Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          ai689edWHxumfm//vtEn5wSlK8ej2fFvMEQE0pH57ZI=
Subject key identifier:   C7:F9:1F:B9:43:02:D8:CA:74:A2:48:F8:FC:22:61:C4:5C:8C:7E:4A
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       01A000C9FBBDF679DC1C0059264C3D9C11C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          10D0
Signing time:             Fri 14 Aug 2026 15:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:32 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: 5oHcV6iyFIUYUaA/UsY05Q0Pbwd2lgdWovXvZBvF8U8=)
                          2: lxbmdgdpSXyFLU_Bz5l3W9vbo0g.roa (hash: FYe8sb7oFA6G6t6hA5fXWbvc5KT9z/K8Gq8gyMAWWkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:c9:fb:bd:f6:79:dc:1c:00:59:26:4c:3d:9c:11:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Aug 14 15:00:32 2026 GMT
            Not After : Aug 15 15:00:32 2026 GMT
        Subject: CN=c7f91fb94302d8ca74a248f8fc2261c45c8c7e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:74:06:96:65:85:c7:c1:0a:26:29:cf:34:
                    62:eb:81:c6:74:7b:46:7b:87:06:d3:28:3a:5b:32:
                    0b:06:18:c7:dc:bc:99:43:87:fe:f4:5c:98:28:ae:
                    88:7b:af:8a:64:db:33:4b:0b:27:c4:fa:56:e7:f9:
                    62:06:ac:50:8c:87:90:f5:83:9f:5b:ca:4e:d0:d4:
                    d6:c7:65:94:d1:05:55:c1:20:25:96:15:88:1d:13:
                    e5:c1:bf:6d:b3:81:cf:d7:9e:f3:70:ac:1f:b9:76:
                    c1:c0:cc:3f:d7:cc:62:d0:6c:37:36:de:a1:9e:09:
                    9e:db:f9:68:e4:ef:2a:46:a0:96:8f:5e:c2:22:c6:
                    9c:1d:2c:c4:39:d8:45:37:d8:ae:68:70:1b:11:d0:
                    01:0f:62:d0:51:17:ed:f5:5c:3f:d3:b9:53:6d:5b:
                    9e:33:1a:df:a1:af:a1:d8:62:04:34:db:87:92:41:
                    2c:b5:66:01:f7:98:61:22:02:ed:c2:24:21:d6:9a:
                    02:1e:b1:3c:19:3b:d0:51:3d:22:55:d4:60:b3:67:
                    7a:39:d6:49:df:09:15:fa:ff:b2:d0:ae:a4:02:e0:
                    92:71:a5:29:21:a4:84:46:8c:c3:1b:7c:73:a1:24:
                    2e:e8:94:05:f5:38:b3:89:72:62:fd:03:66:d7:25:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F9:1F:B9:43:02:D8:CA:74:A2:48:F8:FC:22:61:C4:5C:8C:7E:4A
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:71:f5:60:22:e4:e5:ba:5a:cb:c7:c2:47:ba:f9:9c:82:
         78:5e:d4:96:79:da:a9:db:6f:b2:32:81:38:5d:c4:7e:fc:f5:
         51:aa:85:40:ec:15:c1:37:2c:5c:f3:2f:52:59:82:4e:bf:e4:
         ae:20:6f:82:96:86:60:82:e0:af:99:36:00:ba:aa:fe:63:eb:
         8a:7b:81:cb:2d:8b:a6:7f:3a:82:b1:09:ea:af:56:d7:51:f1:
         25:c0:83:8b:db:58:53:93:6d:99:fb:17:de:fb:74:3d:c4:c5:
         d3:d2:25:4e:63:6c:64:b3:30:36:b6:38:18:33:de:c4:14:3d:
         28:c9:29:2d:d8:c7:ee:1c:60:2c:1d:16:12:f2:f9:72:7b:32:
         5b:d5:55:fa:10:48:35:f3:6d:f5:24:3f:03:67:e6:92:a7:b2:
         4f:f8:75:ad:14:0d:ca:e1:fe:74:31:a5:05:e0:94:7d:77:87:
         00:c7:79:4b:0c:e0:ef:4b:6a:de:50:92:e8:c8:d9:93:9c:21:
         2a:e5:92:c7:c7:53:33:5b:14:41:d0:98:0a:d5:d3:b3:72:03:
         0a:28:32:f9:da:7e:6c:3c:de:d0:06:8d:3c:b0:2a:39:c8:22:
         47:5f:98:d0:ef:16:f9:9d:00:d3:44:61:53:3b:3c:5b:6a:5f:
         0c:42:ea:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyfu99nncHABZJkw9nBHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjcxNDQzOTA1Zjk0MGIxMzhkOWQ0YjRhMzQ4N2NiZmJk
MDIxZTMwHhcNMjYwODE0MTUwMDMyWhcNMjYwODE1MTUwMDMyWjAzMTEwLwYDVQQD
EyhjN2Y5MWZiOTQzMDJkOGNhNzRhMjQ4ZjhmYzIyNjFjNDVjOGM3ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvF0BpZlhcfBCiYpzzRi64HGdHtG
e4cG0yg6WzILBhjH3LyZQ4f+9FyYKK6Ie6+KZNszSwsnxPpW5/liBqxQjIeQ9YOf
W8pO0NTWx2WU0QVVwSAllhWIHRPlwb9ts4HP157zcKwfuXbBwMw/18xi0Gw3Nt6h
ngme2/lo5O8qRqCWj17CIsacHSzEOdhFN9iuaHAbEdABD2LQURft9Vw/07lTbVue
Mxrfoa+h2GIENNuHkkEstWYB95hhIgLtwiQh1poCHrE8GTvQUT0iVdRgs2d6OdZJ
3wkV+v+y0K6kAuCScaUpIaSERozDG3xzoSQu6JQF9TiziXJi/QNm1yUsqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf5H7lDAtjKdKJI+PwiYcRcjH5KMB8GA1UdIwQY
MBaAFOgnFEOQX5QLE42dS0o0h8v70CHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUt
NTdjN2U2MTk5YjEyLzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUtNTdjN2U2MTk5YjEy
LzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNxx9WAi
5OW6WsvHwke6+ZyCeF7UlnnaqdtvsjKBOF3Efvz1UaqFQOwVwTcsXPMvUlmCTr/k
riBvgpaGYILgr5k2ALqq/mPrinuByy2Lpn86grEJ6q9W11HxJcCDi9tYU5NtmfsX
3vt0PcTF09IlTmNsZLMwNrY4GDPexBQ9KMkpLdjH7hxgLB0WEvL5cnsyW9VV+hBI
NfNt9SQ/A2fmkqeyT/h1rRQNyuH+dDGlBeCUfXeHAMd5Swzg70tq3lCS6MjZk5wh
KuWSx8dTM1sUQdCYCtXTs3IDCigy+dp+bDze0AaNPLAqOcgiR1+Y0O8W+Z0A00Rh
Uzs8W2pfDELq5Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:11 2026 by rpki-client