Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          pCqsa+An85rx1/ZfAzO/nQYGKuCqE3WSDQhbvcqJmrI=
Subject key identifier:   F3:6B:5D:6A:6A:BD:B5:C5:ED:82:BC:87:AD:72:B8:61:EB:3B:C1:61
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       01A10700E767C167830A4D21889B5BCD9671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          07DB
Signing time:             Sun 04 Oct 2026 13:01:02 +0000
Manifest this update:     Sun 04 Oct 2026 13:01:02 +0000
Manifest next update:     Mon 05 Oct 2026 13:01:02 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: cfI9t9rsOSuQGhP2cu3/pOfrBEOJu5j7V11/8Qr8M+8=)
                          2: oGx7JfYX53D__g9_5hLujNutUzE.roa (hash: lRBSZN0vcGbFXwTasrFrwyAWF1DzSBb5tPanlgAqXJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:00:e7:67:c1:67:83:0a:4d:21:88:9b:5b:cd:96:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Oct  4 13:01:02 2026 GMT
            Not After : Oct  5 13:01:02 2026 GMT
        Subject: CN=f36b5d6a6abdb5c5ed82bc87ad72b861eb3bc161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:59:56:14:ec:b8:21:fa:80:e0:0c:b0:fd:
                    92:52:89:69:76:28:27:86:1b:f7:c5:a7:d4:f0:bc:
                    85:fb:11:34:8a:38:0b:58:b1:8c:17:36:68:f0:70:
                    54:27:40:6c:b4:b0:fd:fd:80:98:5e:53:c0:0e:d4:
                    93:9f:53:91:a2:b2:61:3b:a5:da:4f:09:cc:5f:08:
                    50:48:78:f2:2c:f2:33:be:0d:8a:ab:01:ae:8f:89:
                    50:23:cb:7b:9a:ca:53:53:fb:05:d2:47:96:3e:14:
                    df:c4:b2:df:be:5a:81:da:72:73:c3:e2:ec:ec:b6:
                    41:fc:2c:87:72:31:ac:22:e6:92:e2:5b:51:e9:79:
                    76:92:1c:43:f8:7a:e4:8e:73:95:7c:29:cb:17:ba:
                    78:3d:26:54:58:b5:1f:f9:57:ec:a3:3e:bd:5a:00:
                    12:5f:fa:b8:a5:dd:b1:de:21:b0:98:43:40:a5:77:
                    08:11:20:5b:93:b1:e1:d7:7a:45:4c:1a:e9:22:5b:
                    80:e8:74:e7:07:26:bc:58:10:90:c5:9f:bf:f4:a5:
                    d6:25:bc:3d:73:5d:e3:70:0a:ba:0a:c9:8a:0c:4e:
                    7b:01:8b:ba:30:3c:80:92:59:4d:77:bc:10:bb:19:
                    9b:2b:cb:9a:92:7e:c9:3c:c1:48:37:a4:de:6d:13:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:5D:6A:6A:BD:B5:C5:ED:82:BC:87:AD:72:B8:61:EB:3B:C1:61
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fe:2b:5a:41:10:d6:40:64:7d:8c:01:a3:f5:72:d4:7a:11:
         9b:56:ce:43:3d:91:fd:56:e4:6d:9f:7d:01:80:42:fd:ea:af:
         78:86:52:48:5b:ad:46:b7:78:b7:a2:f3:ae:6d:03:cf:ae:bc:
         a6:05:af:d2:42:4d:75:57:51:0e:68:8c:d9:08:58:0e:28:8e:
         81:f9:a6:61:88:01:d3:6e:39:4d:30:b3:6f:5d:53:ae:bd:5e:
         98:a2:ad:9c:60:c0:80:49:57:0f:55:45:d6:16:f7:65:95:e2:
         bf:29:d3:84:ae:88:47:38:fb:18:27:62:48:28:eb:13:4e:93:
         54:4b:34:da:7b:ac:56:13:6b:5b:f6:74:9a:29:c4:e0:9a:ca:
         a6:55:ea:91:47:f0:fe:4b:1a:93:96:7d:9b:8f:9d:7a:c5:33:
         11:72:82:32:90:9c:2f:b9:93:db:02:f1:5d:29:ef:e2:37:75:
         0d:a7:58:ef:95:f4:9d:73:72:36:87:04:3f:fa:cf:86:e2:02:
         3f:6b:41:62:09:f6:f8:89:e3:c8:a7:d2:cb:17:5b:28:68:06:
         68:e8:09:c2:94:d3:11:8a:5a:87:5e:41:06:4d:6d:c4:82:c8:
         c4:9c:0d:c5:42:48:c7:a0:81:4e:f0:c2:76:78:ef:35:69:7b:
         ae:27:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:43:34 2026 by rpki-client