Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
File:                     6hRqefc37_91bUjjWooFuXAiIU8.mft (raw, json)
Hash identifier:          o9yhgCorAyAy9e25EocjrrMEZUmnR/eG2lxEKTSkJyE=
Subject key identifier:   D8:64:22:FC:6D:6D:6E:74:8B:5D:C7:57:96:44:58:08:4E:51:9D:35
Authority key identifier: EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
Certificate issuer:       /CN=ea146a79f737efff756d48e35a8a05b97022214f
Certificate serial:       01A1E05EBC67CE9245FF217FD6180DC4F975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
Manifest number:          0172
Signing time:             Sun 15 Nov 2026 18:01:07 +0000
Manifest this update:     Sun 15 Nov 2026 18:01:07 +0000
Manifest next update:     Mon 16 Nov 2026 18:01:07 +0000
Files and hashes:         1: 6hRqefc37_91bUjjWooFuXAiIU8.crl (hash: fyE9Jt8V3d05J9Tg9eTYnVRq1TMFLwAciOamiYl9cuk=)
                          2: FuMfqL6UHDl83J7ntPBqlyL1ZJs.roa (hash: pa0fPwEB+esydMhpBokgB7+SeI4p5Cp3+wHPwmlwHu0=)
                          3: fjRTthrznnEGPQGfyNXJuqtdk74.roa (hash: t647JvL7SRl89ys3oXs5sNdLTxxTw2XH1zzLSYKCd24=)
                          4: phY9NXnvnB6e0PMrbRa0MvvDzNI.roa (hash: IN3m7S+9B9ojtgzB9za8gBF1vRTwMeSiCq8UhefavsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:5e:bc:67:ce:92:45:ff:21:7f:d6:18:0d:c4:f9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea146a79f737efff756d48e35a8a05b97022214f
        Validity
            Not Before: Nov 15 18:01:07 2026 GMT
            Not After : Nov 16 18:01:07 2026 GMT
        Subject: CN=d86422fc6d6d6e748b5dc757964458084e519d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:2e:ba:ec:cf:a1:5c:6b:31:c6:f2:97:e1:
                    a2:01:a1:d4:d4:a6:be:26:9d:e8:99:27:95:49:2e:
                    ac:4f:99:cc:8d:86:06:ab:e1:73:ce:fa:57:f3:b1:
                    c1:12:7c:dd:56:0e:97:00:10:5c:bc:63:a1:76:a9:
                    d0:74:e6:33:3c:3f:b1:93:8c:6e:52:c6:9e:d5:a0:
                    f0:87:62:c9:a9:ed:fb:40:35:b8:f1:02:08:50:f6:
                    5d:4c:51:c2:4a:93:88:3c:36:91:e1:1e:e4:e6:23:
                    96:48:1c:6d:d9:37:0b:c3:bb:0a:71:8a:da:86:83:
                    9f:17:fc:bb:31:1f:b5:f3:c0:a0:29:8a:e3:76:5b:
                    08:62:18:7d:74:e0:3e:d2:df:6c:8d:e5:95:5b:99:
                    4d:52:be:51:a1:f0:e9:df:01:f2:7f:43:a6:f5:b9:
                    28:55:0b:69:75:23:63:2a:b7:9f:b7:a5:7d:04:2c:
                    99:a0:47:7f:87:ff:7a:ab:f9:7a:2a:74:87:29:b1:
                    f5:f2:0b:bf:c9:4c:47:1f:71:72:30:24:19:9c:cf:
                    93:01:24:42:6a:9b:2a:8c:20:6e:f5:76:b4:cf:99:
                    3c:be:e2:ee:9e:a4:50:e5:8b:c9:2c:84:09:2f:e0:
                    82:57:f6:c7:4b:27:11:de:5f:4c:f5:13:44:f2:1f:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:64:22:FC:6D:6D:6E:74:8B:5D:C7:57:96:44:58:08:4E:51:9D:35
            X509v3 Authority Key Identifier:
                keyid:EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:42:fe:62:71:e0:af:1d:6f:36:52:db:2d:57:b2:f9:11:cb:
         d6:f5:ad:97:70:45:17:1c:eb:3a:3b:fa:64:70:59:c7:2e:87:
         85:a0:0c:2c:69:e0:89:14:b1:6b:cf:02:ff:a1:8c:e6:cc:96:
         81:82:11:57:f7:af:a3:42:31:4b:0c:5c:0b:aa:80:07:30:e8:
         a6:94:7c:79:29:a9:6c:d3:56:52:64:17:cb:64:fb:45:e0:85:
         47:a9:d1:c2:b5:6e:6a:61:41:a3:07:a3:1d:77:bb:25:29:aa:
         0e:c8:d0:1a:ea:61:6e:bb:85:15:ed:34:d9:25:6e:05:cb:73:
         12:81:4a:31:bb:cc:2c:71:ad:93:29:48:f8:78:1f:af:7d:a4:
         4a:a9:2c:cc:03:9a:20:a1:32:68:f0:89:eb:b3:e2:bc:c2:27:
         37:c1:f9:e3:79:16:01:f4:da:48:24:71:67:1a:6d:19:eb:4c:
         7c:68:2d:13:02:ca:66:a1:2d:8b:6d:31:7c:78:47:3b:bd:fb:
         69:94:ab:d0:d0:b4:d0:71:ff:74:5e:70:2b:9c:de:34:0f:17:
         30:09:7e:cc:a4:5e:91:c4:c8:4d:13:be:54:5f:35:8d:7d:eb:
         ab:4e:06:5d:26:ce:d9:50:bf:be:6c:3d:5a:78:f7:ed:90:3d:
         82:cc:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:25:52 2026 by rpki-client