Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
File:                     6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json)
Hash identifier:          uTqSnG5H0zDz5ttU7bun10yg3g1GnQyoTiblqSLf86w=
Subject key identifier:   94:60:47:CD:01:2D:F0:8D:6F:25:7F:2C:52:AF:90:09:B1:74:2F:DB
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Certificate issuer:       /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial:       01A1DDCC21BB760C82D443D5B1C1C2451725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
Manifest number:          1AFB
Signing time:             Sun 15 Nov 2026 06:01:44 +0000
Manifest this update:     Sun 15 Nov 2026 06:01:44 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:44 +0000
Files and hashes:         1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: TG4v65dSNhjPkYmkydTi3HtKAD27wbs1RspdF4YgTn4=)
                          2: Do7LVZlKxOpFLhQk4utS2y9-GH0.roa (hash: yUU9KHVXsH2kllJ9B9AdvusBySi+NzlMxs4jnEA4zmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:cc:21:bb:76:0c:82:d4:43:d5:b1:c1:c2:45:17:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
        Validity
            Not Before: Nov 15 06:01:44 2026 GMT
            Not After : Nov 16 06:01:44 2026 GMT
        Subject: CN=946047cd012df08d6f257f2c52af9009b1742fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:93:cd:d5:35:b5:56:26:be:2b:04:ad:8b:
                    90:e4:a9:3e:af:22:43:74:1f:e4:37:52:92:e6:63:
                    cf:47:d5:02:b8:9d:2d:c4:73:8e:9e:35:52:cd:bd:
                    cb:af:d4:5d:be:aa:a6:87:52:b0:06:56:3c:86:f0:
                    a6:d9:b7:53:75:b5:70:3e:cc:64:02:a3:84:67:7e:
                    d2:43:d7:ca:7a:5b:ff:70:1b:a9:b1:4a:cb:6a:fb:
                    3b:1c:12:75:4f:93:ea:c4:c4:4c:a8:f9:cf:ae:ed:
                    67:70:8c:05:c7:ff:1d:ea:30:f2:bf:06:c6:f2:8a:
                    67:de:08:97:17:37:1d:bb:c8:ce:40:b1:a5:51:64:
                    e3:0a:49:05:da:6d:41:67:bf:ba:c8:e6:02:2d:e4:
                    db:d9:e7:d2:6e:62:bd:8e:b0:73:5b:5e:40:f2:cf:
                    cd:69:91:ed:43:13:19:d8:43:ce:42:2b:8c:9f:f2:
                    a9:04:fc:06:de:66:0a:72:47:0b:de:a9:b7:8c:7b:
                    66:df:b2:96:f3:67:90:04:09:50:e2:a8:a5:f3:36:
                    fc:0a:60:50:8a:78:8e:93:cd:38:e0:14:8c:d2:12:
                    d6:6b:14:45:77:91:f9:a5:aa:f2:27:a3:25:f1:52:
                    25:42:4b:4c:55:ca:b2:ec:f1:ef:50:5d:80:93:eb:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:60:47:CD:01:2D:F0:8D:6F:25:7F:2C:52:AF:90:09:B1:74:2F:DB
            X509v3 Authority Key Identifier:
                keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:38:f1:24:50:73:eb:a2:0c:c1:11:eb:27:27:05:d2:e3:
         95:84:ac:0e:44:16:1f:4d:63:e1:8e:36:ba:9b:5c:04:f8:92:
         41:4f:26:b2:f0:33:6d:dd:ae:0b:52:6d:8b:bb:72:1b:b0:9d:
         8f:84:29:21:09:4f:56:85:82:c8:b2:09:97:aa:fe:50:b8:57:
         98:f5:75:44:60:57:25:00:33:30:a1:20:f0:6a:c1:49:99:c2:
         33:cc:82:61:5d:a5:4f:29:e9:ac:d4:94:94:23:43:ee:e2:ae:
         13:20:35:f1:db:38:fb:84:63:c1:47:95:e7:fd:89:d1:48:2b:
         48:fd:4b:7f:dd:6d:08:fb:e2:47:36:7c:94:c1:4f:b0:63:a4:
         e2:7e:ba:d7:2e:27:08:6b:eb:ba:70:10:f5:c9:8a:9b:24:62:
         7d:dd:a0:7f:1c:e6:4c:4a:49:6a:5c:62:fa:0d:b2:ce:2f:28:
         70:f2:ed:9b:b6:0b:3f:c7:0f:26:77:f9:43:4a:3e:96:1b:46:
         c0:89:e4:ce:c0:f1:3c:f8:3a:86:21:78:8f:2c:66:24:2b:26:
         ae:20:1a:59:f3:3b:1a:53:cc:b4:f9:a4:c8:0f:08:4c:78:5a:
         9b:de:a2:47:9a:da:10:4b:e1:70:08:c4:2c:cb:35:f2:70:a8:
         2d:fa:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:08 2026 by rpki-client