Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File:                     6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier:          Ot7gJaY9sP8y55rFA45Ak+4xUQK5hFFQ+f3fQ4fWJjw=
Subject key identifier:   5E:5F:DE:6E:7E:94:15:6E:6C:11:75:25:DB:E1:AB:57:AA:29:A5:41
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       01A13559E1822B2F34DBA32583381EA943B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number:          12C1
Signing time:             Tue 13 Oct 2026 13:00:45 +0000
Manifest this update:     Tue 13 Oct 2026 13:00:45 +0000
Manifest next update:     Wed 14 Oct 2026 13:00:45 +0000
Files and hashes:         1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: 8j6VJxI6vxzHFIgwvXPpysOYo8fKzKMLqW/sEllqTjw=)
                          2: aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa (hash: 8KWuhZN2MwzTsWUN92o6fPQusuIkbhVe5Tp3v7UnNEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:59:e1:82:2b:2f:34:db:a3:25:83:38:1e:a9:43:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: Oct 13 13:00:45 2026 GMT
            Not After : Oct 14 13:00:45 2026 GMT
        Subject: CN=5e5fde6e7e94156e6c117525dbe1ab57aa29a541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:8e:78:8f:23:d9:9b:29:3e:40:49:a7:1c:
                    c6:9f:e1:ed:a6:e3:70:d0:d1:70:32:18:39:91:2d:
                    e9:66:42:ed:cc:82:94:b5:06:e1:a0:48:9d:ee:ca:
                    92:15:69:38:8b:aa:6a:c8:53:51:e2:e5:b8:bd:f3:
                    13:28:79:41:1f:51:91:93:5a:c1:eb:64:5a:e1:7d:
                    4b:67:ee:93:7f:5a:e8:81:77:99:af:25:5f:f6:ab:
                    1e:9b:be:4d:99:97:a0:cf:f4:d5:59:b8:1e:79:36:
                    a2:bc:b2:ac:40:9a:4c:1d:53:1c:08:b7:30:73:a8:
                    90:aa:15:1e:aa:09:b7:fd:19:f7:f4:36:02:49:b5:
                    2c:cc:3b:d6:0c:d2:c6:06:87:40:27:b6:a2:a2:da:
                    ba:98:c4:2f:2d:02:52:6c:35:c8:20:a0:78:f5:55:
                    bb:4e:66:fd:8b:79:92:21:ee:39:ce:3d:91:e6:9c:
                    3b:75:ba:73:b2:12:c0:9a:a3:42:6e:51:73:0f:56:
                    d6:49:d8:b5:c0:8b:50:81:27:ce:49:88:86:2f:64:
                    0e:f5:55:ac:26:79:8d:ff:21:ac:72:25:0d:9a:2c:
                    39:78:3f:72:27:96:c9:9b:16:24:8b:38:7a:cb:e5:
                    06:08:df:c0:4d:a3:08:2b:54:69:1a:b1:2f:de:b5:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5F:DE:6E:7E:94:15:6E:6C:11:75:25:DB:E1:AB:57:AA:29:A5:41
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:c5:d1:a7:f1:0e:5a:8e:de:07:11:5d:8a:f1:bc:24:42:
         4a:ec:d3:3c:cc:d2:14:ec:4e:e9:df:8e:80:f8:56:b5:0a:bb:
         b1:b9:0d:f1:80:59:b7:7d:fd:2a:90:04:65:f1:21:af:46:18:
         47:3a:3e:d6:64:19:44:27:40:fa:2f:dc:d1:be:d0:4f:19:f1:
         53:64:d3:94:95:0a:6c:77:e0:f9:26:7f:97:3a:83:6e:f0:2c:
         20:70:1e:5e:98:73:ce:09:c1:3d:99:4c:fd:36:c5:ce:b8:25:
         9c:4f:9c:40:0d:82:6b:73:35:87:e8:58:13:d4:70:d6:2d:3a:
         de:82:fa:0d:1d:33:d9:bf:e4:c2:bc:16:b7:57:b8:c2:69:a6:
         6b:f1:4b:62:f8:0a:df:32:e5:94:d4:1b:70:f2:50:39:5a:a5:
         43:1e:f5:c1:21:d9:3a:4d:12:e2:9e:ef:ce:69:72:d1:2b:d3:
         50:92:88:9c:1e:34:57:ea:f3:d1:0e:43:e2:51:e2:e6:83:14:
         21:85:31:2e:6f:99:b3:c9:6a:9a:ce:7b:9e:9f:60:74:53:ec:
         a9:94:d3:72:81:26:56:96:dd:a6:04:96:0e:6c:d7:ac:3b:21:
         17:ca:0a:d4:79:77:c1:6b:da:43:a3:c2:ed:11:c0:a7:9a:3d:
         3d:ed:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:09:36 2026 by rpki-client