Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
File:                     bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft (raw, json)
Hash identifier:          7yA5m4apJQJL97FYT91mheP0oq+XZKqqs5HzXOijzgM=
Subject key identifier:   47:C5:D5:71:3D:B4:B4:AF:2F:D3:FA:6B:19:53:8A:1A:53:48:AB:32
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Certificate issuer:       /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial:       01A1B42AAE713289A013F9A923A8C7079EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
Manifest number:          D6
Signing time:             Sat 07 Nov 2026 04:00:58 +0000
Manifest this update:     Sat 07 Nov 2026 04:00:58 +0000
Manifest next update:     Sun 08 Nov 2026 04:00:58 +0000
Files and hashes:         1: 0JvgPvNBpx-tXwjL49T-oGlhRJE.asa (hash: t6yvMIxcmcRuJu3oO8ltIl4K6uR5Cv+zFrp0bM60pxs=)
                          2: 99mzVyihMmyhu2Wc14FoY0N6je8.roa (hash: w7tTPnlvgdRw1HVXcVQVtE9PassYVaJN753Xr4S+3M4=)
                          3: FAfYzrCqQ3IM3xoBnyGyfv0aAkE.asa (hash: 4bsfZ4n/LM0O/iMtpNn5YaFkWDUZVHril55Rw1Ijmbw=)
                          4: UKAb3BOkisRzJDu0FgnxiUVPR9A.asa (hash: hk13PA/WmxBs2h/rKn7+UjZx+iuBVhstVL8L2PDABiA=)
                          5: bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl (hash: 0n2pUFauu9RetIx/Z59oFLjBNM+wE/5LhFfDDBHB0BA=)
                          6: jOwYdlbKNzM1zi93IL4xEbNx1s8.roa (hash: TGDCjyb535Hc1opJTwsMrKzDGebIWLmrRjERGmc1ztE=)
                          7: nJjpIHBTEQs7EJPe49KrmTgbM9I.roa (hash: GSChoEPI1gd7EiXd1cr/yljcJpa7XhoXkgwBvTLgANc=)
                          8: tn3pSILsodE83qD62n9ko4tKfw4.roa (hash: EcQBq4mZ/P31mVUxCqCb9CbySxP5notCVg7BJL4Va/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:b4:2a:ae:71:32:89:a0:13:f9:a9:23:a8:c7:07:9e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
        Validity
            Not Before: Nov  7 04:00:58 2026 GMT
            Not After : Nov  8 04:00:58 2026 GMT
        Subject: CN=47c5d5713db4b4af2fd3fa6b19538a1a5348ab32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:de:6c:47:0d:a6:d0:73:de:e7:1c:4d:d4:
                    b1:01:0c:cc:31:82:f0:8f:12:57:12:34:b4:83:41:
                    c0:79:4e:dd:48:04:17:20:26:a9:72:43:cc:c2:4d:
                    7c:2e:2a:89:c3:ba:88:9a:82:73:14:6f:d4:6b:19:
                    82:90:8c:a5:01:8a:8f:a1:12:12:a3:aa:8e:e1:b3:
                    89:e6:9f:17:ff:c5:18:84:41:38:bb:91:56:ae:b7:
                    4a:f4:6e:52:cb:ab:74:29:57:a5:e9:57:eb:65:1d:
                    b4:b6:dd:f9:63:e1:48:9b:82:70:fc:66:40:ce:37:
                    9a:1b:2c:90:c1:a8:6d:c7:c3:d2:69:3e:a0:d9:1f:
                    f9:86:6c:6c:e0:c8:ff:5f:af:73:1d:85:d8:9c:93:
                    ed:da:c6:b7:b9:a6:62:1f:1f:d1:b7:c3:7e:50:42:
                    5d:ea:d0:c4:d5:0c:96:16:a0:95:dd:0d:5f:ea:4c:
                    2a:a4:7e:27:02:fe:a7:f4:d7:7a:51:e4:38:3a:94:
                    2c:ec:7b:97:2c:26:75:5c:6c:b6:1e:51:f8:da:aa:
                    6a:5e:3c:c5:5a:c5:f6:e9:d3:98:77:ef:a3:16:97:
                    ad:a0:78:42:e1:65:4e:8f:a6:c8:2b:6a:de:52:e1:
                    5a:52:34:65:8f:e9:a2:e1:48:cf:f8:f8:86:37:75:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C5:D5:71:3D:B4:B4:AF:2F:D3:FA:6B:19:53:8A:1A:53:48:AB:32
            X509v3 Authority Key Identifier:
                keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ed:78:48:27:fd:a3:69:a9:01:8e:35:0a:86:6c:52:84:9e:
         83:76:50:e3:a3:4a:f3:58:0b:7a:e0:1b:59:41:ec:ec:8e:1e:
         01:cc:11:6d:66:c6:40:a5:53:2a:30:42:a5:9c:4a:6a:1e:5f:
         d7:2c:5e:95:0c:1b:06:6f:36:b6:54:e9:6a:ed:74:21:d2:ec:
         95:3a:16:48:1e:83:6d:67:c1:3e:57:54:3a:44:75:f3:67:af:
         0c:2d:09:b9:83:45:36:04:df:5a:58:0e:6f:b0:f9:11:8e:d8:
         45:30:c3:e0:57:2e:bc:9f:63:8f:c3:35:33:be:27:88:a2:82:
         c0:ec:bf:ac:75:06:c0:7d:dd:b1:2a:a1:e9:e6:7f:f1:c1:e3:
         85:46:88:49:e5:9d:74:12:35:77:b0:d5:74:cd:2d:24:62:8d:
         97:46:9c:c9:91:11:2f:a3:59:5d:6d:72:65:40:58:4a:81:19:
         4b:f1:81:b7:dc:ea:32:4c:60:64:37:b2:81:72:ba:71:73:b4:
         43:d2:65:c3:5e:9f:73:5e:b9:49:01:6f:63:19:6a:20:3d:a6:
         1f:e4:e9:0e:92:2b:17:d6:42:cb:d2:30:17:b6:a2:ff:22:ba:
         51:ab:76:ea:46:f8:18:6d:af:3e:95:4d:13:f2:a2:c3:37:5b:
         ab:98:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:28:20 2026 by rpki-client