Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
File:                     6UUBLq3IWU41GvpoVrw6GUsliH8.mft (raw, json)
Hash identifier:          RRq6jsRowOF/R6g28Eyh+zvDCYAdtgnhqsACK5rh2rY=
Subject key identifier:   84:D0:DD:5C:64:85:98:EB:2F:20:96:94:D1:F9:ED:01:D3:46:E2:D7
Authority key identifier: E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
Certificate issuer:       /CN=e945012eadc8594e351afa6856bc3a194b25887f
Certificate serial:       01A1DF83712C5C945C04B8346750ED375154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
Manifest number:          0148
Signing time:             Sun 15 Nov 2026 14:01:35 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:35 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:35 +0000
Files and hashes:         1: 6UUBLq3IWU41GvpoVrw6GUsliH8.crl (hash: MdKv6L57w6n/3zHmIpvBClxVw+0utrZJx01UyMGnvVM=)
                          2: u6bPPDorwS9CKClEUNjksXyri0o.roa (hash: gLQa9Qy9OIBwLL9zfXE5Kk8EtYZV+dhDzjKvcFTXDYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:71:2c:5c:94:5c:04:b8:34:67:50:ed:37:51:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945012eadc8594e351afa6856bc3a194b25887f
        Validity
            Not Before: Nov 15 14:01:35 2026 GMT
            Not After : Nov 16 14:01:35 2026 GMT
        Subject: CN=84d0dd5c648598eb2f209694d1f9ed01d346e2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:f0:21:9f:94:8f:72:57:d0:d6:5e:fd:2e:
                    b3:ca:05:31:8c:35:9a:5a:fd:53:a0:13:3b:23:76:
                    21:5e:22:c4:f4:cd:5f:a3:45:cc:e2:db:c7:f5:66:
                    33:75:ff:6c:90:68:e7:12:14:d7:be:5d:85:a3:ec:
                    b1:3a:a7:3a:f3:88:d7:26:9f:c1:04:f6:70:54:be:
                    d0:c9:a7:82:f7:bb:74:d9:d6:26:41:fd:51:e6:44:
                    10:f8:46:de:d6:43:9d:fc:dd:e8:1e:43:7e:d9:c6:
                    f7:cb:b7:3a:1b:8b:d6:32:1c:b1:e2:5c:aa:d7:78:
                    90:7d:6c:c1:a5:02:fd:c1:59:47:7c:91:2a:dc:26:
                    97:f3:f9:e0:6a:95:45:69:b9:73:3d:e4:21:41:09:
                    56:27:a8:0e:4c:b5:17:a1:59:ef:70:e9:28:71:ca:
                    58:fc:9b:f4:6f:99:03:53:af:4c:68:96:b1:3d:e3:
                    6c:40:54:f0:42:0e:2a:6e:f2:7b:7b:16:67:e7:41:
                    c9:e5:57:2a:09:c6:6f:41:41:f4:93:1a:48:51:ed:
                    0c:4c:27:ed:97:e9:9f:3c:5f:a6:c1:a3:43:23:f8:
                    2a:80:3d:89:95:8e:05:a7:e1:ab:a2:9b:e7:46:c6:
                    7c:e3:47:c9:a5:05:d3:32:52:f5:13:c1:dc:ca:9e:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:DD:5C:64:85:98:EB:2F:20:96:94:D1:F9:ED:01:D3:46:E2:D7
            X509v3 Authority Key Identifier:
                keyid:E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:79:6a:e6:ef:e6:3e:9b:bb:f3:2b:8c:14:b3:90:59:93:
         c3:1f:c7:16:57:ca:7d:01:d7:99:4e:f4:c6:92:bc:eb:ae:db:
         04:b4:5a:8a:d3:81:52:cf:f5:5a:00:0d:f7:3f:d9:54:3a:05:
         a3:bd:d3:fc:8c:43:ed:c6:51:5a:96:05:06:b7:fb:b1:a9:83:
         f2:ef:25:62:9e:81:2f:45:cd:b4:ff:70:51:7e:5d:8f:44:52:
         7c:a8:2e:16:98:64:60:79:14:00:e1:92:2b:fc:01:4d:ab:f7:
         8e:2b:18:5e:b1:3c:df:90:ce:4e:8a:c5:8f:2d:af:f2:6d:96:
         b2:02:4d:2f:bc:f1:9f:e7:68:5b:7e:32:9a:1f:72:f9:39:60:
         3c:ec:04:bf:29:2d:23:69:93:21:84:9a:6f:5f:a2:ab:b5:93:
         d5:39:d3:1c:3f:ab:3b:07:d7:31:35:12:b3:72:11:cf:11:1c:
         75:05:d5:63:5b:8f:d9:1f:26:ef:16:b1:47:4c:76:03:7e:f4:
         dc:30:a7:34:4a:f4:71:12:ec:27:2d:3e:d8:65:69:f1:28:5a:
         ef:e1:f2:d2:8c:d6:42:df:e7:d3:85:db:0a:10:c5:8f:e1:35:
         dd:38:7e:07:d2:50:5a:bd:e2:18:09:fd:c4:60:78:f4:f1:3f:
         0d:e1:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:38:45 2026 by rpki-client