Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File:                     6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier:          xIdAM6GFqx1YYEhzWz/uhfvWGjiBUK68spyf2G00edI=
Subject key identifier:   11:B2:82:31:CE:A9:17:43:B1:56:0C:8A:D7:99:3A:5A:F9:FE:8C:81
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer:       /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial:       01A03FA99BD0379062666093EA9558630181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number:          0551
Signing time:             Wed 26 Aug 2026 20:01:14 +0000
Manifest this update:     Wed 26 Aug 2026 20:01:14 +0000
Manifest next update:     Thu 27 Aug 2026 20:01:14 +0000
Files and hashes:         1: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: m5WAtv8cOXrON4tVuLxrrZOahwRxXI32n4j4fhj3yDQ=)
                          2: VIPwVpOCOBxM-6VZdHVb4qW1KjM.roa (hash: a3fvMBDRuRl6Fi34mUUPnVeDXMuKhZqOr31AZb3er1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:9b:d0:37:90:62:66:60:93:ea:95:58:63:01:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
        Validity
            Not Before: Aug 26 20:01:14 2026 GMT
            Not After : Aug 27 20:01:14 2026 GMT
        Subject: CN=11b28231cea91743b1560c8ad7993a5af9fe8c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:e9:8d:05:ec:64:2f:7c:78:70:9a:21:d7:
                    b5:b1:a2:12:be:1d:ff:3a:b5:1c:05:f2:5c:bf:aa:
                    9a:60:16:a8:74:8d:ab:e6:7a:70:61:a8:c0:13:ff:
                    ea:36:c0:1b:22:1d:b5:3b:7a:41:5f:7a:98:e3:b3:
                    61:5a:8a:ce:86:7c:f7:dd:aa:01:4d:b0:55:dd:92:
                    e0:78:e4:3d:d8:6e:5e:be:0e:db:14:ba:dd:4a:c6:
                    fd:b7:ba:7b:00:d3:62:f3:7b:8f:30:53:49:c0:43:
                    1b:9b:58:c9:39:7d:ca:e6:3c:e4:3a:c4:64:fc:74:
                    a4:82:31:9a:e8:92:77:a9:6b:b9:42:23:f0:78:41:
                    2c:13:81:9a:58:1c:5f:e0:b0:d3:59:bb:0f:fd:5d:
                    49:cd:9d:c2:47:03:c9:a6:8e:33:ec:b9:6c:27:61:
                    be:75:5f:e4:42:8c:2c:5d:29:2d:32:2f:25:8e:a0:
                    f3:2a:0a:18:4b:e5:f3:9e:c8:b3:48:bc:5f:50:bb:
                    10:02:5e:e7:17:aa:49:09:36:be:a3:06:8d:80:0f:
                    4b:89:d7:24:99:7d:7b:1a:d1:5d:b4:f9:4d:8a:d2:
                    da:d1:09:72:53:8d:6d:a9:22:1d:35:db:0c:24:27:
                    0b:0b:d0:8f:f0:99:d1:0b:90:40:ad:ec:00:70:68:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:82:31:CE:A9:17:43:B1:56:0C:8A:D7:99:3A:5A:F9:FE:8C:81
            X509v3 Authority Key Identifier:
                keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:bf:ad:c7:dd:c1:10:cd:ee:7d:61:35:72:67:32:ed:e6:
         2e:fc:cb:06:1f:e2:89:80:ad:81:69:89:09:aa:c1:aa:7c:78:
         03:50:3c:7b:e4:54:35:2f:d9:bd:0e:4b:49:92:36:a9:9a:71:
         ed:8e:73:bc:a9:5b:e4:e1:67:de:05:86:a0:4b:57:87:7f:c0:
         0d:17:15:28:db:10:6d:fb:88:0c:23:45:4c:2c:4e:f8:c3:42:
         a7:a3:01:ab:a1:f7:8d:93:0d:cc:1f:1d:74:a3:c0:b1:0b:b5:
         4b:4a:5c:06:e4:e7:29:4f:2b:b5:de:5d:96:28:63:d8:b7:20:
         36:df:ad:13:9e:53:f9:51:c3:a6:04:37:4c:5c:1a:7a:47:7d:
         56:b3:66:7c:cc:8e:1f:11:31:c5:1c:63:01:7c:1b:b7:21:d6:
         18:40:bd:dc:bf:df:ad:34:cf:3d:47:d8:19:cc:7b:92:6c:3d:
         fd:9a:7f:e1:14:81:39:5a:12:b2:33:2a:f2:b4:ee:52:cc:9e:
         c1:73:04:4c:4e:a8:a8:af:0f:46:ed:c6:86:48:f1:86:b1:fc:
         78:ff:8a:49:9a:28:2b:09:6c:f0:8d:b4:58:a5:aa:f4:cb:c1:
         03:a7:1f:51:08:ce:79:bc:fb:43:e7:87:ca:c9:a4:2a:74:8a:
         b9:3b:53:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qZvQN5BiZmCT6pVYYwGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTBjMmMwZGVlNmY5ZWQ2NWUwNTFlYWE5MDk3ZDAyY2Y1
YmY1ZjIwHhcNMjYwODI2MjAwMTE0WhcNMjYwODI3MjAwMTE0WjAzMTEwLwYDVQQD
EygxMWIyODIzMWNlYTkxNzQzYjE1NjBjOGFkNzk5M2E1YWY5ZmU4YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEDpjQXsZC98eHCaIde1saISvh3/
OrUcBfJcv6qaYBaodI2r5npwYajAE//qNsAbIh21O3pBX3qY47NhWorOhnz33aoB
TbBV3ZLgeOQ92G5evg7bFLrdSsb9t7p7ANNi83uPMFNJwEMbm1jJOX3K5jzkOsRk
/HSkgjGa6JJ3qWu5QiPweEEsE4GaWBxf4LDTWbsP/V1JzZ3CRwPJpo4z7LlsJ2G+
dV/kQowsXSktMi8ljqDzKgoYS+XznsizSLxfULsQAl7nF6pJCTa+owaNgA9Lidck
mX17GtFdtPlNitLa0QlyU41tqSIdNdsMJCcLC9CP8JnRC5BArewAcGjmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGygjHOqRdDsVYMiteZOlr5/oyBMB8GA1UdIwQY
MBaAFOrgwsDe5vntZeBR6qkJfQLPW/XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQt
ZDk4ZjVkMDc2Mjk4LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kM2RlNDMtYWEzYy00NjkyLWE5MjQtZDk4ZjVkMDc2Mjk4
LzEvNnVEQ3dON20tZTFsNEZIcXFRbDlBczliOWZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE+/rcfd
wRDN7n1hNXJnMu3mLvzLBh/iiYCtgWmJCarBqnx4A1A8e+RUNS/ZvQ5LSZI2qZpx
7Y5zvKlb5OFn3gWGoEtXh3/ADRcVKNsQbfuIDCNFTCxO+MNCp6MBq6H3jZMNzB8d
dKPAsQu1S0pcBuTnKU8rtd5dlihj2LcgNt+tE55T+VHDpgQ3TFwaekd9VrNmfMyO
HxExxRxjAXwbtyHWGEC93L/frTTPPUfYGcx7kmw9/Zp/4RSBOVoSsjMq8rTuUsye
wXMETE6oqK8PRu3GhkjxhrH8eP+KSZooKwls8I20WKWq9MvBA6cfUQjOebz7Q+eH
ysmkKnSKuTtTLQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:19 2026 by rpki-client