Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File:                     6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier:          d19+VVKCf/zmeQ92a/q2KjbD1z7WIJxEIMSd12K6HS0=
Subject key identifier:   39:09:98:57:D5:BE:81:BF:6F:CB:82:6C:DA:D1:19:D5:1E:69:44:ED
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer:       /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial:       01A128433F0BE2D1C2A6307447FFE4E0B78D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number:          0ED4
Signing time:             Sun 11 Oct 2026 00:00:57 +0000
Manifest this update:     Sun 11 Oct 2026 00:00:57 +0000
Manifest next update:     Mon 12 Oct 2026 00:00:57 +0000
Files and hashes:         1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: KcZ0M5kpUQggtakCpT3G/hUif/Fw9Lm364FtUTvLp3E=)
                          2: Wjt0-0koy1qZzSuYhJyXcD6KXEM.roa (hash: cZtiNM6cLkvlj8Xffx4NcYQbnFqHjPh0HKv5ikzsU+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:43:3f:0b:e2:d1:c2:a6:30:74:47:ff:e4:e0:b7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
        Validity
            Not Before: Oct 11 00:00:57 2026 GMT
            Not After : Oct 12 00:00:57 2026 GMT
        Subject: CN=39099857d5be81bf6fcb826cdad119d51e6944ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:58:82:ea:3e:c0:54:f6:50:4f:35:c6:6a:
                    cc:04:6e:59:7c:08:4c:a5:1a:ac:d2:d3:7c:49:96:
                    4f:f4:90:6b:6d:da:8d:53:75:29:51:e4:27:d0:45:
                    66:d0:72:0f:5c:66:30:61:52:4c:2b:f3:0f:18:79:
                    3c:2b:77:1a:c1:d1:0e:3b:2e:64:78:32:f8:06:c7:
                    1b:e2:4c:06:1e:ca:68:db:ea:62:b5:7e:c7:d3:d8:
                    3a:49:ca:9f:0a:b4:53:c8:c0:57:b1:1a:03:bc:88:
                    ad:e2:26:e9:f8:b5:8f:69:da:fb:29:03:bc:da:b9:
                    11:51:cb:d4:7a:ce:28:ee:ea:34:8e:f9:3a:e6:a1:
                    31:59:12:2e:5d:f4:fd:66:90:e6:5e:d8:5a:a1:37:
                    6f:85:03:a1:cd:2b:e6:a2:53:89:d3:7b:49:70:be:
                    ec:b6:c5:50:95:aa:4e:a8:ae:f0:d9:8d:af:79:6a:
                    ee:90:31:d8:c6:9f:66:ab:b6:e7:e1:6c:62:54:1d:
                    52:c0:b3:e7:7b:e2:c9:9e:7f:1c:27:93:fd:fb:8a:
                    3a:97:46:5f:ba:cc:59:29:c5:ff:ad:dc:73:45:bd:
                    85:41:0a:49:fc:f7:59:b1:f3:ef:87:e3:f0:c0:3b:
                    b8:e7:cc:03:23:43:19:8d:59:fa:3a:26:ec:e8:45:
                    4c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:09:98:57:D5:BE:81:BF:6F:CB:82:6C:DA:D1:19:D5:1E:69:44:ED
            X509v3 Authority Key Identifier:
                keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:fe:ad:f5:81:a2:cd:e5:01:8b:9e:c6:52:82:0f:d3:40:
         51:34:71:01:03:f4:08:e2:04:9d:00:85:37:8d:b8:fb:05:9a:
         ff:fd:1d:63:15:3c:f7:5d:b2:17:d6:24:b2:24:b2:4e:a5:e3:
         77:62:4e:e2:9e:57:35:8e:dc:a3:d4:e1:5b:eb:8c:63:3a:85:
         a3:b9:b3:5f:52:f1:5e:2a:4b:d7:76:a0:1d:01:d1:d8:fc:f2:
         e9:df:f5:5a:02:b7:1e:fc:01:d6:73:bb:20:a6:68:77:0f:06:
         2f:00:2d:d6:b3:ac:b7:61:02:74:d2:8d:f5:ae:50:40:ac:f1:
         53:ab:b7:8a:05:99:80:2a:65:97:2e:88:65:97:2b:ac:d3:28:
         59:31:db:8d:c7:17:b2:ff:be:6e:c5:1d:5b:67:d6:a2:fd:53:
         3b:00:91:3e:96:7d:b1:9a:f1:61:3b:b1:0e:73:5b:e9:62:7c:
         33:f1:d2:4d:5c:0f:75:b9:ae:2e:61:3e:7e:c1:9f:88:2c:7f:
         fb:e8:ad:2f:66:44:f7:4f:74:e2:a8:f8:cf:12:2c:56:59:e8:
         b6:7a:23:e0:52:a4:67:58:82:f1:b9:d7:da:47:63:48:b1:18:
         27:d3:88:d3:63:8b:c0:53:ea:87:f0:75:d9:bb:a5:65:2a:4c:
         36:4f:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:36:34 2026 by rpki-client