Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
File:                     8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json)
Hash identifier:          wkcKe50Oc8TZ2JB6SNhlPgAAtWjA5px1z2Ov2LTQKoE=
Subject key identifier:   D6:C6:66:11:7B:88:5F:9F:B2:7A:FA:A2:E0:72:CB:EA:B5:A9:62:35
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01A1DEA7463BE729D6314337A712116AD5BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
Manifest number:          1520
Signing time:             Sun 15 Nov 2026 10:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:06 +0000
Files and hashes:         1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: nO46GWIZF8CiIOJNjc4bwOmyicrLk7ottD9gg+zhD+Q=)
                          2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=)
                          3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=)
                          4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=)
                          5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=)
                          6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=)
                          7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=)
                          8: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=)
                          9: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=)
                          10: a0OAcZfUpJ_at-NAiRWnugtXHZs.roa (hash: CX3pL+do0k62/x9rzFqYTy+gZPu9+b2sUZEH679CN44=)
                          11: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=)
                          12: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=)
                          13: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=)
                          14: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=)
                          15: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:46:3b:e7:29:d6:31:43:37:a7:12:11:6a:d5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Nov 15 10:01:06 2026 GMT
            Not After : Nov 16 10:01:06 2026 GMT
        Subject: CN=d6c666117b885f9fb27afaa2e072cbeab5a96235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:89:b6:96:54:5f:99:43:6e:22:39:d8:ee:
                    88:e2:bf:4a:50:45:83:d9:76:2c:2a:21:d8:4f:5e:
                    b0:7a:c1:da:44:a1:e3:18:dc:a2:90:2b:8e:c3:53:
                    0d:96:ab:f5:7e:73:0c:59:64:6f:65:a0:f7:f0:50:
                    8e:d9:11:67:f6:7c:b4:7a:d7:11:33:1e:11:af:8a:
                    0f:d3:01:c2:21:34:3e:3c:ae:1d:a8:05:14:34:5f:
                    9c:69:b1:aa:26:ac:70:a3:91:ed:99:c1:c5:75:b9:
                    d6:f4:4f:a7:14:62:d8:5e:88:f1:10:72:99:9e:b4:
                    0b:b1:e7:7d:86:75:97:a8:24:cf:6d:68:2b:24:f9:
                    24:73:44:12:f0:73:90:a8:9f:77:24:62:5e:35:36:
                    c1:1c:f6:d7:12:be:87:05:6a:ef:48:f1:23:fd:5c:
                    11:0b:9f:f2:6b:68:16:43:79:bc:be:bc:6f:36:44:
                    9f:18:c8:a8:e0:0f:ce:63:bd:ae:55:59:e0:18:ff:
                    d5:18:da:32:2f:2e:54:fa:c9:0a:6f:e1:58:da:1e:
                    5a:7a:6a:23:d3:49:58:4f:9f:04:01:c1:9e:10:8e:
                    1d:03:a9:15:fe:ba:db:a0:76:58:78:f8:a2:db:31:
                    71:57:7d:09:ac:d0:c2:e8:2c:4f:5b:f4:3a:54:49:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C6:66:11:7B:88:5F:9F:B2:7A:FA:A2:E0:72:CB:EA:B5:A9:62:35
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:40:18:1f:77:63:8d:e2:06:ae:f7:2b:d0:9a:7d:dd:2c:19:
         02:30:ae:14:6d:bb:fd:93:32:72:9b:ac:7d:4e:67:77:6f:bd:
         26:85:f3:75:82:49:54:cd:a4:cb:e2:a8:b5:70:76:93:df:bd:
         93:23:a3:2c:ab:89:58:1a:db:da:32:57:12:b7:87:af:dd:7c:
         6c:b9:f0:f9:93:9a:f4:17:07:e6:f2:b1:c3:af:4c:a1:fb:c2:
         77:a5:53:4d:1f:8e:02:dc:b1:5a:55:82:ee:0b:f8:f0:70:cb:
         93:d9:cd:b1:db:c0:aa:71:8f:70:18:0a:27:c4:e1:fb:1c:48:
         af:c2:08:cb:d5:13:18:e6:a8:c8:75:1e:a2:04:45:b8:3a:c0:
         c0:09:e2:39:8e:06:5a:1f:57:8a:72:5d:ab:38:89:13:01:b1:
         8a:36:41:e7:c2:8c:b6:5c:11:47:5b:77:7a:53:b8:07:d4:20:
         8e:e8:a7:45:ad:93:a0:88:f4:b5:42:92:72:76:48:1d:05:52:
         66:02:30:6f:a5:58:1e:8b:88:70:21:ac:e9:d6:93:4a:4b:00:
         89:17:23:ef:90:40:37:45:ae:dd:b5:fa:b4:63:ce:da:94:94:
         6e:a3:af:2b:d5:99:14:44:f9:9c:2f:05:59:d7:9c:85:9b:66:
         ee:ec:50:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:11:02 2026 by rpki-client