Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File:                     G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier:          16gsoSFaT83Wgkm4DjUYKyk6zGuWy4/0WBpBcFLbV1c=
Subject key identifier:   1C:01:F4:AB:E9:A4:4C:7F:A9:12:7E:DC:0E:E9:30:D0:8C:57:D8:B5
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer:       /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial:       01A08B30E5C90B81B958FF91CC440A35A441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number:          08E6
Signing time:             Thu 10 Sep 2026 12:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:32 +0000
Files and hashes:         1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: edLrqvlXbOj247d9JGoM2RvFiZCrKJexFD+bPmkVKA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:30:e5:c9:0b:81:b9:58:ff:91:cc:44:0a:35:a4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
        Validity
            Not Before: Sep 10 12:00:32 2026 GMT
            Not After : Sep 11 12:00:32 2026 GMT
        Subject: CN=1c01f4abe9a44c7fa9127edc0ee930d08c57d8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:d1:20:49:14:ae:9b:09:ac:d4:2a:12:f3:
                    43:fd:43:61:00:91:e6:99:cb:a9:9f:67:72:e8:b6:
                    b9:58:f6:e9:15:be:ef:09:23:1e:93:e8:36:3c:59:
                    8e:a4:10:fd:e3:58:f9:3d:12:7d:b1:11:16:25:63:
                    b8:a0:d9:26:77:1e:eb:9b:06:a7:ae:3e:78:09:bc:
                    aa:f1:b5:43:6b:f1:8e:9f:e9:4a:ae:66:94:6a:60:
                    21:58:89:17:0f:61:3c:29:1f:e9:6b:0e:63:9a:83:
                    fb:6d:a6:c3:02:a3:20:5b:80:a6:25:60:42:d7:d7:
                    48:dc:b2:9f:64:ea:1d:f7:32:f8:2f:b9:89:2d:0b:
                    b0:0a:01:9f:ce:e7:2c:6a:9a:0c:65:98:f7:ef:c2:
                    8c:ee:e5:ee:08:4e:44:a6:0f:fb:e5:85:eb:d5:7a:
                    cf:f0:06:4d:92:f5:64:8d:93:83:f2:de:88:f8:8d:
                    c0:39:fc:5e:29:9f:b1:53:5d:19:4a:bc:16:bb:08:
                    f2:52:29:39:75:ee:35:c1:cb:79:22:eb:d9:a8:c4:
                    68:f3:86:3c:f6:27:a3:aa:c1:e0:31:a3:7d:e3:0b:
                    ea:b9:cf:3e:20:8e:9e:fb:ff:65:6d:4b:86:f5:ce:
                    6d:f7:62:74:f7:79:fe:87:a0:85:31:03:88:e2:6b:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:01:F4:AB:E9:A4:4C:7F:A9:12:7E:DC:0E:E9:30:D0:8C:57:D8:B5
            X509v3 Authority Key Identifier:
                keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:9d:59:e6:e8:5e:9b:d8:22:57:fc:34:75:8d:d8:fd:bd:
         db:02:d4:3d:fd:6d:f2:f2:d0:c3:9f:2c:35:15:b6:91:1c:4a:
         06:e0:b6:cb:ca:be:9a:60:7e:f7:8b:89:86:a9:bf:e8:62:4c:
         fb:e1:5f:1a:f0:79:b9:bd:94:ab:04:f8:8a:d9:6b:06:4d:80:
         f3:21:78:32:cd:5a:1b:06:43:ba:2a:0e:ad:26:db:76:14:c1:
         df:d4:14:2a:a7:dc:e2:bf:d6:61:68:de:a6:ce:5c:22:1c:de:
         ea:4c:10:56:b5:4a:33:55:25:d5:91:8d:99:7f:2c:8f:b7:5f:
         3d:62:3d:99:dd:b5:ea:47:b1:59:6e:6b:c8:0b:36:2c:b2:05:
         3c:ae:bb:d9:67:6b:a3:a6:81:ee:19:13:08:cf:63:7c:ae:26:
         8b:47:18:4f:ec:8b:5f:14:d4:5b:4a:3a:35:aa:58:89:9c:28:
         b2:f1:7c:7e:2e:87:35:38:92:ab:20:d8:5a:a2:d9:fd:06:32:
         dd:0a:6b:53:9b:f2:4b:a1:de:5f:ff:cd:97:8e:e8:78:56:46:
         7b:9a:eb:d1:f8:64:93:b5:76:0d:42:47:1e:da:8c:18:ed:69:
         f9:9e:96:06:86:c1:8f:f3:41:fe:e1:68:d3:82:cc:dd:5a:e1:
         89:2e:4e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMOXJC4G5WP+RzEQKNaRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTQxNWQxNmU3MmUzMzNmMjkzNmMxYzVlMTdkZjI0Mzc4
MTA4YzIwHhcNMjYwOTEwMTIwMDMyWhcNMjYwOTExMTIwMDMyWjAzMTEwLwYDVQQD
EygxYzAxZjRhYmU5YTQ0YzdmYTkxMjdlZGMwZWU5MzBkMDhjNTdkOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkfRIEkUrpsJrNQqEvND/UNhAJHm
mcupn2dy6La5WPbpFb7vCSMek+g2PFmOpBD941j5PRJ9sREWJWO4oNkmdx7rmwan
rj54Cbyq8bVDa/GOn+lKrmaUamAhWIkXD2E8KR/paw5jmoP7babDAqMgW4CmJWBC
19dI3LKfZOod9zL4L7mJLQuwCgGfzucsapoMZZj378KM7uXuCE5Epg/75YXr1XrP
8AZNkvVkjZOD8t6I+I3AOfxeKZ+xU10ZSrwWuwjyUik5de41wct5IuvZqMRo84Y8
9iejqsHgMaN94wvquc8+II6e+/9lbUuG9c5t92J093n+h6CFMQOI4mvibQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwB9KvppEx/qRJ+3A7pMNCMV9i1MB8GA1UdIwQY
MBaAFBukFdFucuMz8pNsHF4X3yQ3gQjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDct
NmEwYjI1YzU2MzJkLzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDctNmEwYjI1YzU2MzJk
LzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx2dWebo
XpvYIlf8NHWN2P292wLUPf1t8vLQw58sNRW2kRxKBuC2y8q+mmB+94uJhqm/6GJM
++FfGvB5ub2UqwT4itlrBk2A8yF4Ms1aGwZDuioOrSbbdhTB39QUKqfc4r/WYWje
ps5cIhze6kwQVrVKM1Ul1ZGNmX8sj7dfPWI9md216kexWW5ryAs2LLIFPK672Wdr
o6aB7hkTCM9jfK4mi0cYT+yLXxTUW0o6NapYiZwosvF8fi6HNTiSqyDYWqLZ/QYy
3QprU5vyS6HeX//Nl47oeFZGe5rr0fhkk7V2DUJHHtqMGO1p+Z6WBobBj/NB/uFo
04LM3VrhiS5OTw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:19:56 2026 by rpki-client