Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File:                     7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier:          nP9YE0Nip9tOrI5+T4whb6Dc3MjXjWM74TMXrPbFrb0=
Subject key identifier:   8C:6A:8F:04:A8:4E:3C:63:22:3C:4F:ED:94:2C:42:51:66:0E:71:10
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       01A1C1E606328C9B5CD5A2D937867DC2B823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number:          10C6
Signing time:             Mon 09 Nov 2026 20:00:39 +0000
Manifest this update:     Mon 09 Nov 2026 20:00:39 +0000
Manifest next update:     Tue 10 Nov 2026 20:00:39 +0000
Files and hashes:         1: 6Q9jwkNZ_CGM8BQZXKAyYR4x0aI.roa (hash: z/QzXDgziKZrIsCahHMTDA0xYz8KhnucvEvlt9vMZTE=)
                          2: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: /leZVA1l5O3LLaIYb1Z05AC2l/L79zYhJYdQ5DU8FOs=)
                          3: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (hash: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE=)
                          4: eP5PyKE_-x6TT40a7GDlcGqsOiA.roa (hash: Ux1XyDwFFeWFB0hBYgfGJmaYREPqJbs6hAMb2HTKJNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c1:e6:06:32:8c:9b:5c:d5:a2:d9:37:86:7d:c2:b8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Nov  9 20:00:39 2026 GMT
            Not After : Nov 10 20:00:39 2026 GMT
        Subject: CN=8c6a8f04a84e3c63223c4fed942c4251660e7110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:84:d9:89:fd:d3:e4:74:7b:0b:06:0d:31:
                    86:77:9c:32:bf:47:d5:78:42:77:a2:9e:c9:b7:91:
                    c9:de:75:54:59:b6:60:e1:24:83:b9:95:9f:19:a3:
                    3b:8a:d3:64:fa:d1:57:7f:f8:a0:f2:ae:5e:cc:76:
                    99:7e:ff:70:65:67:e2:59:56:e6:2a:b9:84:da:e6:
                    45:11:6a:4f:04:cc:4b:5c:9b:61:cc:f7:fc:7d:77:
                    37:2d:28:5f:a3:77:6b:32:dd:a6:18:67:17:da:5d:
                    d5:6f:95:12:51:a6:a7:6e:55:23:34:c7:19:08:4f:
                    93:19:70:b4:bc:46:45:84:e9:9e:af:b6:6d:c5:74:
                    bb:6b:9d:ed:ce:93:1c:d5:e7:5f:92:4b:3b:ca:93:
                    16:4a:83:a9:93:37:93:85:e5:dd:3e:ba:02:68:fe:
                    16:c0:3c:c2:a9:79:72:20:34:cd:2e:11:a6:a8:08:
                    15:7e:d3:5c:a9:97:4a:3f:b8:df:cf:b2:c2:89:4f:
                    76:6b:10:2c:5e:bc:2f:9f:7f:f2:76:ee:a4:04:b0:
                    89:da:04:86:b3:a9:e9:62:5f:d4:ba:83:8c:89:bf:
                    70:43:17:86:e7:a7:f0:f0:37:37:5b:40:95:e1:48:
                    8a:7c:83:fa:3f:45:69:76:00:7e:34:c0:f2:03:62:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:8F:04:A8:4E:3C:63:22:3C:4F:ED:94:2C:42:51:66:0E:71:10
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:a5:ca:61:3a:9c:4e:cb:42:92:d8:d5:09:51:d8:67:67:
         3e:29:4b:6d:9b:1d:8a:b8:2c:89:0c:b3:17:b7:6b:fe:ca:77:
         3a:aa:65:76:7b:0f:8f:a6:17:c5:58:2c:72:37:aa:3f:82:6a:
         10:e9:a8:9f:01:3c:4c:c8:c4:58:98:e3:80:04:b7:4e:08:09:
         9c:c8:6d:11:03:9a:22:b4:22:38:96:9a:80:df:ac:5a:b7:96:
         33:fe:87:a7:07:20:a9:13:58:64:17:00:7d:7e:77:4b:ab:5f:
         53:4a:32:fb:18:c9:71:2e:b8:28:dc:e1:5a:14:3c:1b:bb:56:
         2a:39:0a:1c:e8:40:7d:f5:89:62:cf:25:7a:04:ca:e9:a6:cf:
         b0:2b:22:66:d1:1c:2a:9a:6f:c1:61:49:c1:78:a8:da:96:c3:
         e1:38:92:c1:7d:4a:f4:13:51:15:9c:ba:43:86:f2:27:7c:df:
         b5:f6:85:d4:42:98:a0:ea:3d:13:80:71:91:02:b1:f6:27:7f:
         1a:88:45:75:08:0f:4e:51:5e:33:38:84:18:97:07:53:cb:2e:
         5b:dc:9e:f2:99:28:1d:57:1c:93:7a:41:ae:df:ec:e2:28:ad:
         ab:68:d5:9b:1f:e6:18:bf:98:a3:88:07:93:63:d6:92:8e:ae:
         9b:1f:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:38:50 2026 by rpki-client