Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          JNXP4wpEub3fwI1QsIuj/F9jkEXyIsT5bXuGf55MlqM=
Subject key identifier:   E4:4A:D0:48:4F:18:72:16:DF:8A:E6:1F:FF:78:D4:3D:70:D3:05:93
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       01A10AA6B66C94B14A051918E1C4B4C68793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          0C24
Signing time:             Mon 05 Oct 2026 06:01:00 +0000
Manifest this update:     Mon 05 Oct 2026 06:01:00 +0000
Manifest next update:     Tue 06 Oct 2026 06:01:00 +0000
Files and hashes:         1: 3nO3Eu2HYNgfsHOzOD5IS3szUzQ.roa (hash: CLkZIvvir/OJbbrzSfgsy0YtbLrBe518P4dyR0joX20=)
                          2: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: he0EXINS2ScOaD9PBMsYVz2ZSHpzVToT7xp4tyDtOqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0a:a6:b6:6c:94:b1:4a:05:19:18:e1:c4:b4:c6:87:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Oct  5 06:01:00 2026 GMT
            Not After : Oct  6 06:01:00 2026 GMT
        Subject: CN=e44ad0484f187216df8ae61fff78d43d70d30593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:73:47:f0:ee:03:47:75:66:e2:a8:55:08:1f:
                    97:41:99:7a:30:da:f1:7a:cf:ad:21:f6:d3:1c:32:
                    70:90:4e:9c:45:43:4d:e5:10:ee:3e:b7:cf:e5:47:
                    15:ba:02:a3:40:f7:91:ab:84:2b:81:5d:7b:dd:95:
                    2b:c6:ac:fb:78:c3:05:20:d9:d4:d6:4e:dd:c2:dc:
                    d3:0a:cb:43:29:01:e8:51:8e:2a:32:de:45:75:ec:
                    c0:74:51:8e:fa:f6:09:54:50:c5:ff:54:08:8e:ed:
                    d2:ce:c6:2b:d2:0a:5e:0f:d5:6d:92:ac:0c:49:df:
                    21:86:64:53:2c:bd:90:d5:74:c3:fa:c8:ee:13:0b:
                    0a:5e:a8:c7:b7:4e:b4:92:33:02:92:7e:0c:6b:69:
                    d8:3f:86:bc:7d:e2:1b:29:85:0b:c1:d4:4a:64:a4:
                    c3:55:ca:a0:a2:b1:12:5c:60:76:a5:66:e9:db:f5:
                    51:99:c5:8b:a2:e1:b3:0a:aa:a2:6d:61:86:d1:64:
                    c5:46:3c:aa:f2:8e:64:e0:f7:25:9d:97:72:d8:1e:
                    82:d7:87:6d:59:79:38:2c:69:39:65:cc:2c:37:49:
                    34:40:aa:e4:5f:20:1b:2b:7b:fa:b8:07:82:d6:15:
                    c0:38:06:5b:a8:4f:ef:bf:d0:a1:3d:72:17:57:e6:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:D0:48:4F:18:72:16:DF:8A:E6:1F:FF:78:D4:3D:70:D3:05:93
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:db:df:6b:81:39:35:af:ae:3d:51:51:41:5b:58:c0:39:5a:
         b8:52:64:af:ab:58:54:2b:65:3b:f2:41:f1:f3:a3:47:88:86:
         e3:cd:3a:6d:4a:5e:14:07:ac:72:ab:2d:80:e0:5e:a4:56:a1:
         c3:e0:56:ec:d2:5e:7f:95:97:6a:5b:2e:64:86:ef:09:99:a6:
         79:a3:c0:b4:bb:bf:1e:0b:68:e2:a2:15:79:7b:6d:95:ed:df:
         c5:7b:39:7b:38:31:13:62:f9:c2:13:13:92:b5:41:5f:01:93:
         de:d8:60:e7:c6:22:22:8a:9e:ef:6a:4c:f9:a3:22:fe:d9:4c:
         5d:08:c5:92:de:00:46:e0:46:c8:ca:03:a0:70:7a:ec:4b:4b:
         7f:cf:c8:e0:c7:d0:82:95:13:51:13:f5:77:f7:d2:a7:6a:21:
         23:83:b4:09:de:09:ea:1a:8b:b9:50:cb:54:ef:97:6e:1d:81:
         8f:79:37:ce:b7:3e:4d:73:12:b2:6e:34:b4:ee:0a:a0:e3:e3:
         96:c3:12:bf:2b:a3:7d:36:7a:f1:48:7f:2b:8e:93:97:2f:50:
         b2:e7:72:47:72:76:72:93:8f:c6:47:9c:cd:b0:10:cc:9d:02:
         c6:d8:ab:df:9f:3c:6f:c5:b7:a7:c2:08:66:cd:49:3e:c8:52:
         0e:3e:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:49:56 2026 by rpki-client