Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File:                     llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier:          KHaLfZQiaNMK1JXEsBiPTmRjMHAAEDQelMCRyI9EQ8Y=
Subject key identifier:   6E:0E:D7:9D:B7:93:7B:08:17:58:6E:69:2B:22:AB:FA:6B:66:5A:6C
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer:       /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial:       01A17B16A8C02AC2CA93CA20B3CA9E9CA00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number:          1AC6
Signing time:             Tue 27 Oct 2026 02:00:44 +0000
Manifest this update:     Tue 27 Oct 2026 02:00:44 +0000
Manifest next update:     Wed 28 Oct 2026 02:00:44 +0000
Files and hashes:         1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: Ao/EcOJxIw5a1hQTIKhxOJEI369DNJ3FsJJMVAcuCD0=)
                          2: xlcC7OzJncwz3-3fDqQVCRiRUuA.roa (hash: +tBbtDRSVVjOD+h/7bnuccyOYojgyYfukEn9rcwiF1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:16:a8:c0:2a:c2:ca:93:ca:20:b3:ca:9e:9c:a0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
        Validity
            Not Before: Oct 27 02:00:44 2026 GMT
            Not After : Oct 28 02:00:44 2026 GMT
        Subject: CN=6e0ed79db7937b0817586e692b22abfa6b665a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:62:73:f4:f5:67:bb:07:f6:fc:2e:f2:e9:
                    7e:b9:c4:25:9d:75:ef:c4:c0:c0:d1:e3:23:69:7e:
                    6a:23:19:18:0a:51:42:4d:13:fc:38:b0:45:36:de:
                    61:d1:23:1b:93:cc:fc:be:19:da:f9:83:25:60:42:
                    9f:5a:78:3c:88:d1:ad:d0:8c:b0:36:63:4b:23:8b:
                    7d:49:99:cb:cc:d8:e1:6e:0a:3a:2b:52:33:84:3c:
                    07:84:29:7c:76:a3:42:3d:0a:22:41:85:18:ca:75:
                    0b:a5:da:ca:d4:5c:32:9b:a6:25:e4:0a:32:0b:35:
                    5a:0b:fa:95:10:6b:79:9a:75:25:54:2c:37:b0:89:
                    64:dc:ce:ee:e0:72:ac:75:5f:4f:30:16:81:07:0f:
                    66:12:9e:09:4c:9e:e5:87:21:47:db:93:6d:9d:c0:
                    e6:27:07:c7:dd:a2:66:e1:67:5f:75:86:f7:ce:34:
                    c4:16:1e:9b:5e:33:31:a1:fa:be:a0:ca:da:38:97:
                    3b:f7:b7:8e:33:c9:a9:d9:7c:74:fb:00:6d:51:13:
                    26:6b:db:9c:fd:8e:88:55:15:a2:dc:08:b3:50:99:
                    4d:63:28:24:ed:08:5d:88:9c:00:2b:e9:82:f4:d5:
                    78:2d:45:d6:7c:3d:0e:cd:bb:64:35:c5:7b:f0:d8:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:D7:9D:B7:93:7B:08:17:58:6E:69:2B:22:AB:FA:6B:66:5A:6C
            X509v3 Authority Key Identifier:
                keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:13:e2:d6:2f:3e:75:91:2f:c7:bc:0d:de:07:57:14:53:93:
         13:16:c0:48:58:b2:23:38:73:21:46:5f:e8:be:8e:e0:94:50:
         40:83:ba:4c:b2:a8:cc:68:0f:81:b7:6c:26:40:68:cd:8b:05:
         6e:89:b1:4f:11:dc:90:29:1f:60:8f:cc:4a:8f:0b:b7:44:9e:
         04:e2:2f:05:01:f0:58:15:f9:0c:62:7e:c7:ee:49:94:82:a9:
         6a:71:46:5f:22:57:b2:25:0e:2a:a1:f1:11:6f:0a:48:ef:ea:
         23:9a:f4:2a:e5:11:23:e7:c5:5b:8c:18:18:b3:77:99:c7:8c:
         56:37:a6:cd:d0:92:90:dc:9d:1b:70:47:72:9c:49:46:3e:25:
         20:82:29:3d:0b:72:0d:c7:af:72:98:ec:c6:da:30:81:9f:36:
         96:29:f0:71:ff:f9:44:93:e5:4b:a5:aa:9d:da:bd:84:3a:b3:
         65:94:21:1e:cc:25:6b:92:f2:f9:6e:56:5b:6b:67:56:af:c1:
         e7:05:e6:94:9f:7d:e9:11:70:19:5e:f3:3d:57:f5:3d:a0:c3:
         4b:fe:16:f4:1b:8f:0b:89:83:89:0a:ed:5c:16:e2:10:f9:4e:
         c2:86:4b:8d:83:ad:1d:00:ae:99:88:36:05:66:0e:98:c7:0e:
         de:f0:2a:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7FqjAKsLKk8ogs8qenKANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ1YmFkMzk2MjVhZWE2NzkwM2Y4MTgzZjlmYmJhZWFj
NmM4OGQwHhcNMjYxMDI3MDIwMDQ0WhcNMjYxMDI4MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg2ZTBlZDc5ZGI3OTM3YjA4MTc1ODZlNjkyYjIyYWJmYTZiNjY1YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ahic/T1Z7sH9vwu8ul+ucQlnXXv
xMDA0eMjaX5qIxkYClFCTRP8OLBFNt5h0SMbk8z8vhna+YMlYEKfWng8iNGt0Iyw
NmNLI4t9SZnLzNjhbgo6K1IzhDwHhCl8dqNCPQoiQYUYynULpdrK1Fwym6Yl5Aoy
CzVaC/qVEGt5mnUlVCw3sIlk3M7u4HKsdV9PMBaBBw9mEp4JTJ7lhyFH25NtncDm
JwfH3aJm4WdfdYb3zjTEFh6bXjMxofq+oMraOJc797eOM8mp2Xx0+wBtURMma9uc
/Y6IVRWi3AizUJlNYygk7QhdiJwAK+mC9NV4LUXWfD0OzbtkNcV78NgxrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4O1523k3sIF1huaSsiq/prZlpsMB8GA1UdIwQY
MBaAFJZUW605YlrqZ5A/gYP5+7rqxsiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmIt
OGQ0NGRlNTRjZmE3LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmItOGQ0NGRlNTRjZmE3
LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxPi1i8+
dZEvx7wN3gdXFFOTExbASFiyIzhzIUZf6L6O4JRQQIO6TLKozGgPgbdsJkBozYsF
bomxTxHckCkfYI/MSo8Lt0SeBOIvBQHwWBX5DGJ+x+5JlIKpanFGXyJXsiUOKqHx
EW8KSO/qI5r0KuURI+fFW4wYGLN3mceMVjemzdCSkNydG3BHcpxJRj4lIIIpPQty
DcevcpjsxtowgZ82linwcf/5RJPlS6Wqndq9hDqzZZQhHswla5Ly+W5WW2tnVq/B
5wXmlJ996RFwGV7zPVf1PaDDS/4W9BuPC4mDiQrtXBbiEPlOwoZLjYOtHQCumYg2
BWYOmMcO3vAqgg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:01:00 2026 by rpki-client