Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
File:                     06Y_MHuNLeLDcIHWRsKe8O18gqA.mft (raw, json)
Hash identifier:          NI44HoIn+WxLDTJl1pNEpAIXoWMLvmi+phq3/EY7mBg=
Subject key identifier:   4E:E4:BE:84:A2:69:75:29:F4:C2:88:CD:D9:DF:38:9B:48:50:2E:E6
Authority key identifier: D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0
Certificate issuer:       /CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
Certificate serial:       01A181BE514771ED4FF2C89A4489AC66D59E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
Manifest number:          02CD
Signing time:             Wed 28 Oct 2026 09:01:35 +0000
Manifest this update:     Wed 28 Oct 2026 09:01:35 +0000
Manifest next update:     Thu 29 Oct 2026 09:01:35 +0000
Files and hashes:         1: 06Y_MHuNLeLDcIHWRsKe8O18gqA.crl (hash: ZVeuyCF1DOfYABPKGFIC0ZTAHgE9JTLJ/vHfGJHBe20=)
                          2: x5jrafv0ZcDxAzfT9idlKmNN6D8.roa (hash: zGBFo14MLcoWQ43vZr1mFjbUCAmuYj4Smmkyd8ODhrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:be:51:47:71:ed:4f:f2:c8:9a:44:89:ac:66:d5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a63f307b8d2de2c37081d646c29ef0ed7c82a0
        Validity
            Not Before: Oct 28 09:01:35 2026 GMT
            Not After : Oct 29 09:01:35 2026 GMT
        Subject: CN=4ee4be84a2697529f4c288cdd9df389b48502ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:e2:9c:5f:0f:fa:e8:c1:60:41:8f:9a:67:
                    53:1f:73:a6:26:ec:22:26:c1:65:03:17:60:7b:06:
                    85:b0:3b:e2:95:89:22:07:22:1d:29:54:f2:9d:64:
                    e9:58:b5:f7:74:9f:59:6c:9c:5a:bb:f3:f4:5c:f3:
                    a4:81:21:76:6f:97:ee:6d:53:11:6d:e6:71:4f:cb:
                    ea:8f:a1:06:60:d1:45:f9:b7:89:b0:39:b7:f5:61:
                    cb:71:63:2a:a7:4a:39:01:f5:be:90:bc:a0:7f:1a:
                    13:63:97:3f:e7:ba:5e:1f:1e:d1:b3:33:7d:19:e7:
                    7d:ef:eb:e8:b0:a1:45:2d:f0:a3:e4:6a:ba:b4:58:
                    d9:89:39:54:f5:7e:50:b0:af:28:49:c9:92:32:11:
                    7f:42:3c:ef:96:89:2e:01:26:69:7c:4c:bd:d6:ae:
                    21:63:02:69:bb:db:44:5f:88:58:ed:0e:b4:d0:35:
                    c3:e9:58:38:2a:76:b8:8b:84:13:22:47:8f:51:32:
                    10:8a:66:71:a4:38:8f:94:e8:ec:f8:a7:88:b4:d2:
                    5f:66:7d:80:39:d3:62:c6:8f:95:41:60:27:e4:2f:
                    49:2c:ac:bd:a5:a6:5f:a2:f0:86:f9:83:1e:55:7d:
                    00:5c:01:c2:33:c5:f4:af:07:63:c9:a3:25:ea:97:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:BE:84:A2:69:75:29:F4:C2:88:CD:D9:DF:38:9B:48:50:2E:E6
            X509v3 Authority Key Identifier:
                keyid:D3:A6:3F:30:7B:8D:2D:E2:C3:70:81:D6:46:C2:9E:F0:ED:7C:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06Y_MHuNLeLDcIHWRsKe8O18gqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9a00fc-a972-4c03-83ed-51d52b93b5ec/1/06Y_MHuNLeLDcIHWRsKe8O18gqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:cd:b1:c2:45:c3:91:5f:21:17:89:f8:07:be:ed:61:51:
         13:48:2f:69:27:31:d1:d8:a1:6f:7d:03:fc:a5:5a:66:b0:af:
         02:3a:b2:7d:8d:eb:48:57:b2:09:41:b1:da:31:7f:45:f5:6e:
         23:01:6a:13:04:63:ec:0d:37:6f:0a:49:69:86:ac:2e:70:8e:
         cb:65:5b:2c:fb:30:03:1d:40:50:c1:03:88:a6:f8:3e:fb:b7:
         95:55:2b:56:17:27:95:cf:ff:18:a3:ad:4e:18:b6:6d:70:76:
         65:8b:e5:b2:c0:2f:c3:69:e8:bd:db:c0:39:75:a6:2b:fe:de:
         03:64:fd:c6:b6:64:fb:6a:cb:ff:68:ac:f7:3c:8c:fa:40:8c:
         58:2f:95:c1:be:8f:cc:b3:25:90:ff:dc:0f:16:f1:9c:e0:4d:
         ff:8f:f6:99:16:49:c3:04:14:2a:35:64:a2:93:89:f2:dd:12:
         e5:5d:c4:95:95:43:cf:84:21:c6:5a:b8:f2:ca:fb:4c:df:95:
         51:9c:62:cb:e6:e6:e2:69:7d:be:c1:da:d6:55:e8:08:fa:4c:
         3f:62:d4:28:4b:50:0a:ed:92:d7:68:e5:c3:8b:58:96:59:ab:
         12:a9:47:aa:5f:50:0b:af:a2:bb:75:86:67:c2:89:9d:91:03:
         ba:cb:68:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBvlFHce1P8siaRImsZtWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYTYzZjMwN2I4ZDJkZTJjMzcwODFkNjQ2YzI5ZWYwZWQ3
YzgyYTAwHhcNMjYxMDI4MDkwMTM1WhcNMjYxMDI5MDkwMTM1WjAzMTEwLwYDVQQD
Eyg0ZWU0YmU4NGEyNjk3NTI5ZjRjMjg4Y2RkOWRmMzg5YjQ4NTAyZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNjinF8P+ujBYEGPmmdTH3OmJuwi
JsFlAxdgewaFsDvilYkiByIdKVTynWTpWLX3dJ9ZbJxau/P0XPOkgSF2b5fubVMR
beZxT8vqj6EGYNFF+beJsDm39WHLcWMqp0o5AfW+kLygfxoTY5c/57peHx7RszN9
Ged97+vosKFFLfCj5Gq6tFjZiTlU9X5QsK8oScmSMhF/QjzvlokuASZpfEy91q4h
YwJpu9tEX4hY7Q600DXD6Vg4Kna4i4QTIkePUTIQimZxpDiPlOjs+KeItNJfZn2A
OdNixo+VQWAn5C9JLKy9paZfovCG+YMeVX0AXAHCM8X0rwdjyaMl6pfVcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7kvoSiaXUp9MKIzdnfOJtIUC7mMB8GA1UdIwQY
MBaAFNOmPzB7jS3iw3CB1kbCnvDtfIKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZZX01IdU5MZUxEY0lIV1JzS2U4TzE4Z3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85YTAwZmMtYTk3Mi00YzAzLTgzZWQt
NTFkNTJiOTNiNWVjLzEvMDZZX01IdU5MZUxEY0lIV1JzS2U4TzE4Z3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85YTAwZmMtYTk3Mi00YzAzLTgzZWQtNTFkNTJiOTNiNWVj
LzEvMDZZX01IdU5MZUxEY0lIV1JzS2U4TzE4Z3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKrNscJF
w5FfIReJ+Ae+7WFRE0gvaScx0dihb30D/KVaZrCvAjqyfY3rSFeyCUGx2jF/RfVu
IwFqEwRj7A03bwpJaYasLnCOy2VbLPswAx1AUMEDiKb4Pvu3lVUrVhcnlc//GKOt
Thi2bXB2ZYvlssAvw2novdvAOXWmK/7eA2T9xrZk+2rL/2is9zyM+kCMWC+Vwb6P
zLMlkP/cDxbxnOBN/4/2mRZJwwQUKjVkopOJ8t0S5V3ElZVDz4Qhxlq48sr7TN+V
UZxiy+bm4ml9vsHa1lXoCPpMP2LUKEtQCu2S12jlw4tYllmrEqlHql9QC6+iu3WG
Z8KJnZEDustocQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:22:09 2026 by rpki-client