Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File:                     6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier:          kUCTKUbdnvwNWs6sqa8P5onFQtQCzGZWK0U+gC3qlCw=
Subject key identifier:   34:DE:AA:2D:F0:3C:24:00:83:00:98:F9:A1:AA:58:15:8A:58:33:10
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer:       /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial:       01A11907524F0D58FED11F57927AA98B6472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number:          0FE0
Signing time:             Thu 08 Oct 2026 01:01:12 +0000
Manifest this update:     Thu 08 Oct 2026 01:01:12 +0000
Manifest next update:     Fri 09 Oct 2026 01:01:12 +0000
Files and hashes:         1: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: eAa5KW7YYXUMHR8vz4jURr0JJDd7uefpRXsiFN7fEGs=)
                          2: 9iFENB2hmlqD3TDEXX5p9kqgKVA.roa (hash: O5aqIeOA3+G+W077TPrLU4j9DOFmgjmlG+7o4CEkzww=)
                          3: J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa (hash: lUuNT1eBBa+JpXs3fEVcImBW6pOF6M9gLS5SJiJaWOc=)
                          4: T5t2lrc6vZSWtfpj81F8OW76GS0.roa (hash: yORkG5zj/0zcAQ3RthIBP3CwZBqbHhAwf4IAuGcnaRQ=)
                          5: _ciy-lTi4OPOE4H7jBh6iVeSzM0.roa (hash: UoO0miY2aliagEe8/7pX67pSC1+YIe4R/lR+1wd4LX4=)
                          6: t5_VYPZ1lf_CKZMBh1bjbEMFTgM.roa (hash: /soIDtSH0BbDEeEeE6xQsPK1zrhevJxy2QjQT/OIR/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:07:52:4f:0d:58:fe:d1:1f:57:92:7a:a9:8b:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
        Validity
            Not Before: Oct  8 01:01:12 2026 GMT
            Not After : Oct  9 01:01:12 2026 GMT
        Subject: CN=34deaa2df03c2400830098f9a1aa58158a583310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:e9:b4:73:5a:5a:da:e1:33:8d:64:3f:e7:
                    d5:7b:13:d3:bc:42:53:6e:a1:96:af:06:bf:8f:14:
                    ed:56:ba:c2:cf:38:4a:c0:66:de:7e:18:91:2c:f1:
                    fc:cd:b9:c7:a0:a2:02:bb:d0:48:e3:81:2d:48:80:
                    02:82:8d:57:38:5e:0f:38:0b:c6:fa:99:2e:22:46:
                    a6:92:9c:08:ef:ec:b2:94:2a:ec:ec:06:94:0d:e9:
                    14:34:a9:30:4b:2e:62:91:e3:71:e9:51:f2:13:0c:
                    4a:c8:06:1f:0e:35:3c:95:0e:03:8c:b8:e7:48:ff:
                    6a:a4:69:6c:2a:65:5e:cf:e4:f8:38:96:f4:3c:63:
                    87:e4:45:27:50:f4:50:3d:41:24:38:e2:cf:bb:cc:
                    91:10:a9:47:27:05:82:58:3a:ef:7b:77:aa:44:8d:
                    06:2d:76:10:01:a2:63:b2:d9:31:ac:07:1a:b0:d2:
                    d9:bf:5d:14:80:d4:c4:5e:8e:d8:4a:3b:b3:a5:9b:
                    4f:80:bd:e8:09:ce:5c:97:83:86:21:3e:0c:1c:d7:
                    37:96:cc:47:6b:fb:d2:63:14:8d:83:5f:d5:d7:81:
                    0d:8c:a0:2a:1c:4f:fb:fc:a7:65:6f:1d:a6:eb:c7:
                    56:7b:be:85:a6:c7:67:f8:1c:76:bb:cf:97:65:af:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DE:AA:2D:F0:3C:24:00:83:00:98:F9:A1:AA:58:15:8A:58:33:10
            X509v3 Authority Key Identifier:
                keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:2d:57:39:94:a4:5a:2a:08:26:bf:d7:43:b0:c1:80:98:
         d8:72:56:ab:6c:09:76:65:89:1e:c7:09:1d:78:4b:13:85:5a:
         cc:57:09:42:9d:79:fb:55:4e:35:c7:41:35:ab:7a:d8:f7:78:
         d0:90:5c:e4:3c:26:63:ea:7f:47:27:be:0d:b4:65:e4:05:09:
         12:65:3f:f9:23:ce:f4:5d:1f:7e:53:b5:af:be:f4:7b:1a:25:
         a5:0f:12:79:0c:4b:92:4f:ed:6e:f5:bd:d4:79:90:d6:fd:0b:
         ff:e8:20:bc:97:8d:23:75:aa:59:24:b5:ba:1a:d1:cf:1a:09:
         d3:59:6e:9e:5c:88:d8:b2:32:bd:b5:db:6e:32:33:9e:15:29:
         fc:4d:79:89:5e:6f:03:0f:79:26:33:77:aa:8c:a1:47:72:4a:
         4b:5b:dd:16:3e:55:0c:b6:2c:40:5b:97:14:71:27:e2:0e:8a:
         60:c1:38:ea:79:62:6e:4a:2f:70:97:3b:52:68:05:10:24:a8:
         06:0a:5b:94:99:49:41:b0:50:40:fb:78:fe:c5:db:55:82:08:
         83:42:d4:53:f7:41:3a:e4:c6:42:91:0f:2f:7c:37:97:f3:fe:
         9e:85:07:5d:82:53:19:d5:c3:c3:49:35:38:89:24:f6:af:35:
         d3:dc:3c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZB1JPDVj+0R9Xknqpi2RyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5
MmFjOTIwHhcNMjYxMDA4MDEwMTEyWhcNMjYxMDA5MDEwMTEyWjAzMTEwLwYDVQQD
EygzNGRlYWEyZGYwM2MyNDAwODMwMDk4ZjlhMWFhNTgxNThhNTgzMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R7ptHNaWtrhM41kP+fVexPTvEJT
bqGWrwa/jxTtVrrCzzhKwGbefhiRLPH8zbnHoKICu9BI44EtSIACgo1XOF4POAvG
+pkuIkamkpwI7+yylCrs7AaUDekUNKkwSy5ikeNx6VHyEwxKyAYfDjU8lQ4DjLjn
SP9qpGlsKmVez+T4OJb0PGOH5EUnUPRQPUEkOOLPu8yREKlHJwWCWDrve3eqRI0G
LXYQAaJjstkxrAcasNLZv10UgNTEXo7YSjuzpZtPgL3oCc5cl4OGIT4MHNc3lsxH
a/vSYxSNg1/V14ENjKAqHE/7/Kdlbx2m68dWe76Fpsdn+Bx2u8+XZa9HtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTeqi3wPCQAgwCY+aGqWBWKWDMQMB8GA1UdIwQY
MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt
NTdlOTBjNTZhMGUyLzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy
LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNstVzmU
pFoqCCa/10OwwYCY2HJWq2wJdmWJHscJHXhLE4VazFcJQp15+1VONcdBNat62Pd4
0JBc5DwmY+p/Rye+DbRl5AUJEmU/+SPO9F0fflO1r770exolpQ8SeQxLkk/tbvW9
1HmQ1v0L/+ggvJeNI3WqWSS1uhrRzxoJ01lunlyI2LIyvbXbbjIznhUp/E15iV5v
Aw95JjN3qoyhR3JKS1vdFj5VDLYsQFuXFHEn4g6KYME46nlibkovcJc7UmgFECSo
BgpblJlJQbBQQPt4/sXbVYIIg0LUU/dBOuTGQpEPL3w3l/P+noUHXYJTGdXDw0k1
OIkk9q8109w8AQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:53 2026 by rpki-client