Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
File:                     C6XvqmwrvKGf6h_7abLZaQc7lc8.mft (raw, json)
Hash identifier:          xjYSy9vjZdykVZZrZYo/0SCy8TJZ6GrvUkTkSz91nz0=
Subject key identifier:   67:1F:8F:29:C0:81:E0:F0:71:CE:53:6B:AA:DF:DD:77:6C:7D:F0:32
Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
Certificate issuer:       /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Certificate serial:       01A06F4BEEE2A8FC2541192662E23D4E5669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
Manifest number:          024C
Signing time:             Sat 05 Sep 2026 02:00:42 +0000
Manifest this update:     Sat 05 Sep 2026 02:00:42 +0000
Manifest next update:     Sun 06 Sep 2026 02:00:42 +0000
Files and hashes:         1: C6XvqmwrvKGf6h_7abLZaQc7lc8.crl (hash: +GmA3YvSqBm1POwJdOPXvF0HgL0s8iHKN8WopRqQIEA=)
                          2: VCkp9PejXKJX1lKBEBDutAXVriI.roa (hash: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:4b:ee:e2:a8:fc:25:41:19:26:62:e2:3d:4e:56:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
        Validity
            Not Before: Sep  5 02:00:42 2026 GMT
            Not After : Sep  6 02:00:42 2026 GMT
        Subject: CN=671f8f29c081e0f071ce536baadfdd776c7df032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:af:9e:a8:92:d5:3e:d9:43:ec:a9:b6:4f:
                    b8:05:a2:44:dc:31:29:5b:ff:05:86:c9:91:5e:33:
                    15:8b:8b:f1:45:10:62:75:3c:6b:32:a0:91:76:8f:
                    ab:94:31:f0:8b:ec:22:3f:7a:a9:df:3f:00:7c:45:
                    14:4c:55:14:ad:2c:a0:9e:b5:2b:64:fc:b8:a3:8d:
                    d8:25:fb:4e:5b:30:7d:e5:b4:b7:0f:e4:6c:31:82:
                    4b:80:8d:f8:6e:93:a0:f4:67:b0:70:4f:68:a6:a1:
                    36:06:45:3f:b9:34:91:b6:c4:36:89:b4:ce:a6:4a:
                    f8:38:92:e5:0b:49:c7:7f:d3:ed:69:d7:c4:e5:94:
                    0a:6c:73:ca:6d:6c:d6:1f:97:17:b3:76:40:35:9a:
                    59:ca:ed:24:a9:b1:ed:51:a4:40:5f:1b:ac:82:f3:
                    92:0c:66:04:5d:81:bf:49:9a:20:a8:d9:82:1a:f6:
                    ab:3a:d1:1a:ca:b6:37:53:6a:a7:5d:0d:3d:2e:43:
                    84:47:6b:90:d7:bc:d3:d7:a3:f5:90:78:52:fc:1f:
                    33:12:f5:73:8b:e2:9a:fc:51:9b:db:3c:60:0b:59:
                    13:84:93:e1:5f:a0:bd:3f:ad:67:33:11:8f:a1:bf:
                    f3:c2:79:aa:f1:7c:e2:aa:f1:70:6a:d7:a3:df:96:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:8F:29:C0:81:E0:F0:71:CE:53:6B:AA:DF:DD:77:6C:7D:F0:32
            X509v3 Authority Key Identifier:
                keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:2b:a2:e8:28:27:23:ee:3d:a4:b9:20:27:02:36:94:ae:
         d1:d8:47:af:92:c2:95:f8:ee:6a:ce:bf:d6:1c:b7:0d:5f:e8:
         e0:3a:a1:f8:3b:ca:66:9a:f9:ce:3d:7e:44:2d:51:77:69:c6:
         61:10:f4:4f:c6:7d:7f:75:06:37:56:ce:3b:c5:43:10:cc:28:
         7d:99:3c:41:d4:83:22:4e:3f:50:d7:67:28:f3:ca:d5:97:1a:
         86:3e:d0:cb:17:80:8d:69:0e:51:1a:a4:75:45:2d:25:46:b2:
         a4:7e:d1:e1:78:53:67:e9:3c:9f:9e:a0:00:95:cf:ba:73:18:
         cd:55:00:5e:77:fd:69:70:66:0f:b3:f1:ff:21:6a:c6:fc:ab:
         db:19:8b:2d:cd:b6:e1:79:39:34:9a:87:94:b3:a4:a4:89:63:
         c2:27:69:30:7e:bd:95:7e:9a:13:ac:d6:97:18:09:19:12:cb:
         f3:21:50:7e:bd:61:de:aa:79:26:33:4d:34:dc:b4:0d:b9:a2:
         20:49:b6:95:07:ec:14:79:c4:dd:32:ad:a5:d3:04:be:a6:17:
         27:20:13:bb:31:8c:e8:a6:cc:b9:b2:a8:52:ab:bf:9a:d1:c4:
         fd:8c:3c:cf:3e:08:9c:38:22:5d:1c:f9:43:ff:f7:19:7a:5b:
         bc:d6:cf:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvS+7iqPwlQRkmYuI9TlZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTVlZmFhNmMyYmJjYTE5ZmVhMWZmYjY5YjJkOTY5MDcz
Yjk1Y2YwHhcNMjYwOTA1MDIwMDQyWhcNMjYwOTA2MDIwMDQyWjAzMTEwLwYDVQQD
Eyg2NzFmOGYyOWMwODFlMGYwNzFjZTUzNmJhYWRmZGQ3NzZjN2RmMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03+vnqiS1T7ZQ+yptk+4BaJE3DEp
W/8FhsmRXjMVi4vxRRBidTxrMqCRdo+rlDHwi+wiP3qp3z8AfEUUTFUUrSygnrUr
ZPy4o43YJftOWzB95bS3D+RsMYJLgI34bpOg9GewcE9opqE2BkU/uTSRtsQ2ibTO
pkr4OJLlC0nHf9PtadfE5ZQKbHPKbWzWH5cXs3ZANZpZyu0kqbHtUaRAXxusgvOS
DGYEXYG/SZogqNmCGvarOtEayrY3U2qnXQ09LkOER2uQ17zT16P1kHhS/B8zEvVz
i+Ka/FGb2zxgC1kThJPhX6C9P61nMxGPob/zwnmq8XziqvFwatej35YC+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcfjynAgeDwcc5Ta6rf3XdsffAyMB8GA1UdIwQY
MBaAFAul76psK7yhn+of+2my2WkHO5XPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NmQ3MTgtMjUwOS00ODFhLTlmMmMt
YzNjOGJiY2IzMGU4LzEvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NmQ3MTgtMjUwOS00ODFhLTlmMmMtYzNjOGJiY2IzMGU4
LzEvQzZYdnFtd3J2S0dmNmhfN2FiTFphUWM3bGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASborougo
JyPuPaS5ICcCNpSu0dhHr5LClfjuas6/1hy3DV/o4Dqh+DvKZpr5zj1+RC1Rd2nG
YRD0T8Z9f3UGN1bOO8VDEMwofZk8QdSDIk4/UNdnKPPK1Zcahj7QyxeAjWkOURqk
dUUtJUaypH7R4XhTZ+k8n56gAJXPunMYzVUAXnf9aXBmD7Px/yFqxvyr2xmLLc22
4Xk5NJqHlLOkpIljwidpMH69lX6aE6zWlxgJGRLL8yFQfr1h3qp5JjNNNNy0Dbmi
IEm2lQfsFHnE3TKtpdMEvqYXJyATuzGM6KbMubKoUqu/mtHE/Yw8zz4InDgiXRz5
Q//3GXpbvNbPFw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:11 2026 by rpki-client