad:6b:ee:c3:e1:
                    1b:3b:d3:78:6c:48:f6:51:94:70:f7:c3:0a:e9:4e:
                    b0:d7:c5:86:a9:44:8f:3b:c1:34:4f:c2:29:35:c9:
                    bc:bc:bd:f6:e7:dd:c7:24:09:99:06:97:09:e4:78:
                    24:e0:23:81:49:8c:02:c6:f3:5d:91:b4:db:4c:29:
                    50:49:4b:c1:d5:1d:16:b0:92:6c:b3:a9:19:3b:4c:
                    3b:9f:22:9b:4c:c5:1d:db:d3:91:bb:c5:29:50:f8:
                    97:de:62:ce:06:f9:19:4d:d3:41:ed:0c:76:ac:df:
                    c6:25:2d:1b:cf:c5:98:37:48:90:3a:6b:2c:e4:82:
                    29:c1:1c:5b:f9:97:0e:68:61:a1:96:1c:22:75:9a:
                    79:46:e0:4f:e6:41:78:67:a0:3d:19:81:8f:71:31:
                    c1:67:53:28:8a:89:89:5c:7f:2b:04:9f:2c:c7:4d:
                    40:d0:32:ce:1e:d5:53:8a:40:0d:0b:19:8e:0d:39:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6C:B1:62:30:94:DB:0B:3B:D5:42:E1:12:98:DF:6E:34:64:51:95
            X509v3 Authority Key Identifier:
                keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:10:61:ad:96:92:12:bb:1f:df:57:ce:05:79:29:22:be:5e:
         48:b8:c9:25:96:21:d3:67:ee:1b:6b:de:16:f5:2c:20:ff:aa:
         00:8b:29:76:97:b6:0e:92:f7:b6:bd:04:85:da:a8:7e:f9:44:
         66:42:22:25:9b:c6:e4:18:15:a1:b2:1d:55:8d:76:32:01:f7:
         9a:c0:08:40:b7:98:1c:07:03:bd:ef:f6:cf:45:99:c8:f0:72:
         1f:7c:b6:d9:53:9f:b7:65:01:3a:ce:bb:8a:1d:ef:4d:08:08:
         19:06:b7:35:de:f9:ee:04:5d:f9:4a:c9:bb:9b:e3:d5:73:8b:
         01:2c:65:1a:bc:5d:8b:53:43:30:1e:24:20:2d:37:95:01:5c:
         0a:f2:34:e5:5a:ee:7d:9f:f0:e7:a7:66:c1:fe:a0:d7:94:21:
         1d:d8:91:54:86:2e:db:13:0a:2d:c8:93:e2:27:88:c9:15:a1:
         b8:8b:3a:44:89:ca:1d:89:0f:6e:c8:03:03:b0:ce:6f:36:7d:
         f3:6b:ae:90:1c:df:78:2e:b4:22:f4:ce:08:7c:c9:33:09:69:
         f4:fd:b4:ab:a6:d9:56:e7:33:72:96:73:67:68:a7:8a:b9:78:
         21:0d:fd:49:34:f7:64:e2:00:21:69:71:99:43:23:69:fe:c3:
         d2:1a:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:18:37 2026 by rpki-client