Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File:                     b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier:          MZnQwPIhqO7/lO0YlqIZvo1k1QFr3VTXYe/Rgz8WUfM=
Subject key identifier:   11:DC:2D:92:88:8B:49:FA:67:6D:27:F8:14:15:51:C9:C0:7A:1E:4D
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer:       /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial:       01A100FEA8C80762090A26E2500907D1256B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number:          0DF0
Signing time:             Sat 03 Oct 2026 09:00:51 +0000
Manifest this update:     Sat 03 Oct 2026 09:00:51 +0000
Manifest next update:     Sun 04 Oct 2026 09:00:51 +0000
Files and hashes:         1: Xe7Q3eQ_zRFoXx82N03IjvhgxdM.roa (hash: f1v3DQ+f28VV3rL9c+CaytHItkv+65iYkUhizFS/GxE=)
                          2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: QHhPVOqXZ+3zeIFwJtI0V37+3aFSFiGu1+9iIHPI8UA=)
                          3: xWhq4pJqpBDCOAn9j2p-jZnUVxw.roa (hash: 1dUwvyE89fb3mgfozy7QJGPfLkBx30lg9K5/pQzltFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:fe:a8:c8:07:62:09:0a:26:e2:50:09:07:d1:25:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
        Validity
            Not Before: Oct  3 09:00:51 2026 GMT
            Not After : Oct  4 09:00:51 2026 GMT
        Subject: CN=11dc2d92888b49fa676d27f8141551c9c07a1e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:1e:f7:ba:fa:b9:77:f7:36:09:77:b1:0a:
                    46:8b:f0:6e:6a:2f:4c:3e:40:d1:c4:40:5b:a3:cb:
                    04:7b:14:46:86:61:53:d3:ff:12:0d:bd:8b:60:94:
                    ed:e9:2b:5e:b6:29:bb:42:f4:7e:be:ea:8e:5c:93:
                    52:8b:f8:ed:07:91:d4:46:ea:d1:af:8e:2a:b8:ec:
                    89:bc:75:ce:67:3a:73:1a:ec:6f:13:ba:b2:3e:b4:
                    07:d5:9d:9f:2d:12:51:1a:73:7d:a8:6d:20:33:04:
                    4d:ef:7d:54:06:e8:4b:b9:8e:0a:23:6e:71:24:20:
                    22:9a:64:d7:b7:d1:f9:4b:04:6b:32:32:f4:20:e7:
                    09:2f:15:92:79:69:01:cc:a5:95:47:29:de:dd:ff:
                    a6:e6:6a:63:72:ff:45:a3:16:b6:e2:90:d9:ce:f2:
                    63:45:35:15:b7:bf:2f:89:46:c5:cf:29:d5:85:e0:
                    03:22:fb:c4:19:a2:c9:2c:60:66:7a:35:42:08:9b:
                    e6:ce:b2:c6:8f:4d:3f:f4:dc:5a:74:5a:87:c4:0f:
                    31:89:c6:b2:45:71:ec:bd:49:15:d9:ba:0b:41:0b:
                    6c:09:cb:96:a5:89:09:80:e5:97:fe:d5:44:3e:de:
                    33:ea:7d:73:f0:90:4c:67:cd:81:1f:44:31:5d:e4:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:2D:92:88:8B:49:FA:67:6D:27:F8:14:15:51:C9:C0:7A:1E:4D
            X509v3 Authority Key Identifier:
                keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:50:75:bf:f3:f2:ed:b1:c9:b9:c0:30:38:88:6f:61:de:8f:
         0b:29:3d:9a:e3:d2:39:40:b9:99:84:df:0e:c3:53:97:57:2c:
         26:7d:6a:c4:82:28:44:0e:a6:79:1e:05:ae:ee:df:22:af:dd:
         44:c5:87:a9:e4:7f:64:5e:fd:ae:0f:c2:25:55:4e:74:ff:71:
         f2:93:cc:6b:aa:68:ff:5f:38:cb:20:bc:88:fc:b3:ae:38:40:
         54:63:85:77:72:b9:ac:40:c2:c1:f1:70:c8:33:1f:8a:73:47:
         d2:38:57:ae:04:57:89:f4:ef:d2:18:37:c3:5e:bd:d9:df:7f:
         8e:2e:6b:e9:b0:f1:a3:9d:be:08:00:a0:ec:dd:2b:f6:2b:78:
         8c:99:03:e6:76:5a:bb:3b:fc:1d:55:b1:ed:b9:79:1c:1b:5b:
         2e:04:3f:80:6c:14:e2:57:e4:fe:71:b0:f9:4e:dd:6f:67:f8:
         b8:c7:35:8a:9a:bd:46:80:2a:fe:e5:83:10:b7:22:07:6d:c6:
         03:95:38:67:c0:0a:e3:87:b0:04:68:16:50:2f:89:b8:c8:87:
         e9:1b:ae:d3:97:ad:e3:c5:2f:87:99:ec:63:ed:79:d8:c5:7e:
         1f:8b:30:1d:cc:30:5a:2a:9d:bf:07:0f:13:dd:e7:5c:64:ef:
         7b:d7:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:20:48 2026 by rpki-client