Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
File:                     6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft (raw, json)
Hash identifier:          zI91u2ncc2GcYTPIjfnOz/ObmwaazrTP2D3ScCR9Znc=
Subject key identifier:   86:8F:D3:73:71:8F:B4:89:A5:31:7E:65:2F:C9:02:60:56:6D:E0:0B
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Certificate issuer:       /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial:       01A1DF158FE3BF188AED00F68F78AC77A779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
Manifest number:          1B08
Signing time:             Sun 15 Nov 2026 12:01:34 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:34 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:34 +0000
Files and hashes:         1: 12mio7PtkU-U_THFTXRLuQuoaZM.roa (hash: Nhiklf9CYk2MODRY2dg+PRkWlT5LIfvFj8ZYEzebLwk=)
                          2: 6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl (hash: fTgqHeFcpMq4hBywLfuqGTFa2ocCmTmJbvgapokRKX0=)
                          3: 9QKBHd_XuPJw3-NHIxnHJFVHZNs.roa (hash: rZotzcjQad5Wc42Cxm6dHXnrc8v4lq9vQewLzidPFGQ=)
                          4: DJeaERHkmET5-eHHAlZRzWddnHY.roa (hash: xrunQdxCV1231jVsKRShGLTYC9bF1uR6vdQtrsPx3Dc=)
                          5: GRn1lLTh5v3N7BZNzhB02EoRxPg.roa (hash: lpZDyA0+F+lvnBse40BJMuMSIMD2YlUgxhhc1pr6Msk=)
                          6: ru0_3NDOl86gYPSlVCdGuegyidk.roa (hash: FadD8JITUr9vffUiSHO92yQ0svt1O66Z6S1J5wnXeFM=)
                          7: unxwdf81gpRWB7U0VMJrWq-VwSc.roa (hash: kyyuEv5ut2js57ZjOSryT6crB/LNxjqzyJucRjWFp8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:8f:e3:bf:18:8a:ed:00:f6:8f:78:ac:77:a7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf760c05773c15d73676450344668fefb723447
        Validity
            Not Before: Nov 15 12:01:34 2026 GMT
            Not After : Nov 16 12:01:34 2026 GMT
        Subject: CN=868fd373718fb489a5317e652fc90260566de00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:2c:8c:e7:0c:34:e1:92:36:9d:c4:29:88:
                    a9:64:53:55:48:b6:1f:87:f7:a1:a5:2d:be:3b:8e:
                    d3:24:2f:e1:da:e9:46:cb:bf:e3:d5:2f:2b:4a:12:
                    34:01:86:0e:b2:15:5f:a3:4b:c8:06:13:ae:15:f4:
                    47:9c:f7:45:d4:39:32:a7:69:81:c0:1e:f7:84:ce:
                    8c:27:cf:9c:10:dc:2c:ce:45:11:1d:9e:cf:c4:1b:
                    00:01:29:ba:68:42:24:77:d5:13:b1:46:6a:11:0e:
                    e1:94:83:ed:21:f9:0c:05:50:b4:d2:c4:ae:47:01:
                    d1:89:07:08:4f:48:22:ae:c4:99:57:8f:58:7b:78:
                    94:08:5d:1b:27:5c:c7:89:0f:a6:d6:9f:b8:c8:92:
                    ca:eb:5c:44:54:99:18:f1:cf:54:b2:83:79:9d:35:
                    c5:f7:08:ee:a3:df:fc:f5:f3:66:03:3b:dc:5f:bd:
                    50:0a:80:76:0d:ad:da:62:a0:1f:13:90:74:18:f2:
                    64:9b:c1:ca:89:fc:f6:8d:72:9e:9b:44:97:0c:ca:
                    43:25:0d:50:57:ab:30:f7:5a:b9:cf:ac:9a:8a:f5:
                    c2:e4:b7:72:14:e0:eb:a5:c0:b7:cf:a6:43:6d:89:
                    8a:77:fb:49:8f:81:c0:57:d1:8b:81:fa:33:06:b5:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8F:D3:73:71:8F:B4:89:A5:31:7E:65:2F:C9:02:60:56:6D:E0:0B
            X509v3 Authority Key Identifier:
                keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:85:3b:b8:1b:14:36:dc:59:1a:87:87:ce:0e:39:28:00:
         09:8f:8a:4c:7b:78:c1:36:df:9c:88:3f:62:35:69:af:c6:dc:
         8e:fa:4e:05:9d:18:28:2d:89:85:4e:42:c1:6d:52:5e:25:96:
         a8:82:40:b1:30:b1:51:2d:12:2d:8b:7a:b6:19:aa:51:cb:b5:
         92:16:12:47:e0:a1:44:eb:ec:f2:ba:ca:4a:bf:18:16:6c:99:
         e1:c7:4d:ad:88:50:a3:4d:d9:ef:b4:3c:50:47:49:36:ca:ed:
         97:9a:6a:7a:af:31:a7:a5:a7:a2:f7:5e:e4:ce:1e:ff:ba:64:
         74:9b:0f:bb:65:4d:b2:16:d9:0b:8b:ab:42:35:1a:46:44:48:
         3d:c1:86:2b:11:a1:8a:e7:5c:ab:fc:75:27:af:0f:cb:ea:b9:
         f6:57:57:35:9c:f3:23:19:e3:9f:09:b1:e9:0d:9a:75:0a:79:
         55:01:9d:8a:1d:46:2e:72:d3:ea:90:28:b7:37:c6:a4:84:58:
         8e:19:6f:a1:ee:71:af:85:1f:01:2e:e0:6f:bb:ae:bf:de:6c:
         bf:6a:52:94:e8:0e:96:77:e6:b7:6b:42:47:cd:c3:86:0d:87:
         72:29:ac:e2:c4:a0:8b:07:eb:7b:24:75:04:b4:47:e4:40:49:
         4e:ef:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:34 2026 by rpki-client