Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
File:                     F6b6gLLRxD7J6oJOfoOV95KU44o.mft (raw, json)
Hash identifier:          vaHkUBs5PcS3T5vKvIQzVqhksMDDbG5XQarQPkgvFxo=
Subject key identifier:   9C:A1:B1:EF:89:CE:DA:65:F8:89:8C:D0:E6:77:4D:D3:64:B7:92:D3
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Certificate issuer:       /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial:       01A1494F5C541A9F717E6E87F44AFB71327C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
Manifest number:          1AA9
Signing time:             Sat 17 Oct 2026 10:01:40 +0000
Manifest this update:     Sat 17 Oct 2026 10:01:40 +0000
Manifest next update:     Sun 18 Oct 2026 10:01:40 +0000
Files and hashes:         1: F6b6gLLRxD7J6oJOfoOV95KU44o.crl (hash: ECwfOjdz1p9AEINQwHFOeX8eKd9Bb086hgx2ED5Nt2w=)
                          2: G_oOSvatA_MkA8PUOvQG0SjlBP8.roa (hash: QfgbrckpcKZmIdbq0sGOrc2SbZS9wiTACRQ29trGbAU=)
                          3: Gf7lU_Sk5Y4hQW5uJobfq5qbd-g.roa (hash: 7A1GTsJbZzCBO8fZOhHeSTwon1kGffXk7Ew7vArc6aY=)
                          4: rGC0qGxT2A4D9RYY1RQ2RceWQrc.roa (hash: Ewm/EyxXbRoL5Dvk+LI/Mhdsnb2ZmI7M0pe6WUV9GxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:4f:5c:54:1a:9f:71:7e:6e:87:f4:4a:fb:71:32:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
        Validity
            Not Before: Oct 17 10:01:40 2026 GMT
            Not After : Oct 18 10:01:40 2026 GMT
        Subject: CN=9ca1b1ef89ceda65f8898cd0e6774dd364b792d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:d2:8d:d7:7d:16:da:c6:16:39:f3:58:65:
                    04:7b:2d:33:cb:03:b1:ff:4b:89:e4:e0:b6:e8:17:
                    b0:29:5f:40:a5:b8:f0:0a:32:ef:53:18:48:6f:54:
                    b8:f1:a3:ae:91:94:6b:68:37:4e:41:40:af:90:18:
                    00:48:9c:9b:d7:eb:5c:ad:a3:eb:8e:6f:f1:66:a5:
                    14:c7:0b:e5:d5:d1:ae:d4:41:d4:4b:04:fb:27:b2:
                    fa:4e:1d:3c:b1:f9:ac:97:58:79:ff:7f:08:9f:02:
                    67:1a:9f:e9:81:05:37:d2:45:f1:3c:82:4b:6d:41:
                    b2:ab:a3:61:07:59:6b:83:0a:95:60:6d:df:bd:d0:
                    f8:a1:16:d1:0b:e3:11:b0:79:8f:95:54:2d:d6:d0:
                    c7:11:4d:4c:02:bc:90:84:b3:6a:6c:cf:6e:21:9a:
                    4a:bc:da:bd:cd:93:5f:82:6e:e5:c8:22:f2:02:99:
                    34:d3:d4:06:31:46:3d:6d:37:61:4b:14:3f:6f:5c:
                    c3:1f:00:2c:f4:75:3f:65:3c:14:50:71:13:5c:45:
                    0a:7f:a0:df:b3:a5:67:fa:29:d9:37:29:16:b7:14:
                    95:b5:5d:4f:a1:2f:73:d8:8d:da:86:ca:c9:3d:ce:
                    de:c7:56:97:4e:d2:47:97:bb:cd:82:4a:5a:9b:f3:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A1:B1:EF:89:CE:DA:65:F8:89:8C:D0:E6:77:4D:D3:64:B7:92:D3
            X509v3 Authority Key Identifier:
                keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7c:03:72:0b:34:ae:4d:17:c4:24:10:27:ec:e0:04:7b:39:
         4c:c1:5f:33:36:25:fa:e4:ad:3a:56:92:45:e5:98:6e:cc:25:
         71:0c:10:5b:82:98:9f:38:26:1a:8b:4a:39:25:1d:a7:e0:f8:
         39:86:9f:44:81:d0:24:d8:e8:21:c7:c5:3d:7a:2b:0d:e8:16:
         5c:96:d3:c7:c3:14:50:91:dc:35:ed:b3:06:d2:ce:44:42:cf:
         d0:aa:e5:b8:38:bd:1e:2c:ca:ed:82:1d:fc:85:f3:21:20:c6:
         56:f7:1e:e3:93:3f:e7:13:bd:19:b7:89:b1:6a:2b:5e:db:b3:
         8f:b2:42:66:c1:92:09:fa:35:1a:cc:a0:88:c0:e3:e4:f1:25:
         ab:ad:83:0a:94:ac:39:33:c3:05:b3:f4:2c:4e:be:18:8c:78:
         d7:f6:83:47:1b:1e:dc:b8:07:50:0a:30:1c:8f:63:dc:0d:8f:
         5f:77:63:36:04:04:34:0d:8d:3b:95:25:71:79:06:6d:39:8a:
         b1:81:c4:c3:9a:54:92:6c:68:1c:2c:64:da:eb:3c:d4:cb:fa:
         de:64:66:a6:9d:82:4f:5e:87:b1:b1:4f:fe:fc:fb:e4:10:72:
         44:ce:36:da:93:4d:17:da:f5:18:71:e4:fd:db:4f:9d:83:02:
         ab:83:ee:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJT1xUGp9xfm6H9Er7cTJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTZmYTgwYjJkMWM0M2VjOWVhODI0ZTdlODM5NWY3OTI5
NGUzOGEwHhcNMjYxMDE3MTAwMTQwWhcNMjYxMDE4MTAwMTQwWjAzMTEwLwYDVQQD
Eyg5Y2ExYjFlZjg5Y2VkYTY1Zjg4OThjZDBlNjc3NGRkMzY0Yjc5MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UHSjdd9FtrGFjnzWGUEey0zywOx
/0uJ5OC26BewKV9ApbjwCjLvUxhIb1S48aOukZRraDdOQUCvkBgASJyb1+tcraPr
jm/xZqUUxwvl1dGu1EHUSwT7J7L6Th08sfmsl1h5/38InwJnGp/pgQU30kXxPIJL
bUGyq6NhB1lrgwqVYG3fvdD4oRbRC+MRsHmPlVQt1tDHEU1MAryQhLNqbM9uIZpK
vNq9zZNfgm7lyCLyApk009QGMUY9bTdhSxQ/b1zDHwAs9HU/ZTwUUHETXEUKf6Df
s6Vn+inZNykWtxSVtV1PoS9z2I3ahsrJPc7ex1aXTtJHl7vNgkpam/OAhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyhse+Jztpl+ImM0OZ3TdNkt5LTMB8GA1UdIwQY
MBaAFBem+oCy0cQ+yeqCTn6DlfeSlOOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZiNmdMTFJ4RDdKNm9KT2ZvT1Y5NUtVNDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iYmZlNDgtZjE0ZC00MGQxLTlmMWEt
Y2I5ZTQ1YmIwYzYzLzEvRjZiNmdMTFJ4RDdKNm9KT2ZvT1Y5NUtVNDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iYmZlNDgtZjE0ZC00MGQxLTlmMWEtY2I5ZTQ1YmIwYzYz
LzEvRjZiNmdMTFJ4RDdKNm9KT2ZvT1Y5NUtVNDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHwDcgs0
rk0XxCQQJ+zgBHs5TMFfMzYl+uStOlaSReWYbswlcQwQW4KYnzgmGotKOSUdp+D4
OYafRIHQJNjoIcfFPXorDegWXJbTx8MUUJHcNe2zBtLORELP0KrluDi9HizK7YId
/IXzISDGVvce45M/5xO9GbeJsWorXtuzj7JCZsGSCfo1GsygiMDj5PElq62DCpSs
OTPDBbP0LE6+GIx41/aDRxse3LgHUAowHI9j3A2PX3djNgQENA2NO5UlcXkGbTmK
sYHEw5pUkmxoHCxk2us81Mv63mRmpp2CT16HsbFP/vz75BByRM422pNNF9r1GHHk
/dtPnYMCq4PubQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:24:52 2026 by rpki-client