Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File:                     i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier:          rrLG2ZJ6tYReg25XzZNBGRtri0mES8bWKyK7kld2bZs=
Subject key identifier:   DA:61:62:C4:29:A1:24:40:32:CA:C0:A4:BA:34:A0:DB:74:64:33:A2
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer:       /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial:       01A116E175919FE8EEC925EF0C8CACFC9B57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number:          0506
Signing time:             Wed 07 Oct 2026 15:00:36 +0000
Manifest this update:     Wed 07 Oct 2026 15:00:36 +0000
Manifest next update:     Thu 08 Oct 2026 15:00:36 +0000
Files and hashes:         1: WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa (hash: 6TuNzzukIi+p4GfJ3ZlekfC6HWDwvlGuM10xKCq4iF4=)
                          2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: kuLU+vVGHzFjjUM8Q+nIcxBL5ehkAM+7knVLQOFuLA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:e1:75:91:9f:e8:ee:c9:25:ef:0c:8c:ac:fc:9b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
        Validity
            Not Before: Oct  7 15:00:36 2026 GMT
            Not After : Oct  8 15:00:36 2026 GMT
        Subject: CN=da6162c429a1244032cac0a4ba34a0db746433a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:ca:6d:8f:93:35:6c:5c:a7:17:87:b2:09:
                    e7:01:7e:c4:f7:99:84:d0:16:79:d3:59:83:72:90:
                    42:4c:d6:54:21:20:13:d7:51:10:28:61:42:93:e7:
                    ab:8b:31:77:7e:2e:fe:30:29:18:b6:cb:02:71:1a:
                    c1:31:5c:7f:eb:8a:33:54:c9:e0:8c:65:c8:be:8d:
                    0e:35:06:88:ca:bd:63:6f:69:7a:0e:bd:a8:85:8d:
                    4c:3b:70:00:f8:c4:a1:bf:f3:d8:de:cc:8a:3c:b3:
                    fc:c6:f2:6f:df:33:59:04:75:27:92:d4:e4:56:c4:
                    71:ee:7e:21:bb:74:4b:52:11:71:0a:9d:cd:97:65:
                    0a:8e:eb:bb:43:b0:de:7b:6f:7d:23:e5:a7:27:9b:
                    27:29:c0:03:70:c0:2b:22:70:9d:2a:a2:aa:81:1b:
                    3e:bd:d5:f6:2c:e9:2a:dd:be:f7:6a:8a:4c:e4:de:
                    af:14:60:7f:92:aa:9b:51:89:40:c8:bd:fc:3f:25:
                    03:ba:ed:3d:7f:01:b1:ec:2c:2a:01:32:af:f2:d6:
                    e9:a9:7e:cb:93:5e:68:e5:97:53:3a:29:14:f5:5f:
                    84:29:f0:b5:7f:ce:cb:9f:ac:bf:c9:de:31:fc:a1:
                    4a:f0:ba:91:16:d4:a0:e3:a0:15:45:c2:03:d8:cc:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:62:C4:29:A1:24:40:32:CA:C0:A4:BA:34:A0:DB:74:64:33:A2
            X509v3 Authority Key Identifier:
                keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:6c:57:97:65:16:1b:39:54:e5:22:35:02:87:f0:0e:d7:
         39:73:a6:12:bf:74:12:9a:1c:81:a5:91:43:f1:f5:d7:cc:14:
         f6:dc:20:fd:40:5f:94:aa:fe:ea:d3:90:d8:90:5c:4a:4b:72:
         d7:5d:fa:0f:de:3e:7c:f3:8b:04:fb:21:42:95:82:70:85:1b:
         f5:dc:ca:cf:ae:c8:46:f7:f3:56:78:fc:53:b0:35:c9:36:89:
         a3:35:47:a5:d0:9b:11:25:af:2a:8d:3b:9c:ef:c0:23:e7:77:
         70:34:f6:49:3c:f3:86:7d:1c:ef:88:01:bd:95:9e:89:7b:38:
         53:5d:bb:f0:f9:3b:55:0f:99:a6:31:6c:d8:f0:38:19:b3:7f:
         a4:de:10:d0:4a:3e:8a:b5:11:b1:8d:04:31:05:ac:7c:51:58:
         7f:23:3d:74:2e:e2:dd:fb:39:e5:29:d8:e9:a5:a9:c4:24:9e:
         75:f7:bc:ec:19:c4:c1:3b:9d:0f:4b:1a:86:fc:16:cc:05:21:
         19:c4:31:96:b6:e2:93:8b:59:a7:ab:e1:87:a9:d9:42:35:ea:
         a3:8f:2b:a8:02:03:8b:1c:96:c7:03:8c:31:bd:87:80:e2:9d:
         ed:53:70:a0:89:c0:37:be:49:c5:76:3b:94:30:49:19:a3:38:
         0a:82:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:52:42 2026 by rpki-client