Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File:                     6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier:          bCczpwoIF3vlnEVsDuiODzp7Ad9pFAi89b31JDt6AWY=
Subject key identifier:   B9:1C:95:46:52:B4:F6:F1:99:3A:56:1B:A4:4C:D5:5B:CA:45:33:70
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer:       /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial:       01A10D71227727DD7A6BAF7C0636F2D99BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number:          0FDA
Signing time:             Mon 05 Oct 2026 19:01:20 +0000
Manifest this update:     Mon 05 Oct 2026 19:01:20 +0000
Manifest next update:     Tue 06 Oct 2026 19:01:20 +0000
Files and hashes:         1: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: ptk110LB0uldjwVjVFlLbzmKaVngGKir41okBMn5dcA=)
                          2: 9iFENB2hmlqD3TDEXX5p9kqgKVA.roa (hash: O5aqIeOA3+G+W077TPrLU4j9DOFmgjmlG+7o4CEkzww=)
                          3: J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa (hash: lUuNT1eBBa+JpXs3fEVcImBW6pOF6M9gLS5SJiJaWOc=)
                          4: T5t2lrc6vZSWtfpj81F8OW76GS0.roa (hash: yORkG5zj/0zcAQ3RthIBP3CwZBqbHhAwf4IAuGcnaRQ=)
                          5: _ciy-lTi4OPOE4H7jBh6iVeSzM0.roa (hash: UoO0miY2aliagEe8/7pX67pSC1+YIe4R/lR+1wd4LX4=)
                          6: t5_VYPZ1lf_CKZMBh1bjbEMFTgM.roa (hash: /soIDtSH0BbDEeEeE6xQsPK1zrhevJxy2QjQT/OIR/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:71:22:77:27:dd:7a:6b:af:7c:06:36:f2:d9:9b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
        Validity
            Not Before: Oct  5 19:01:20 2026 GMT
            Not After : Oct  6 19:01:20 2026 GMT
        Subject: CN=b91c954652b4f6f1993a561ba44cd55bca453370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:4e:cb:e8:65:de:d6:42:ba:5b:53:df:fb:
                    5b:bf:fb:af:d6:b0:43:d0:73:9f:51:8c:22:c5:86:
                    e6:4a:9c:bb:26:54:6e:7b:dc:00:7e:65:ca:6f:65:
                    30:63:94:42:a7:e5:2e:4c:ca:a7:f3:f5:b8:b1:cc:
                    1a:5f:b4:fb:23:70:7b:2f:93:06:64:5f:80:1e:d7:
                    5e:0c:20:34:c8:f6:10:9c:85:e8:72:02:27:de:6f:
                    7e:04:e0:4e:3d:2c:aa:e5:2f:3b:97:fe:36:cb:10:
                    7a:b0:38:e5:02:1e:a4:bb:a3:bd:63:95:e1:f0:20:
                    f6:d4:e1:8a:5a:df:f8:37:a4:a7:f6:89:67:00:72:
                    aa:aa:7a:06:93:ee:9f:76:4f:30:d5:06:90:fa:4b:
                    62:9d:c9:bb:dc:d9:c4:c9:d8:94:d4:c8:f3:c1:ad:
                    06:d5:a1:2f:16:78:55:fb:6d:71:3c:68:08:10:88:
                    78:90:76:0c:9b:d6:cf:0c:84:71:6a:da:ae:b3:1c:
                    57:f9:76:a3:4c:72:52:86:c1:c4:df:d8:2f:12:25:
                    ed:9d:97:34:18:8a:77:6c:e3:e7:ce:8f:1a:1b:a3:
                    d4:c6:4d:4e:6b:c1:cb:b7:ee:75:ad:37:e4:e4:ea:
                    54:c0:5b:55:99:eb:9a:09:5a:30:aa:13:2d:b7:a9:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1C:95:46:52:B4:F6:F1:99:3A:56:1B:A4:4C:D5:5B:CA:45:33:70
            X509v3 Authority Key Identifier:
                keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:17:fe:3e:29:a0:32:55:5e:5f:01:7a:6e:7d:cd:26:3a:dd:
         da:29:4d:66:a9:6b:c7:57:47:03:a8:99:ab:91:5f:06:39:b2:
         09:66:30:f0:1e:b5:f9:06:9f:81:f7:5e:fa:96:ae:38:7b:a6:
         85:5a:58:9d:cb:ea:1c:2a:ef:65:78:31:36:f9:e0:e1:5b:4d:
         4b:1e:3f:ce:23:a0:26:d1:34:26:27:98:64:ef:d1:76:f6:a9:
         64:a5:9c:0d:78:26:57:e7:4b:76:e2:88:ae:7c:6c:67:b3:fd:
         97:08:5b:0e:50:cb:b9:55:60:e7:0a:ff:f0:2a:f9:3f:c5:19:
         8d:e9:f9:8f:c7:28:4b:2a:a3:b5:86:65:fa:ed:7d:eb:9a:30:
         45:28:a3:ba:e5:c5:c6:69:58:ca:40:0a:3c:2d:ee:b3:35:a3:
         65:b3:bd:df:82:e3:d0:8d:85:13:52:b5:78:09:49:83:23:e7:
         3f:41:fc:17:78:df:4b:ec:d6:9f:f8:d0:90:a0:85:af:31:05:
         56:19:85:67:cd:4d:29:9f:71:86:e4:d3:81:0a:0d:19:d6:97:
         93:fb:b8:35:23:d7:02:74:43:4b:74:09:d6:46:a4:90:09:03:
         70:e2:2f:63:6f:48:03:fd:45:8c:a8:0a:01:b9:ca:5b:d1:3a:
         91:84:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:05:52 2026 by rpki-client