Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File:                     q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier:          z65ZhRTsswAVcuKgr4TPLgAf5pxjnE7dDt9jhWBRQmc=
Subject key identifier:   11:03:DE:E6:14:51:C4:54:4F:4B:BA:4A:F9:3F:D4:F1:C8:4F:D1:C8
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer:       /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial:       01A11FE4C81C3A9233A2455D1A4E6AAA24BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number:          1A96
Signing time:             Fri 09 Oct 2026 09:00:49 +0000
Manifest this update:     Fri 09 Oct 2026 09:00:49 +0000
Manifest next update:     Sat 10 Oct 2026 09:00:49 +0000
Files and hashes:         1: 4HGQ2m_tsGQ8bwCnPSXfEpO9HVQ.roa (hash: Q57pytqlVJrw0ni19UPnInhK5SASLjHDFcZbHb2XGnE=)
                          2: Dtb5L2i3F4bloLJfx5uawZqIkls.roa (hash: gjTGNWMLVvyGT9SUilWAhMd6bQfNZN+VjF9bv+zIY+Q=)
                          3: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: U+DaT9ygtv5+VG4qGLlszmJ7MqrnhO3Cz4jyqT2yI7M=)
                          4: wCs9k6Mf4iHjjidVUpH6jUD59BE.roa (hash: 7sOLGSFd18txziMvutD89np8EpQNTpEhmRbFbF2gz54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:e4:c8:1c:3a:92:33:a2:45:5d:1a:4e:6a:aa:24:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
        Validity
            Not Before: Oct  9 09:00:49 2026 GMT
            Not After : Oct 10 09:00:49 2026 GMT
        Subject: CN=1103dee61451c4544f4bba4af93fd4f1c84fd1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:d2:79:88:b6:ec:4b:13:c8:2f:29:07:36:
                    0f:6f:21:b9:1e:5e:4d:43:ac:c5:f0:ea:76:0c:99:
                    8e:80:0b:c0:75:86:1a:da:fb:2c:e2:28:4f:97:f3:
                    4a:ac:09:59:22:0a:60:19:70:76:df:7a:6a:fb:0b:
                    85:be:cf:01:0f:d1:21:24:06:44:a3:53:65:9c:c3:
                    14:e6:78:db:cc:16:a4:e7:1d:47:09:1a:20:13:b7:
                    bc:7f:88:12:84:b6:ed:a6:0b:35:cd:cb:40:78:6b:
                    1a:8d:6d:64:30:eb:75:9b:a6:83:56:89:9f:02:c5:
                    c2:f3:9b:de:76:35:8a:d6:a4:49:65:49:6c:df:54:
                    78:ed:04:e0:ab:d3:51:07:42:e9:e1:f8:89:de:95:
                    8a:d0:d2:b0:a4:6a:9a:df:e9:c2:35:8f:6d:94:da:
                    47:ef:fd:2d:ed:bb:e1:85:3d:bd:57:71:c8:3b:6e:
                    0b:0e:cb:79:d3:1b:94:55:92:8e:25:84:db:dc:1d:
                    7b:e3:72:01:d1:c8:35:5c:28:d3:54:e6:30:c9:f5:
                    28:db:9e:15:5c:32:5f:1a:48:72:59:04:e6:d6:b0:
                    bd:b4:32:74:5c:97:37:fc:c3:04:3c:be:aa:00:97:
                    75:3e:d2:b0:c0:75:91:92:68:1a:54:40:8f:30:a5:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:03:DE:E6:14:51:C4:54:4F:4B:BA:4A:F9:3F:D4:F1:C8:4F:D1:C8
            X509v3 Authority Key Identifier:
                keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:28:bb:40:ac:a4:42:2f:e4:7a:b2:2d:7b:86:28:93:ea:0e:
         0a:74:4e:dd:f8:82:94:46:cb:0b:31:d3:3a:46:75:12:11:f8:
         c9:7a:9a:26:a4:0c:dc:47:c1:bc:84:04:52:42:32:2c:66:35:
         23:95:6b:54:7d:c5:1f:49:07:83:64:86:8e:bf:2c:ec:f3:ee:
         ea:6e:e4:8c:db:75:25:2b:04:b8:00:dc:48:b1:b1:85:c1:0f:
         ac:16:fe:c6:97:a6:c4:5d:36:ac:9a:17:93:fd:b7:c7:f2:dc:
         e2:bd:de:2f:67:9d:53:b5:7e:b0:53:a8:40:b2:fa:a6:c5:3d:
         67:e0:d2:81:1c:8a:a6:ee:1d:cc:ec:61:a9:62:c5:19:4e:d3:
         ee:46:75:d7:da:e5:e2:15:0a:13:ba:09:01:f4:a5:70:be:5c:
         45:f4:14:89:bd:03:ce:05:a2:3d:07:e5:d2:0d:d7:c3:41:73:
         bf:cf:8d:b5:8f:e9:f6:7e:bd:9b:f5:2b:c2:6f:0f:ae:4f:36:
         c1:b6:02:9a:dd:06:cd:74:0a:9a:61:cd:f6:14:cf:1c:42:f7:
         c2:60:cc:75:01:0b:4b:68:16:db:4a:c6:d0:7c:86:2a:67:a0:
         82:c3:36:16:48:8e:72:b8:21:38:37:af:d6:58:c9:24:a3:7c:
         12:a1:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:47:24 2026 by rpki-client