Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
File:                     6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json)
Hash identifier:          Srnoy11zXTZZa2XouNq/CWujPJwMA8oWlAWJ1rtX790=
Subject key identifier:   2D:10:75:48:13:C9:E2:C7:43:C1:77:1E:F0:35:3C:6E:F8:7F:87:90
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Certificate issuer:       /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial:       01A1875194DE94B82B3CFDF5DBDE26942E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
Manifest number:          12A2
Signing time:             Thu 29 Oct 2026 11:00:33 +0000
Manifest this update:     Thu 29 Oct 2026 11:00:33 +0000
Manifest next update:     Fri 30 Oct 2026 11:00:33 +0000
Files and hashes:         1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: Adi1r6oGcazMxFYwkag4RkgK2fqnWEhOXmKAkaL/qtI=)
                          2: j8NRcneTJ0erjUoC8sEq4kTQQnI.roa (hash: jexHV1h3hwT59/VOtHkOcyrNIXBETEJ/OwCKAiLIB9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:51:94:de:94:b8:2b:3c:fd:f5:db:de:26:94:2e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
        Validity
            Not Before: Oct 29 11:00:33 2026 GMT
            Not After : Oct 30 11:00:33 2026 GMT
        Subject: CN=2d10754813c9e2c743c1771ef0353c6ef87f8790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:cc:14:29:97:54:a2:64:a8:e6:85:50:81:
                    44:ec:37:ca:da:f1:0e:e7:74:fc:78:69:cf:0e:97:
                    92:a9:02:83:0b:41:e4:46:b1:df:2d:d6:a2:e2:26:
                    91:b0:8b:2c:01:28:13:0e:05:f5:cb:bb:4b:c7:7c:
                    84:aa:d7:ee:93:66:ea:fa:70:36:54:60:20:31:74:
                    07:80:f2:35:05:de:d8:7b:10:a3:9d:64:b8:a4:e5:
                    b8:1f:da:fd:8a:3e:3b:e0:d2:36:3a:af:5e:09:ee:
                    3a:0a:c2:77:a8:e8:f4:50:fd:f6:47:da:74:e8:14:
                    fe:ee:aa:9b:35:b8:85:df:d9:c9:3f:58:3e:9f:09:
                    5b:7e:17:54:51:2f:eb:6a:f3:7c:8f:00:4b:e2:b7:
                    fb:78:22:1c:0f:e1:90:8f:be:55:ef:7f:09:7f:53:
                    3d:b5:03:5a:83:26:6e:75:d8:3d:d4:e2:93:01:a0:
                    42:73:71:13:d4:a3:84:6f:c1:a3:9a:08:32:3a:c9:
                    0c:a3:97:aa:11:d2:26:50:9f:d3:47:f7:f9:2a:c3:
                    dc:39:9d:f5:48:0c:4c:2a:05:3f:77:8f:10:66:71:
                    ea:1c:3d:06:87:6e:7f:1f:f2:d7:a3:a8:8a:45:56:
                    b0:c9:5c:6e:db:4b:ae:2e:9f:2b:a6:bd:25:a9:77:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:75:48:13:C9:E2:C7:43:C1:77:1E:F0:35:3C:6E:F8:7F:87:90
            X509v3 Authority Key Identifier:
                keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:78:00:75:28:0c:fb:a3:6b:98:9b:e7:65:25:75:d8:28:c8:
         74:c5:82:0d:dd:7d:7a:99:4b:f6:46:fc:64:e3:ac:f6:e7:90:
         f0:98:91:38:e2:36:4b:b6:e9:6e:c9:37:4d:88:c8:58:c8:53:
         92:0b:92:57:97:a1:ef:a7:dc:db:19:ca:72:1b:31:28:b3:23:
         62:45:3f:aa:f8:4a:68:ed:c1:6a:37:2a:0a:61:3a:86:f8:52:
         1e:39:c2:59:7e:43:5e:7b:2a:aa:8e:a3:60:8b:bc:30:48:fd:
         f7:65:97:0d:0b:c0:76:34:01:26:6d:ce:12:36:a2:f9:84:53:
         20:f8:9b:e0:0d:66:f2:32:bb:13:0d:64:61:1f:32:0b:49:b3:
         c8:cc:9b:6d:8e:7e:8d:90:20:4a:67:5b:d7:9b:2b:fc:84:6b:
         97:dd:d4:b5:00:8b:b6:91:83:0a:dd:ce:ae:7d:a4:77:9c:fa:
         b7:5e:6c:0f:69:66:e8:cb:03:67:7b:e5:d8:6a:3b:af:c7:47:
         96:12:7c:07:fb:f5:02:c3:ae:7c:1d:8c:9a:60:c3:e7:16:98:
         9b:d3:ff:d3:67:5e:71:fd:0e:6e:70:98:61:c2:be:2d:ce:f1:
         80:53:c3:7c:ea:a3:52:98:0e:9c:63:ee:d1:d6:ec:9c:2f:14:
         7f:e0:c3:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHUZTelLgrPP31294mlC45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Yzg5YjNkY2RmYTI2OTdiNDg3MjEzMDhjNzZiNjczNzJh
MTNiMTUwHhcNMjYxMDI5MTEwMDMzWhcNMjYxMDMwMTEwMDMzWjAzMTEwLwYDVQQD
EygyZDEwNzU0ODEzYzllMmM3NDNjMTc3MWVmMDM1M2M2ZWY4N2Y4NzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEvMFCmXVKJkqOaFUIFE7DfK2vEO
53T8eGnPDpeSqQKDC0HkRrHfLdai4iaRsIssASgTDgX1y7tLx3yEqtfuk2bq+nA2
VGAgMXQHgPI1Bd7YexCjnWS4pOW4H9r9ij474NI2Oq9eCe46CsJ3qOj0UP32R9p0
6BT+7qqbNbiF39nJP1g+nwlbfhdUUS/ravN8jwBL4rf7eCIcD+GQj75V738Jf1M9
tQNagyZuddg91OKTAaBCc3ET1KOEb8GjmggyOskMo5eqEdImUJ/TR/f5KsPcOZ31
SAxMKgU/d48QZnHqHD0Gh25/H/LXo6iKRVawyVxu20uuLp8rpr0lqXdy6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0QdUgTyeLHQ8F3HvA1PG74f4eQMB8GA1UdIwQY
MBaAFOjImz3N+iaXtIchMIx2tnNyoTsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUt
OTM0YjQ0MzkwOTJkLzEvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUtOTM0YjQ0MzkwOTJk
LzEvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXgAdSgM
+6NrmJvnZSV12CjIdMWCDd19eplL9kb8ZOOs9ueQ8JiROOI2S7bpbsk3TYjIWMhT
kguSV5eh76fc2xnKchsxKLMjYkU/qvhKaO3BajcqCmE6hvhSHjnCWX5DXnsqqo6j
YIu8MEj992WXDQvAdjQBJm3OEjai+YRTIPib4A1m8jK7Ew1kYR8yC0mzyMybbY5+
jZAgSmdb15sr/IRrl93UtQCLtpGDCt3Orn2kd5z6t15sD2lm6MsDZ3vl2Go7r8dH
lhJ8B/v1AsOufB2MmmDD5xaYm9P/02decf0ObnCYYcK+Lc7xgFPDfOqjUpgOnGPu
0dbsnC8Uf+DDaA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:21 2026 by rpki-client