Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          vNAKH7g1f4rFCvkxHrbYXxqzNlrG576L5d9cKZCjmuI=
Subject key identifier:   0D:65:0B:3D:00:B9:3F:EA:C4:C1:10:A4:46:14:6A:4D:D5:94:02:64
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       01A17E863E20194B0DFDEAD1FFAB53D16AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          1AD1
Signing time:             Tue 27 Oct 2026 18:01:29 +0000
Manifest this update:     Tue 27 Oct 2026 18:01:29 +0000
Manifest next update:     Wed 28 Oct 2026 18:01:29 +0000
Files and hashes:         1: 1sZcd1tzDnfBO7H0zC0MHfPctz8.roa (hash: QGxYJT3nkBpWjK3CNe4elV7r+TMzHWhmpzIEj94vs3c=)
                          2: 54sLosdN-3E7M3xXYL9Sj8R-JFA.roa (hash: YOEtT3WDb6q1KIYxMWD9C0mL5TEs7xv26wN9VzwyZz0=)
                          3: 6Gtxp8Qdby2A47LT_KYiakuDrtE.roa (hash: BA8nh9grEBQ7UWUuUef5NazdmOCM03HbfFpXWfVVGx8=)
                          4: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: aLXIHw3Dz29JqpiTJte4hTOrTa59swfD9xFFLPw742Y=)
                          5: 95I5kKDngJoeemazNmLfxx-xsMc.roa (hash: 065L1fud09uTnT5KcltoPCtY3EeXJM9Wrb5i9Pok3ps=)
                          6: Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa (hash: 01fMcqnBkdQNXIGFfqpx1E0l1qguhB0pAhcOj3jJeNI=)
                          7: F02EU11_7xVfFjx-pCbSkWfBrg8.roa (hash: DUZIPK/4jtz1rxvakhmYqy+xcU6jj18QDH1Ql1+dRcs=)
                          8: F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa (hash: n0E0JoegNTDFrRD6xDuHJFvI1HNuGNwn2VnWlNNc7R8=)
                          9: JolCrPCyt6FQAjQdkxeUkG5hr_c.roa (hash: tR07fd6qiP9t7/rCVkFLRiRbNcRHO1l6JwkPDCkWrQw=)
                          10: NPH-fpbfT4l7tqIfzpWpmBL612E.roa (hash: usDB/lMLbqs1qEd8MJSCM8v9kpKJXr8T1CUNQ60yINA=)
                          11: SrRwCgzFOC1drONrVTaISNVrqgA.roa (hash: HK/1AO6XtRFFu0tl8QX3gVgCZfrsH1GVM2AzeVHcMns=)
                          12: dCf1-4ZtnEs1hhS0WpTGObxa7Ng.roa (hash: 6OBl94EqhunP39tyGGpYvE0DCjwIvRqo82T/Ck00I4Y=)
                          13: hKABsk9R3ual0SAgA_RoQAJK-Ss.roa (hash: LPGqLFiU6Q6gycTMXFmkeg9Hl/W1u11tyU44+pVVPT0=)
                          14: k7j6q1-pw3Iaxb9nrG2BMp2wduU.roa (hash: xqHAe/RA0XRCRSuPeTv3PfTrsCgVTADjTCxtxlrYH9c=)
                          15: tLZAPbek2ouyTp4yevQZizAET8s.roa (hash: tADyVnGgx5bMdr4dmJRvuG7KHkNYQR4uWTbCCyaMg+Y=)
                          16: toIwvzDtnMcr8Vr654lueB2nW5c.roa (hash: L7+3Y6vOhJhPEyX8n5fzWSUXTONaoyZXyjV+eIZHIak=)
                          17: uX8Zs5ulhqDalBSN3K4xPZW9tXY.roa (hash: 6HcSVHLDdw2ylb62hc/7yVqnNyshgu1qSWPjdsbZqqY=)
                          18: wGWva6DlhR1xhUCt4j4w0NB931w.roa (hash: GSuxwm3owrdlcnA22w3R59fDYZXJvPJoNhLNbwJTGD8=)
                          19: yd640iyO5e1rxw39pTARVi4BhTo.roa (hash: amnrnRntcrBttX4vOm5cGFFnnGSWzHrsdN8eo5YqUec=)
                          20: zeEPpitSOzyXHndgpLbTNYerulw.roa (hash: oTCVEfUpyQEEQ/RQUBU/rrU5tazeZweEU7eMxBkYLIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:86:3e:20:19:4b:0d:fd:ea:d1:ff:ab:53:d1:6a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Oct 27 18:01:29 2026 GMT
            Not After : Oct 28 18:01:29 2026 GMT
        Subject: CN=0d650b3d00b93feac4c110a446146a4dd5940264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:cd:cf:f0:24:14:0d:4a:dd:ad:c2:5b:56:
                    59:59:f1:b8:c4:39:8a:8a:c7:7d:57:b4:1f:93:c7:
                    72:ee:2c:b8:be:4b:fd:4e:33:ae:d6:11:3d:20:6f:
                    48:d1:28:e5:17:da:da:29:25:c2:09:e9:69:eb:2f:
                    a4:2d:c5:d7:38:24:ab:82:b7:a8:7f:ca:f6:6b:eb:
                    51:a0:d7:68:49:0e:56:29:da:19:dc:23:82:1b:44:
                    d8:2a:75:11:0e:1d:1e:cd:e7:f3:79:24:ff:cd:b0:
                    1d:5c:b9:92:e6:b1:6a:1f:9f:43:fc:ad:7a:72:d5:
                    9b:77:a1:c9:2b:81:39:e1:b4:28:ad:98:14:7f:7c:
                    cf:22:0b:61:61:23:b5:a7:23:1d:21:e3:68:60:0c:
                    35:c8:21:6a:f4:e2:60:e9:18:0d:45:0c:26:93:de:
                    ab:c3:17:48:65:56:e2:aa:38:80:f5:c0:08:42:a1:
                    a5:b7:eb:ef:c2:31:f1:98:af:78:1c:c7:c3:78:a8:
                    59:50:9c:ac:10:b3:bc:ff:36:1d:bb:4d:4b:06:24:
                    62:e3:fb:4c:8a:4b:75:fb:54:78:2e:54:7f:af:06:
                    ab:c3:11:c3:59:02:a0:8c:6d:7e:33:25:f7:60:e3:
                    d0:c7:6a:7b:32:f1:d6:30:4c:4f:d2:4f:44:7a:90:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:0B:3D:00:B9:3F:EA:C4:C1:10:A4:46:14:6A:4D:D5:94:02:64
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:26:d2:5e:ac:e0:a2:59:57:3d:ed:97:35:99:1f:90:a5:
         35:93:d6:45:70:ca:1c:80:f3:dd:71:a5:3d:53:68:1a:b4:19:
         78:50:67:ff:fe:77:0e:a1:c1:97:28:37:6d:a2:53:87:17:7e:
         a7:0e:03:ac:f1:6d:8a:3a:b3:cc:b8:a4:57:76:03:2e:de:94:
         61:4e:63:80:a5:b4:91:8f:80:b3:8b:41:bb:0d:ae:44:5f:91:
         80:6b:5e:e2:3c:35:e1:c4:7f:68:3f:e3:17:c0:ed:34:a5:64:
         47:9d:86:b2:7e:08:9f:bb:c2:e8:30:e9:e9:62:b1:a1:a4:e8:
         67:c7:62:a0:c8:50:90:05:ba:fd:1c:f5:91:65:ed:17:11:62:
         f6:86:34:6e:1e:7c:8f:3d:3a:2b:e6:cd:f7:50:cf:3f:d7:a4:
         a9:66:1f:cb:7d:08:95:c3:4f:dc:3d:6a:ca:70:a8:bd:13:cb:
         4e:85:30:af:8d:1c:7f:89:bb:17:b8:99:49:65:49:cb:12:a1:
         dc:45:a1:e9:0f:96:b9:9d:17:bb:72:d7:9f:7e:4b:5e:05:d9:
         1f:b3:ef:3c:88:d6:d7:bd:60:1c:44:44:12:4c:58:1f:3a:fc:
         d3:42:ba:05:f5:0c:00:4a:7c:e5:b9:20:a6:08:23:0c:27:c3:
         c9:51:20:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hj4gGUsN/erR/6tT0WrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5
N2M2MDYwHhcNMjYxMDI3MTgwMTI5WhcNMjYxMDI4MTgwMTI5WjAzMTEwLwYDVQQD
EygwZDY1MGIzZDAwYjkzZmVhYzRjMTEwYTQ0NjE0NmE0ZGQ1OTQwMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJrNz/AkFA1K3a3CW1ZZWfG4xDmK
isd9V7Qfk8dy7iy4vkv9TjOu1hE9IG9I0SjlF9raKSXCCelp6y+kLcXXOCSrgreo
f8r2a+tRoNdoSQ5WKdoZ3COCG0TYKnURDh0ezefzeST/zbAdXLmS5rFqH59D/K16
ctWbd6HJK4E54bQorZgUf3zPIgthYSO1pyMdIeNoYAw1yCFq9OJg6RgNRQwmk96r
wxdIZVbiqjiA9cAIQqGlt+vvwjHxmK94HMfDeKhZUJysELO8/zYdu01LBiRi4/tM
ikt1+1R4LlR/rwarwxHDWQKgjG1+MyX3YOPQx2p7MvHWMExP0k9EepAynwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1lCz0AuT/qxMEQpEYUak3VlAJkMB8GA1UdIwQY
MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt
YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx
LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdIm0l6s
4KJZVz3tlzWZH5ClNZPWRXDKHIDz3XGlPVNoGrQZeFBn//53DqHBlyg3baJThxd+
pw4DrPFtijqzzLikV3YDLt6UYU5jgKW0kY+As4tBuw2uRF+RgGte4jw14cR/aD/j
F8DtNKVkR52Gsn4In7vC6DDp6WKxoaToZ8dioMhQkAW6/Rz1kWXtFxFi9oY0bh58
jz06K+bN91DPP9ekqWYfy30IlcNP3D1qynCovRPLToUwr40cf4m7F7iZSWVJyxKh
3EWh6Q+WuZ0Xu3LXn35LXgXZH7PvPIjW171gHEREEkxYHzr800K6BfUMAEp85bkg
pggjDCfDyVEg3Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:27 2026 by rpki-client