Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File:                     n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier:          /aDFxi2MpX9WMCeVIexM0ZpKwXHnjE1kIfLz8EA56fc=
Subject key identifier:   BB:60:63:B6:00:B9:41:EB:7F:FA:D3:1D:E2:AD:B6:12:B1:A6:9F:54
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer:       /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial:       01A02657D2078CC3AA17B55461EC49113561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number:          16B0
Signing time:             Fri 21 Aug 2026 22:01:24 +0000
Manifest this update:     Fri 21 Aug 2026 22:01:24 +0000
Manifest next update:     Sat 22 Aug 2026 22:01:24 +0000
Files and hashes:         1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=)
                          2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: JVGQrzLbZeuP+IxqeQQhxGRK3d95FrgtaswRSOjj3EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:57:d2:07:8c:c3:aa:17:b5:54:61:ec:49:11:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
        Validity
            Not Before: Aug 21 22:01:24 2026 GMT
            Not After : Aug 22 22:01:24 2026 GMT
        Subject: CN=bb6063b600b941eb7ffad31de2adb612b1a69f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:ae:25:dc:65:13:01:e8:8e:44:f4:bd:ad:
                    73:71:a8:28:8b:aa:96:d8:f2:fd:c2:00:a8:81:dd:
                    bf:e3:72:03:7a:72:94:83:03:d8:32:12:87:c3:e7:
                    e8:5b:96:83:04:76:60:5d:90:f8:97:31:50:c6:b1:
                    3c:bf:5b:c2:c7:f5:8a:fb:15:5c:80:a8:08:6d:e2:
                    f8:8b:8b:65:61:8d:9a:a1:ad:13:ec:fe:62:ff:c1:
                    85:b9:cb:ad:d6:1c:a9:bc:13:df:7c:3c:3f:08:5c:
                    e1:17:bf:f0:92:9d:8a:02:29:b5:19:eb:47:9a:aa:
                    63:6f:81:6a:0f:b0:12:57:cc:24:16:0a:97:3b:fe:
                    bc:1d:4e:bc:fe:a0:48:8f:48:8e:7f:e0:95:c5:da:
                    8f:cb:5e:70:c4:53:68:1d:76:80:43:78:a8:4b:ad:
                    ef:05:08:62:0a:5f:01:bd:07:22:dc:55:02:c2:b8:
                    b2:e5:40:97:13:ab:8a:8d:e7:02:33:44:cf:83:f4:
                    f5:6c:b9:ab:83:44:6d:7e:f5:4b:65:98:f4:56:bc:
                    1f:93:e3:75:81:5a:9d:14:d2:ee:7e:17:36:e9:ad:
                    1e:6d:ad:d0:0e:78:52:65:f4:d9:3f:9e:e2:ab:12:
                    85:f9:2d:b0:e5:8f:ed:fa:49:ff:cf:97:ee:c9:31:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:63:B6:00:B9:41:EB:7F:FA:D3:1D:E2:AD:B6:12:B1:A6:9F:54
            X509v3 Authority Key Identifier:
                keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:13:67:d3:b9:49:83:d2:15:00:eb:59:07:7d:07:0f:a6:
         85:bb:4a:9d:ac:95:c4:1b:84:1a:5c:ea:f4:e2:c6:97:f9:18:
         8c:9b:2b:55:42:18:91:fa:99:4a:7a:89:21:5e:a6:28:c9:48:
         a4:da:6e:a2:7d:90:8a:54:40:64:c3:e7:58:32:97:d6:61:1e:
         4b:cd:e9:e0:81:88:8b:63:fd:94:d6:f8:9b:69:8b:2c:c2:48:
         ec:a1:da:f3:ff:e7:4f:9f:66:ac:db:0f:e4:56:09:36:ce:f4:
         61:12:88:53:85:0a:11:0e:a4:31:5d:0a:f5:0c:a3:e9:f3:af:
         dc:8e:f5:29:31:1b:30:a9:0b:8e:01:9c:48:d0:06:2f:f7:aa:
         8b:22:8a:75:0e:18:02:bd:77:56:06:44:99:42:b0:b4:7f:9e:
         2e:bd:01:9c:a5:9c:9e:e5:20:19:90:de:c1:2a:a1:0d:2c:d4:
         8c:4c:44:d2:49:d8:ad:da:b2:78:86:c6:13:57:90:b4:b2:e6:
         30:2e:2f:59:e5:13:4e:48:8e:1f:f3:f0:d4:ab:95:84:7a:71:
         e9:20:27:fc:a9:a0:f5:de:da:be:9b:ca:23:95:67:80:3c:e6:
         80:36:b6:12:57:02:be:9d:e9:c2:ae:7d:62:2c:81:0b:74:1a:
         75:78:9e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmV9IHjMOqF7VUYexJETVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYTc4NTlkYzM5ZDQ3MzYxNDJjZjFlMjI5YzhhYzRiZTYy
M2I5MDMwHhcNMjYwODIxMjIwMTI0WhcNMjYwODIyMjIwMTI0WjAzMTEwLwYDVQQD
EyhiYjYwNjNiNjAwYjk0MWViN2ZmYWQzMWRlMmFkYjYxMmIxYTY5ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum2uJdxlEwHojkT0va1zcagoi6qW
2PL9wgCogd2/43IDenKUgwPYMhKHw+foW5aDBHZgXZD4lzFQxrE8v1vCx/WK+xVc
gKgIbeL4i4tlYY2aoa0T7P5i/8GFucut1hypvBPffDw/CFzhF7/wkp2KAim1GetH
mqpjb4FqD7ASV8wkFgqXO/68HU68/qBIj0iOf+CVxdqPy15wxFNoHXaAQ3ioS63v
BQhiCl8BvQci3FUCwriy5UCXE6uKjecCM0TPg/T1bLmrg0RtfvVLZZj0Vrwfk+N1
gVqdFNLufhc26a0eba3QDnhSZfTZP57iqxKF+S2w5Y/t+kn/z5fuyTG2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtgY7YAuUHrf/rTHeKtthKxpp9UMB8GA1UdIwQY
MBaAFJ+nhZ3DnUc2FCzx4inIrEvmI7kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTIt
ZThkNmMyZjA3MWRmLzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTItZThkNmMyZjA3MWRm
LzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmoTZ9O5
SYPSFQDrWQd9Bw+mhbtKnayVxBuEGlzq9OLGl/kYjJsrVUIYkfqZSnqJIV6mKMlI
pNpuon2QilRAZMPnWDKX1mEeS83p4IGIi2P9lNb4m2mLLMJI7KHa8//nT59mrNsP
5FYJNs70YRKIU4UKEQ6kMV0K9Qyj6fOv3I71KTEbMKkLjgGcSNAGL/eqiyKKdQ4Y
Ar13VgZEmUKwtH+eLr0BnKWcnuUgGZDewSqhDSzUjExE0knYrdqyeIbGE1eQtLLm
MC4vWeUTTkiOH/Pw1KuVhHpx6SAn/Kmg9d7avpvKI5VngDzmgDa2ElcCvp3pwq59
YiyBC3QadXiesQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 03:26:36 2026 by rpki-client