Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File:                     aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier:          VI+UALQw1YfEhFRw9rqnPgaFO7hja/cv84tqH9nOdO8=
Subject key identifier:   76:62:60:78:98:FF:17:1D:E3:0E:6E:35:3F:91:B3:69:72:AE:67:CA
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer:       /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial:       01A106C9DA7D3325A2ACF96106A9758E61EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number:          1A8B
Signing time:             Sun 04 Oct 2026 12:00:54 +0000
Manifest this update:     Sun 04 Oct 2026 12:00:54 +0000
Manifest next update:     Mon 05 Oct 2026 12:00:54 +0000
Files and hashes:         1: CamWbKBf5Y3VteBO8Uc0pWfEITM.roa (hash: bZwRo4lW5e/6ZSgpxGpqz9dkfFjM0XJ3qXKXeNNuTmU=)
                          2: GtMCe24ngv6kwkwMfciDCRzIGbc.roa (hash: HPYG+bYgN4LrxtIhEXRuNsczF+K8PHsFJkbYTipolY0=)
                          3: Z6Gv7kzMWkBhlCZCxtu-CHOgLg0.roa (hash: qOPuRyys5qP4i7eLJm+jp6fsbykedjTSR4JfxXE5g4g=)
                          4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: Qej9PdJxPqn8urtz8i18cJVq7B7o+/qdOe2NrpnIwCI=)
                          5: wrOqy5HuCTVkCe5fRVTajU3ehvY.roa (hash: Fl62VKf9eEMW25X6taoDhAVNcBPYuEGUkuBrbI0k5Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:c9:da:7d:33:25:a2:ac:f9:61:06:a9:75:8e:61:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
        Validity
            Not Before: Oct  4 12:00:54 2026 GMT
            Not After : Oct  5 12:00:54 2026 GMT
        Subject: CN=7662607898ff171de30e6e353f91b36972ae67ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:86:da:0a:a7:e8:20:af:c0:8c:18:25:01:
                    f6:61:eb:76:54:4b:b7:f3:05:f1:cb:e8:21:06:cc:
                    30:a5:e1:f1:60:5e:03:41:4b:27:68:63:97:17:a6:
                    40:c2:50:03:42:eb:29:b4:2d:9d:e3:7b:a7:e5:f9:
                    ab:39:b4:b6:6a:c6:9d:25:da:20:a0:e3:7c:e3:de:
                    29:2f:33:07:a7:ab:69:65:77:21:25:47:b4:65:f6:
                    43:7e:4f:ae:09:4b:34:2b:2d:00:ea:bd:8e:51:cc:
                    46:96:83:b8:9b:39:9e:08:92:3e:56:9c:70:e4:2c:
                    ee:21:41:c4:09:8a:73:ca:4d:ac:60:96:e6:25:2b:
                    aa:2a:b7:22:32:9f:b0:4c:50:51:56:1a:73:54:cf:
                    7d:68:7d:86:7c:9b:70:2d:f3:9f:ca:b4:b7:2d:63:
                    1a:49:1a:ae:f0:c2:09:c7:96:4f:11:bf:ab:4c:8d:
                    6a:6f:7f:bb:40:07:cc:f5:ad:65:83:f2:26:a3:af:
                    d2:0a:2d:73:51:52:e2:ab:16:6b:e3:45:74:f2:e3:
                    97:75:e2:dd:f9:cd:38:ad:4e:e8:09:6c:de:df:58:
                    ff:d2:32:3d:d8:eb:d1:9b:b9:bc:d5:aa:cb:f1:a9:
                    e1:ba:e1:2f:cf:83:f2:b7:01:49:fe:3e:b9:33:51:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:62:60:78:98:FF:17:1D:E3:0E:6E:35:3F:91:B3:69:72:AE:67:CA
            X509v3 Authority Key Identifier:
                keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:37:ca:f3:c4:18:2b:77:33:37:cb:30:3a:95:26:69:02:cc:
         7f:6f:df:e2:8c:16:42:36:02:19:de:f8:80:5c:d0:7c:fa:a9:
         2e:e0:0c:2e:3a:97:94:59:6c:02:20:5c:85:f1:70:63:6b:1d:
         16:40:82:2e:32:6f:2c:e2:ec:e0:cc:a0:b9:1e:68:10:0d:ba:
         01:5d:75:d6:6b:24:8e:e8:9e:87:55:76:95:90:5c:e4:80:49:
         23:59:0e:e7:29:8c:0f:69:e1:5a:2d:f6:d8:5b:40:cd:74:a8:
         79:e3:47:12:0c:44:08:44:a9:2d:c9:81:e6:11:d2:79:bf:2a:
         e7:01:f1:54:cc:22:40:70:f3:06:c6:e7:6f:9d:44:6a:e6:ea:
         eb:69:71:4b:47:f1:a5:cd:e4:b2:c3:df:e9:00:55:3a:90:a9:
         88:b2:49:2b:3c:d6:71:4b:b6:3d:80:b7:4f:ac:58:8c:41:c3:
         fc:e3:fe:60:cb:1c:97:e5:c1:6f:0e:97:79:b7:02:e4:33:be:
         3e:b9:98:d2:6e:9a:b4:5f:fe:fb:f6:b6:9f:b5:c1:15:c1:f3:
         e6:3e:cb:7b:b4:b4:cb:c1:30:34:5a:7b:c6:5a:05:e0:3a:b9:
         18:ac:b9:93:5f:60:9a:d9:e2:cd:5b:93:76:d2:54:fd:bc:3c:
         ae:2a:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:17:09 2026 by rpki-client