Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          /fFGL+GTw2l1uoZBQLoJoS7RjvEO4UuFnxsFj6Dr/Ko=
Subject key identifier:   3A:48:B3:0F:02:80:58:0C:59:9A:BA:98:C6:DB:C6:14:B3:8D:F4:13
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       01A1DDCBE398C89A257D5EC492778A83A402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          0B4B
Signing time:             Sun 15 Nov 2026 06:01:29 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:29 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:29 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: dccr3uI82KONI4GDPzXc71/T63E1EnwDZSItAzj24UI=)
                          2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:e3:98:c8:9a:25:7d:5e:c4:92:77:8a:83:a4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Nov 15 06:01:29 2026 GMT
            Not After : Nov 16 06:01:29 2026 GMT
        Subject: CN=3a48b30f0280580c599aba98c6dbc614b38df413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:a2:1a:72:eb:9a:c6:bf:00:cc:70:cd:dc:
                    5b:f7:4e:30:0c:69:52:c8:db:da:a4:04:65:41:43:
                    9a:93:00:9b:84:3b:db:43:96:31:e3:af:89:de:96:
                    d6:9b:e3:89:d8:90:14:d1:cd:da:eb:63:06:d5:1a:
                    f9:ee:dc:50:1a:21:ba:bb:da:42:dd:8d:fd:78:44:
                    c0:96:61:29:a2:78:c0:f8:42:94:8f:77:1c:4d:2c:
                    e4:25:7d:1f:be:a9:14:3f:20:97:52:bc:fa:34:77:
                    ec:69:85:0f:e4:68:92:c1:c0:77:f5:78:c1:8f:9f:
                    da:8f:5e:43:87:b1:00:ae:3e:9e:57:8f:35:84:1c:
                    38:84:1b:d8:01:25:ff:e2:21:51:02:6a:fe:90:72:
                    bd:6c:87:19:4a:44:03:6d:ee:45:6e:4e:cf:8b:93:
                    d8:b8:f4:7c:04:29:6a:b9:24:e8:98:06:e0:2b:86:
                    ef:64:8d:78:8b:63:2a:04:41:63:b4:23:45:a3:87:
                    c2:d9:b1:8d:ba:a4:27:53:94:00:54:c1:10:4c:54:
                    56:0b:6c:34:16:a2:55:bf:a7:c0:76:22:2a:cd:91:
                    cc:33:4f:b8:f6:ea:40:ac:81:de:bb:d7:0e:93:66:
                    f2:cb:4a:90:2b:37:9e:6f:eb:08:88:6c:e2:4a:de:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:B3:0F:02:80:58:0C:59:9A:BA:98:C6:DB:C6:14:B3:8D:F4:13
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:d8:6e:72:43:da:8b:d2:0a:34:0a:6b:bd:7f:73:50:e0:
         ef:f4:c3:e4:00:b4:83:eb:d9:c5:b5:91:f5:0b:f9:58:98:bc:
         fb:66:e5:fc:5b:3d:fb:4c:de:8d:67:32:9d:6d:ac:1f:86:2c:
         ab:1c:9d:b5:35:9b:d1:c9:fa:2f:d4:41:e9:35:9b:e7:72:19:
         cf:79:31:7c:12:80:83:4b:9c:85:9b:50:0e:f7:e8:06:a6:9a:
         10:a2:e4:6d:66:28:4c:14:a3:cb:77:73:2a:76:f6:b6:e5:03:
         e3:b3:69:e2:09:7a:78:0c:18:c4:83:6b:34:75:2d:4b:be:e7:
         af:f5:51:55:d6:fc:0e:3c:bf:15:24:96:15:3b:84:82:dd:24:
         25:78:22:57:de:42:55:c3:47:31:2c:4f:b5:69:67:46:1c:c7:
         6e:57:4a:b0:b8:ae:f7:07:cd:c0:80:3e:8d:6d:37:3f:33:56:
         e2:12:34:10:08:54:a5:3b:72:5c:a1:3a:7f:ec:c0:f9:5d:e0:
         ab:2e:97:ad:37:d7:0b:47:99:08:d6:d2:b8:a5:97:4e:c1:2a:
         f9:b5:af:f1:cc:6f:9b:0a:d6:a1:03:a2:fc:ce:bc:02:d3:86:
         b3:72:fe:8c:37:ed:a1:0d:77:f2:99:1f:a1:a1:e3:75:ba:0c:
         d6:f2:ce:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:23:17 2026 by rpki-client