Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File:                     m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier:          d/1FT96jrzg6RAsVo03nQp7eDQzrZqDFK60y7KsniYQ=
Subject key identifier:   9D:86:A3:2E:C7:B3:D7:14:85:25:D4:01:78:11:50:C0:9E:B6:CA:14
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer:       /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial:       01A15BF9D46BFCC9FE59C40875D0E89EB3C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number:          1AB7
Signing time:             Wed 21 Oct 2026 01:01:01 +0000
Manifest this update:     Wed 21 Oct 2026 01:01:01 +0000
Manifest next update:     Thu 22 Oct 2026 01:01:01 +0000
Files and hashes:         1: HZ8AlFPzeSKwnlXCV6rGz71Kb2g.roa (hash: cBgiVMyfZ1wPdRLeBDUH3L49HCW6dnbKeTA2KaOoCyo=)
                          2: k9Qt8bd5mtUe8WkBxy0-PnZZYDQ.roa (hash: 4cUGdQJG54wz4ImSZGhzke5tGudVY4frq/07PWJo/ug=)
                          3: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: eJ2ciHE6kD/NDcEUfG9T7o1qV2F0uNenSy5nRXFwqWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:f9:d4:6b:fc:c9:fe:59:c4:08:75:d0:e8:9e:b3:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
        Validity
            Not Before: Oct 21 01:01:01 2026 GMT
            Not After : Oct 22 01:01:01 2026 GMT
        Subject: CN=9d86a32ec7b3d7148525d401781150c09eb6ca14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:a1:53:06:35:45:fd:74:18:c7:56:98:55:
                    28:98:e7:e7:b2:2f:a7:6e:9b:b9:f6:3e:cb:05:0a:
                    60:19:c8:6d:d3:ea:d0:62:a3:fa:65:4f:ec:07:d7:
                    9d:60:50:d0:8d:b9:c8:d9:f6:8e:1c:ad:81:3f:65:
                    16:6a:db:60:db:e7:eb:a9:ef:95:05:dc:25:2f:9d:
                    41:e4:c3:ca:63:17:ad:c7:20:e9:45:ec:ca:00:9c:
                    a8:be:df:aa:c4:5f:6d:c8:ee:18:ac:3b:60:51:99:
                    fc:18:29:0d:76:d9:e0:b9:ef:d4:ed:c6:77:b4:77:
                    97:87:da:6c:5c:29:9d:f2:25:24:68:e7:63:e2:17:
                    89:94:1b:56:c5:51:1b:0a:c3:1e:69:f7:af:02:b1:
                    18:0c:e0:7b:16:3c:d7:76:af:94:34:da:b2:99:b0:
                    8e:8b:ce:52:df:63:b3:7f:39:ae:f7:cf:1a:1b:12:
                    08:71:21:c7:f0:0b:0e:36:e8:cc:3d:a8:f2:64:b4:
                    90:24:a5:ae:d6:14:a1:18:c5:9f:86:59:fc:a0:74:
                    02:69:6b:3f:cc:8d:41:29:64:58:0a:95:bb:b3:aa:
                    9a:b3:c5:ae:9d:1b:92:49:48:04:9d:c2:ff:d1:a8:
                    19:b5:b3:3c:ee:57:78:64:c6:07:a9:c5:c2:68:17:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:86:A3:2E:C7:B3:D7:14:85:25:D4:01:78:11:50:C0:9E:B6:CA:14
            X509v3 Authority Key Identifier:
                keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:49:02:22:c7:5d:6a:d8:cb:6e:fc:5d:16:57:0e:0c:f2:
         97:b2:40:0a:a0:fb:1b:40:1b:09:8f:34:37:32:fa:14:e9:ae:
         f0:8c:b8:0e:14:95:ab:c8:75:b2:2f:83:a4:47:7b:17:df:6c:
         83:54:18:27:a4:76:c1:7d:e2:fa:aa:71:3f:7f:ac:dc:3f:31:
         92:49:a9:56:df:58:33:7a:22:d5:b3:10:06:55:07:c5:72:01:
         2d:69:77:b1:64:d9:aa:6a:13:44:05:5c:df:ce:f2:4b:b6:7f:
         27:24:29:1e:c4:02:30:05:de:80:9a:de:78:a4:75:a5:06:34:
         d9:dd:55:bf:2c:ef:c8:c2:10:93:39:9e:c4:c2:d7:4a:74:1e:
         e3:00:1a:b5:5a:39:6e:00:13:3a:97:30:37:32:52:eb:f5:04:
         fc:8a:75:dd:97:e8:c3:8d:57:3f:6f:d5:3f:1d:6c:12:68:3b:
         f0:7a:5e:39:76:9b:c9:fa:4d:a8:8d:ad:63:21:49:cd:4a:75:
         67:e6:da:fd:e0:b9:1c:48:d3:23:c0:35:d3:ec:ff:16:85:2b:
         d6:ff:f8:c7:c1:c3:61:67:c3:ea:58:1f:26:91:fb:63:8b:c5:
         ec:9e:c1:80:79:2b:76:e3:ae:c3:b6:b2:c2:8e:34:83:18:d4:
         f5:58:74:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFb+dRr/Mn+WcQIddDonrPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTkwZDY2ZDJkZGViNjQ2YTYxNDA2OTEyZmZkZGZhMTRl
Mzk5MTAwHhcNMjYxMDIxMDEwMTAxWhcNMjYxMDIyMDEwMTAxWjAzMTEwLwYDVQQD
Eyg5ZDg2YTMyZWM3YjNkNzE0ODUyNWQ0MDE3ODExNTBjMDllYjZjYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VWhUwY1Rf10GMdWmFUomOfnsi+n
bpu59j7LBQpgGcht0+rQYqP6ZU/sB9edYFDQjbnI2faOHK2BP2UWattg2+frqe+V
BdwlL51B5MPKYxetxyDpRezKAJyovt+qxF9tyO4YrDtgUZn8GCkNdtngue/U7cZ3
tHeXh9psXCmd8iUkaOdj4heJlBtWxVEbCsMeafevArEYDOB7FjzXdq+UNNqymbCO
i85S32Ozfzmu988aGxIIcSHH8AsONujMPajyZLSQJKWu1hShGMWfhln8oHQCaWs/
zI1BKWRYCpW7s6qas8WunRuSSUgEncL/0agZtbM87ld4ZMYHqcXCaBcfJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2Goy7Hs9cUhSXUAXgRUMCetsoUMB8GA1UdIwQY
MBaAFJupDWbS3etkamFAaRL/3foU45kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAt
ODlmYjhmZTY5NjMzLzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAtODlmYjhmZTY5NjMz
LzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDdJAiLH
XWrYy278XRZXDgzyl7JACqD7G0AbCY80NzL6FOmu8Iy4DhSVq8h1si+DpEd7F99s
g1QYJ6R2wX3i+qpxP3+s3D8xkkmpVt9YM3oi1bMQBlUHxXIBLWl3sWTZqmoTRAVc
387yS7Z/JyQpHsQCMAXegJreeKR1pQY02d1VvyzvyMIQkzmexMLXSnQe4wAatVo5
bgATOpcwNzJS6/UE/Ip13Zfow41XP2/VPx1sEmg78HpeOXabyfpNqI2tYyFJzUp1
Z+ba/eC5HEjTI8A10+z/FoUr1v/4x8HDYWfD6lgfJpH7Y4vF7J7BgHkrduOuw7ay
wo40gxjU9Vh0fA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:09:26 2026 by rpki-client