Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
File:                     bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft (raw, json)
Hash identifier:          rDwxEnmhqRv0wq+DpXzccWC1bu8HzOwr0wFvz1anNRU=
Subject key identifier:   8F:05:C8:A6:EB:1A:2B:4A:AF:93:09:E9:17:FC:08:AE:2A:0B:7B:B9
Authority key identifier: 6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC
Certificate issuer:       /CN=6c30902a9060b3474555c4cdfd00e6fcab81abdc
Certificate serial:       01A1DDCBD906C7CFA75BC46DB7A207F62B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
Manifest number:          92
Signing time:             Sun 15 Nov 2026 06:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:26 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:26 +0000
Files and hashes:         1: bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl (hash: N5Luu3A1GOJZTHXK7ogNY6EnSV7YgIRNhySY1G4x4LI=)
                          2: hUZPNrZM_9jjOFJ8M9g3XrM_dlQ.roa (hash: qfVHrsh37XWbtKi2jegl60I9sTQqtPhRR5+aHwasfEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cb:d9:06:c7:cf:a7:5b:c4:6d:b7:a2:07:f6:2b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c30902a9060b3474555c4cdfd00e6fcab81abdc
        Validity
            Not Before: Nov 15 06:01:26 2026 GMT
            Not After : Nov 16 06:01:26 2026 GMT
        Subject: CN=8f05c8a6eb1a2b4aaf9309e917fc08ae2a0b7bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:44:16:3d:01:37:25:de:82:60:c1:27:d7:
                    8d:32:3e:30:a3:13:ea:50:c4:19:3f:62:fe:37:0f:
                    3a:a3:11:b7:6c:a4:3c:fc:4a:1b:62:bd:91:2a:af:
                    6b:0d:ff:c1:2e:ab:0a:c5:22:20:ae:13:9b:22:59:
                    a0:96:f9:e6:81:6f:d8:ec:8c:74:72:3a:70:ab:c7:
                    b7:cb:aa:06:71:e8:78:84:f2:fb:60:2c:f5:c1:29:
                    55:60:bb:ff:c9:5a:03:63:06:07:57:17:56:ec:b4:
                    03:cb:8a:42:f7:12:00:23:92:f2:58:4d:f1:26:b1:
                    c9:8c:a0:94:7b:53:e8:53:30:26:9d:7e:e1:c5:35:
                    c7:2b:94:d5:72:9e:ed:9f:42:59:0f:33:d2:e7:da:
                    c7:df:02:e2:0e:94:1c:4c:51:a6:07:d2:98:ba:14:
                    5a:1c:6f:4a:e4:94:1b:92:98:b3:4b:43:8c:98:92:
                    fc:51:62:57:8e:e3:be:31:d2:1b:3e:0e:72:52:0b:
                    cd:c7:fe:b6:08:4b:f8:0b:9f:fe:46:fe:d8:76:5f:
                    8a:22:a9:2d:f1:ea:d9:bb:57:c5:35:1f:bc:70:e2:
                    dc:3c:ef:56:7e:07:e6:ed:7e:2f:c7:3e:0c:73:76:
                    3a:af:e2:24:e7:91:5f:6f:59:3b:21:92:93:a4:ee:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:C8:A6:EB:1A:2B:4A:AF:93:09:E9:17:FC:08:AE:2A:0B:7B:B9
            X509v3 Authority Key Identifier:
                keyid:6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:21:15:cc:2f:77:35:09:c4:56:ea:97:e9:08:a5:f0:1e:c7:
         0a:8e:09:f8:00:61:99:15:d4:6a:84:63:dd:21:c0:f7:8c:4c:
         15:fb:86:8e:61:7e:15:2b:8a:c4:40:7a:97:b0:da:25:d6:08:
         d9:93:e6:c6:5e:3f:88:fd:3e:fd:36:28:08:58:1b:b6:30:57:
         71:92:3e:75:a6:db:0a:9d:e0:7b:a7:bb:8d:a9:c3:c8:4d:c3:
         99:5f:77:02:c5:ab:2d:f3:10:8e:a0:8a:f0:c5:35:c7:45:a7:
         b8:34:3a:1d:a2:ff:10:ca:20:e8:33:7b:1a:04:ae:e8:6e:e7:
         16:01:96:b0:3c:c2:b4:bb:57:ec:df:2d:6d:44:38:94:91:23:
         26:93:db:1c:58:23:e1:82:3e:56:c1:61:8e:93:ed:00:ea:d5:
         42:ce:75:8d:72:b8:b3:bf:1a:88:4c:54:65:67:f7:8c:56:e4:
         e5:da:08:38:3c:33:5b:f0:c4:a6:ce:26:ae:dc:7d:a0:c6:38:
         ce:20:a3:9b:aa:ea:65:7f:bd:a0:e7:86:7b:11:d3:f1:7b:1e:
         be:48:3e:80:ab:49:f5:b7:ab:1a:dd:d7:79:76:9c:b4:2e:eb:
         c6:44:f0:2f:19:d3:2a:57:e3:14:75:2e:f5:7b:17:40:93:6e:
         8a:20:7b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:26 2026 by rpki-client