Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
File:                     6UWUa-c3BQO-r75A4REVudyVO8M.mft (raw, json)
Hash identifier:          Jw5YKaB93NkFr/H5UO9XcRbXQ5RRIYAug1o0KXDvBSE=
Subject key identifier:   AC:C9:FA:4A:EF:5F:A7:53:84:4B:6E:1C:54:0A:90:4F:27:6A:B8:B9
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Certificate issuer:       /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial:       01A152BF88954C3D6BFBA6970DDB4FCDF814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
Manifest number:          12BE
Signing time:             Mon 19 Oct 2026 06:00:46 +0000
Manifest this update:     Mon 19 Oct 2026 06:00:46 +0000
Manifest next update:     Tue 20 Oct 2026 06:00:46 +0000
Files and hashes:         1: 6UWUa-c3BQO-r75A4REVudyVO8M.crl (hash: 4Lityt5UtjpvdS9y13gSPcf+XR2cEStXXvjCVwGXKac=)
                          2: DAPMuxk_tOuoRjCSRzXJujqyl8k.roa (hash: lWuY23Ph8QIbtaF8HQP8ymDgzu9J9XtgohwKflMSPm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:52:bf:88:95:4c:3d:6b:fb:a6:97:0d:db:4f:cd:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
        Validity
            Not Before: Oct 19 06:00:46 2026 GMT
            Not After : Oct 20 06:00:46 2026 GMT
        Subject: CN=acc9fa4aef5fa753844b6e1c540a904f276ab8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:98:97:ff:99:48:b4:9e:8b:87:55:71:28:a5:
                    c2:22:42:31:eb:10:7d:cc:15:44:88:00:32:67:5a:
                    68:b1:85:1c:40:bc:0f:06:be:10:8d:10:65:6b:28:
                    88:f9:e6:8e:b4:bc:2e:93:cb:7c:38:fd:d2:63:6c:
                    d5:1f:c7:ee:b5:80:9b:da:b6:5d:3c:a9:77:13:40:
                    80:44:42:54:c0:13:2f:b6:d6:e6:5a:ec:ad:ff:eb:
                    de:96:d1:fe:94:18:6c:a8:10:6b:27:6a:86:45:aa:
                    02:b3:27:89:46:ce:27:52:b8:40:06:94:cb:5d:67:
                    ef:e6:da:33:a9:52:bf:2b:88:cb:2d:93:0e:ef:9c:
                    5c:9b:a8:ff:ae:e2:99:df:25:c8:00:98:8b:30:3b:
                    49:8f:96:0a:90:2f:f2:2c:40:99:0e:62:8c:84:7b:
                    06:e0:ef:b0:b3:f8:af:6b:78:4d:4c:11:b4:b5:5e:
                    27:9b:92:a4:5b:06:66:e9:4b:19:5d:75:4d:c6:4d:
                    65:53:df:53:84:5a:a1:35:25:50:8b:12:b0:10:72:
                    14:e4:f0:ff:48:1a:d0:45:7a:03:9a:9a:d1:9b:cf:
                    6a:a5:f4:a5:d5:07:a1:9e:c5:7b:7e:df:26:12:86:
                    9b:be:bf:23:3b:3c:e6:66:cb:d6:40:28:61:a7:78:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C9:FA:4A:EF:5F:A7:53:84:4B:6E:1C:54:0A:90:4F:27:6A:B8:B9
            X509v3 Authority Key Identifier:
                keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7f:45:a3:30:4a:d8:2b:cd:c1:de:56:38:88:8a:df:99:d6:
         54:5c:5b:ce:13:0a:aa:d8:0a:46:66:e1:61:23:aa:f4:1c:f5:
         a2:e3:f0:01:68:6b:94:a0:7a:b2:3e:cf:7d:de:85:61:6d:71:
         6a:76:1b:0b:8e:0f:8a:fe:7c:b0:20:10:47:3b:a6:7f:3c:c5:
         f2:a9:05:5f:0a:00:64:79:f6:50:65:20:da:5d:c9:a0:63:f4:
         fb:aa:f1:46:47:ff:ca:16:0e:82:32:b0:a7:89:a6:80:38:d8:
         52:f8:f7:4c:90:ed:f5:b3:7f:5e:99:78:85:93:49:b3:29:c7:
         d4:b0:9d:4d:db:b5:ad:86:95:42:6e:34:4e:99:9d:da:bb:9b:
         0b:cb:0e:ba:8b:a4:78:f1:01:26:b8:03:b5:66:85:4a:25:d4:
         86:74:b6:d2:52:0e:26:17:4c:3d:8c:d4:4b:52:15:74:22:83:
         fa:2f:cd:9a:ef:68:00:2a:a9:cd:81:bb:98:96:a5:b9:9f:32:
         ed:59:36:f6:46:6c:a9:b8:d3:13:24:f0:23:e4:9b:00:6a:db:
         07:4b:ca:89:60:e1:d5:e5:f4:86:2e:cb:d2:b3:26:3f:90:a0:
         3d:bb:8b:d0:05:00:5b:40:dc:4b:0b:55:8e:5a:56:82:a0:99:
         a2:b5:af:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSv4iVTD1r+6aXDdtPzfgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NDU5NDZiZTczNzA1MDNiZWFmYmU0MGUxMTExNWI5ZGM5
NTNiYzMwHhcNMjYxMDE5MDYwMDQ2WhcNMjYxMDIwMDYwMDQ2WjAzMTEwLwYDVQQD
EyhhY2M5ZmE0YWVmNWZhNzUzODQ0YjZlMWM1NDBhOTA0ZjI3NmFiOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZiX/5lItJ6Lh1VxKKXCIkIx6xB9
zBVEiAAyZ1posYUcQLwPBr4QjRBlayiI+eaOtLwuk8t8OP3SY2zVH8futYCb2rZd
PKl3E0CAREJUwBMvttbmWuyt/+veltH+lBhsqBBrJ2qGRaoCsyeJRs4nUrhABpTL
XWfv5tozqVK/K4jLLZMO75xcm6j/ruKZ3yXIAJiLMDtJj5YKkC/yLECZDmKMhHsG
4O+ws/iva3hNTBG0tV4nm5KkWwZm6UsZXXVNxk1lU99ThFqhNSVQixKwEHIU5PD/
SBrQRXoDmprRm89qpfSl1QehnsV7ft8mEoabvr8jOzzmZsvWQChhp3huuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzJ+krvX6dThEtuHFQKkE8nari5MB8GA1UdIwQY
MBaAFOlFlGvnNwUDvq++QOERFbnclTvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQt
NjZkM2Q4YmE1MzlmLzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81ZmYxOTktZGFmMC00YTdlLThlNWQtNjZkM2Q4YmE1Mzlm
LzEvNlVXVWEtYzNCUU8tcjc1QTRSRVZ1ZHlWTzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtH9FozBK
2CvNwd5WOIiK35nWVFxbzhMKqtgKRmbhYSOq9Bz1ouPwAWhrlKB6sj7Pfd6FYW1x
anYbC44Piv58sCAQRzumfzzF8qkFXwoAZHn2UGUg2l3JoGP0+6rxRkf/yhYOgjKw
p4mmgDjYUvj3TJDt9bN/Xpl4hZNJsynH1LCdTdu1rYaVQm40Tpmd2rubC8sOuouk
ePEBJrgDtWaFSiXUhnS20lIOJhdMPYzUS1IVdCKD+i/Nmu9oACqpzYG7mJaluZ8y
7Vk29kZsqbjTEyTwI+SbAGrbB0vKiWDh1eX0hi7L0rMmP5CgPbuL0AUAW0DcSwtV
jlpWgqCZorWv/g==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:57:24 2026 by rpki-client