Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
File:                     6wkUma3HabD7qf7TKEVDp0JcI1E.mft (raw, json)
Hash identifier:          ksPivul81oK5S9LSp5K2uZ+jJrKGotihk+8YFXEPM4Q=
Subject key identifier:   2F:79:8E:CA:8F:04:2C:60:56:B9:9F:C9:B9:28:22:DA:9D:25:F9:AB
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Certificate issuer:       /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial:       01A1280C5638AED982568E1B203EA5BB1F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
Manifest number:          1A8B
Signing time:             Sat 10 Oct 2026 23:00:59 +0000
Manifest this update:     Sat 10 Oct 2026 23:00:59 +0000
Manifest next update:     Sun 11 Oct 2026 23:00:59 +0000
Files and hashes:         1: 6wkUma3HabD7qf7TKEVDp0JcI1E.crl (hash: T8C1qoZccXs+zTGYNSQkZGcIG9zDmVsQEKG/sofVgXs=)
                          2: rOuGO_1gCYprPD-h4R9GJkpO-pk.asa (hash: ADWTOgtzM/RQEPFl2ei6Z0iZeRpaXawuCLtIGbZ83eg=)
                          3: rWm3cgd6waNRJveS8LaSIEzObik.roa (hash: 5F/5sAstAzaL0J2a2NDDLr3916StrN7W1pkksE4QUt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:0c:56:38:ae:d9:82:56:8e:1b:20:3e:a5:bb:1f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
        Validity
            Not Before: Oct 10 23:00:59 2026 GMT
            Not After : Oct 11 23:00:59 2026 GMT
        Subject: CN=2f798eca8f042c6056b99fc9b92822da9d25f9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:91:3e:81:30:89:a3:a1:76:a3:a5:91:1e:8a:
                    ea:e2:77:9e:4e:b7:a3:88:d5:73:63:87:3d:d2:e2:
                    34:8b:f4:d2:26:d4:ee:8b:ab:90:6a:30:00:1e:1a:
                    46:7f:d3:32:df:6a:c5:af:11:5a:1d:80:39:dc:60:
                    20:c7:0d:2a:47:8b:b0:3d:1f:6f:74:d5:3e:95:31:
                    4c:7e:44:ff:11:89:df:26:1e:b8:41:d1:a5:63:5b:
                    cd:43:4f:01:7b:3e:8d:ab:cf:d7:64:cd:96:b6:84:
                    a5:a4:a3:32:a3:3c:9b:e1:b7:6f:ad:3d:1e:70:24:
                    f3:d3:d7:39:40:2f:a0:ad:0e:b6:5f:06:5b:6c:2a:
                    38:ac:e9:ef:25:27:b7:e5:af:da:3e:8e:a5:8f:45:
                    d0:ec:f8:e7:73:65:17:56:3e:cc:69:4d:ae:96:48:
                    22:43:fd:b8:73:ea:52:41:07:aa:ef:aa:13:43:a5:
                    85:d6:1b:63:4f:fe:eb:8a:19:5d:e2:2b:b4:c6:13:
                    43:4a:8b:97:a0:5a:8a:a7:e9:53:16:de:70:84:42:
                    f0:b9:ed:00:52:16:28:84:fa:8e:46:89:79:a4:69:
                    fd:1f:f7:25:c9:21:e8:11:1d:4a:79:c0:4c:d6:0e:
                    f1:73:52:09:a6:d1:18:e2:7c:00:8c:bc:6c:b5:28:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:79:8E:CA:8F:04:2C:60:56:B9:9F:C9:B9:28:22:DA:9D:25:F9:AB
            X509v3 Authority Key Identifier:
                keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:7e:3c:f4:5c:da:96:86:90:cb:74:a4:e3:04:19:de:a2:
         90:22:c6:06:e4:47:fd:ea:c6:cc:95:3c:57:b6:1d:f4:51:7f:
         05:4a:4a:ca:7c:2b:e7:02:ca:e1:fc:67:ec:b7:aa:26:7a:91:
         31:54:94:30:99:04:d5:55:d5:5c:3a:d2:85:e8:c1:30:a7:40:
         97:7a:2c:3a:81:60:1a:88:09:00:14:11:0a:69:62:41:e4:d8:
         68:b8:d9:be:56:f9:2f:f9:55:42:2d:6f:01:86:0e:61:11:d0:
         b8:da:0a:01:c5:39:70:d3:94:9d:0a:c9:d2:4d:c0:18:12:c7:
         a4:01:74:76:cd:05:1b:37:aa:ce:03:6c:15:13:0f:09:60:5a:
         01:9c:63:c6:a7:73:f7:48:26:4a:be:1b:03:b1:f1:ce:92:02:
         ee:f7:f3:a0:ee:2b:f7:48:ef:0f:29:3d:b3:23:01:30:6a:74:
         d3:5e:1f:3a:a7:83:a9:1f:44:dc:40:a4:7d:5d:58:48:e1:c4:
         5c:d5:56:f8:1d:68:f2:98:03:39:d7:50:2a:a3:5e:91:7c:ca:
         e6:95:95:aa:56:e1:87:63:c9:87:3c:6a:dd:6b:5d:88:56:e8:
         65:b9:a2:ad:f9:1f:7f:32:1b:09:1e:e1:25:5c:4d:ec:e6:0c:
         a8:11:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:04:33 2026 by rpki-client