Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          Eq8XNPRIr64kSv9h8OtYY7Dyv8dd/U/IR2lrZITA12Y=
Subject key identifier:   D6:B9:13:8A:DC:F4:FE:73:3D:95:3F:33:E5:3C:C7:2B:D2:53:9D:8B
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       01A1DF8391521379135221E3797796E20686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          1AFA
Signing time:             Sun 15 Nov 2026 14:01:43 +0000
Manifest this update:     Sun 15 Nov 2026 14:01:43 +0000
Manifest next update:     Mon 16 Nov 2026 14:01:43 +0000
Files and hashes:         1: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: XDWv0p6UsjbJ2xIHaX0kL48qV8CMndUoEIbP765bkts=)
                          2: OZ-4bdLigPBsZcaqqgq1vun0WQw.roa (hash: pGYKvg2Oo9KoFiiz7qQh+48XYCnScT9nFS878Hx3KLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:83:91:52:13:79:13:52:21:e3:79:77:96:e2:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Nov 15 14:01:43 2026 GMT
            Not After : Nov 16 14:01:43 2026 GMT
        Subject: CN=d6b9138adcf4fe733d953f33e53cc72bd2539d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:23:e4:49:60:99:3c:dd:40:90:c0:f4:99:
                    d0:78:bc:66:d8:c8:e4:33:43:80:f2:3a:c0:f0:39:
                    c3:a6:f0:8f:65:47:54:fc:b3:ed:75:72:28:cf:9e:
                    c1:57:48:df:e0:3f:9e:f9:65:ce:ce:85:77:12:65:
                    e5:4a:8e:4d:8d:83:1f:16:0f:0b:2e:6f:02:8c:58:
                    c4:6e:f3:81:6d:3b:52:fe:bc:8c:10:e4:22:e8:b6:
                    48:da:c2:60:a0:de:0e:29:3b:09:85:be:6a:bf:41:
                    76:15:46:3b:33:ef:be:10:6e:fa:ae:c6:03:c6:2b:
                    19:ee:b3:99:ae:11:9d:76:49:74:33:a7:3a:b9:8a:
                    01:59:bc:00:d8:d8:30:b5:c8:04:dd:bf:d3:4b:11:
                    90:3f:e6:30:38:59:6c:22:07:75:83:fd:e6:8e:af:
                    c5:b3:6e:44:58:44:03:d0:7d:1a:d2:15:44:89:35:
                    f8:99:13:1f:ec:c1:11:65:29:32:d1:59:2d:64:f0:
                    83:eb:43:be:d4:ee:94:fa:1f:bf:b5:57:06:fb:c3:
                    a7:d7:50:87:39:2c:2a:82:6e:7d:21:23:b1:d6:58:
                    b5:19:95:aa:87:7d:e5:e5:0a:ea:dd:6f:18:b2:ee:
                    1b:1e:3f:86:9a:81:f4:35:9a:4b:68:11:c2:cb:76:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B9:13:8A:DC:F4:FE:73:3D:95:3F:33:E5:3C:C7:2B:D2:53:9D:8B
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:74:0e:6a:69:6b:4f:39:ce:b8:84:f5:e2:eb:c8:ce:29:12:
         fc:dd:3a:6d:d3:ff:db:a5:8d:81:7f:53:7d:c2:f0:83:e1:6f:
         f0:14:c2:ec:53:e3:a0:7a:28:6a:ba:08:74:97:fb:95:18:42:
         e5:99:51:c0:27:16:eb:b5:1a:ba:71:b7:99:28:58:c3:f0:c2:
         d0:5e:cd:8f:23:45:89:b3:67:fd:77:a6:0b:40:a6:c8:18:4f:
         a0:44:c9:78:54:34:34:42:7c:85:97:45:35:a6:ff:0b:92:22:
         35:89:8c:be:ec:5d:99:8d:05:8c:ba:63:0c:77:5b:ae:86:52:
         2e:48:84:22:40:1e:bd:67:42:ec:ec:f5:73:e3:33:d5:d3:7d:
         e8:23:9e:28:13:8b:39:ca:0e:6a:e8:2a:01:49:f0:7e:7a:7a:
         ce:d2:ce:d1:a0:d3:06:53:61:53:f6:5c:b4:de:1a:82:50:1d:
         de:ed:ca:9f:63:56:db:bd:66:04:cd:fd:40:fa:8a:b2:fb:e7:
         1d:e7:cc:59:14:5e:e8:92:94:11:a4:ae:5a:fc:75:dd:d4:82:
         39:2c:69:ce:e6:90:0e:0c:17:a7:9a:84:69:67:71:1b:f9:e4:
         1d:17:e0:e1:2b:c1:67:c3:dc:28:c3:4d:2f:b0:32:59:00:00:
         a9:f2:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:33:36 2026 by rpki-client