Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
File:                     6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft (raw, json)
Hash identifier:          EftfyxYuKEHfLLhkiqTbrlLhvnoGYch86HNNsCeAZxM=
Subject key identifier:   29:0E:14:8E:61:78:83:76:6A:F9:33:DF:AD:45:96:2D:9E:9E:3C:CA
Authority key identifier: EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63
Certificate issuer:       /CN=ea827b9556d540da536b8046c65ff95b06ee4963
Certificate serial:       01A148053485BE75CCFA2329FF224854D38A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
Manifest number:          1AAA
Signing time:             Sat 17 Oct 2026 04:01:02 +0000
Manifest this update:     Sat 17 Oct 2026 04:01:02 +0000
Manifest next update:     Sun 18 Oct 2026 04:01:02 +0000
Files and hashes:         1: 6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl (hash: kC7+H+Wj27rqgMO7UDXlixvL3uu0Wdt0kNSS0zkToug=)
                          2: 9uLCR93AsvcbHhfo_LRBoViZJEw.roa (hash: 6EciUB7X3+hHMgVRkJbEMXyOPOOet2xSMxTp/Z+84Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:05:34:85:be:75:cc:fa:23:29:ff:22:48:54:d3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea827b9556d540da536b8046c65ff95b06ee4963
        Validity
            Not Before: Oct 17 04:01:02 2026 GMT
            Not After : Oct 18 04:01:02 2026 GMT
        Subject: CN=290e148e617883766af933dfad45962d9e9e3cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:78:9f:d5:d0:30:19:f0:e1:2c:e8:da:cd:
                    06:91:b8:e7:0f:5a:a1:e5:14:54:58:3a:fa:54:38:
                    22:1c:29:b6:1e:b7:42:26:07:b8:10:17:1e:f9:e7:
                    d8:ea:34:e7:fc:52:25:06:ca:f2:c6:9e:f4:ab:ef:
                    5e:90:13:62:cd:f0:e6:8f:da:be:78:db:3e:b7:c0:
                    b9:8f:cd:f3:a5:59:60:20:2b:c5:18:25:1b:85:ee:
                    ba:21:7a:ce:84:15:d8:aa:09:f2:9e:11:25:bc:30:
                    a4:81:54:4c:c9:b6:ac:e9:22:69:b1:45:97:3e:9a:
                    d3:2e:ff:f5:51:06:38:52:f6:d8:dd:b4:65:6b:b4:
                    65:6c:a4:b3:e9:e7:71:73:52:fb:c1:7c:0b:da:78:
                    50:74:6e:b8:2a:1a:b3:fb:2b:b5:80:e0:7e:91:ff:
                    3a:38:bd:af:9f:e0:04:50:7d:24:71:82:96:5b:fd:
                    69:36:95:24:90:4c:fa:7b:5c:af:6f:31:5c:f0:c0:
                    3c:66:0e:ad:46:ea:8f:ff:5b:6c:bd:1a:87:d7:e3:
                    56:47:b1:0c:f6:a8:af:a8:e1:fb:30:df:35:0c:3d:
                    08:28:b6:a9:cc:23:f3:96:1d:98:c2:31:a1:c1:2a:
                    f1:63:46:16:64:4b:a9:ee:a2:d3:20:8d:b5:3d:4d:
                    6f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0E:14:8E:61:78:83:76:6A:F9:33:DF:AD:45:96:2D:9E:9E:3C:CA
            X509v3 Authority Key Identifier:
                keyid:EA:82:7B:95:56:D5:40:DA:53:6B:80:46:C6:5F:F9:5B:06:EE:49:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4012a4-3d58-4dd0-80b4-be317b531c2e/1/6oJ7lVbVQNpTa4BGxl_5WwbuSWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:51:6e:33:d2:ef:74:e9:6e:b8:d2:33:83:d3:ef:1e:6b:c9:
         5a:8f:8b:96:f4:c3:6f:de:e4:7a:5d:15:a6:86:86:34:93:34:
         95:64:a3:cf:8b:ce:f4:89:d5:26:20:9f:30:ff:dd:1d:fc:4c:
         5f:e7:87:5f:96:3f:c5:97:cf:e9:35:c8:81:be:a3:c0:14:b8:
         1e:7f:7b:87:6c:30:db:39:92:a3:a6:f3:dc:75:6b:29:7f:75:
         c5:99:d8:ea:dc:d2:81:28:34:ac:87:28:a4:fa:3d:1a:ee:a3:
         21:a3:ba:62:9e:e1:a8:30:bd:2c:c0:c5:52:99:d5:77:96:ec:
         bc:20:f3:f9:01:a4:25:79:8e:d6:3e:c8:b8:f3:e0:34:3e:6c:
         53:2e:88:2f:93:93:ed:d6:f0:6c:2c:e8:10:8d:51:f4:85:35:
         99:c8:33:7a:c5:0b:61:be:ad:05:12:01:f8:e4:40:80:7f:c7:
         9b:49:f3:67:27:5a:ef:eb:40:7a:ee:a7:19:cd:86:e8:ca:08:
         ef:38:65:8f:4b:b8:1b:cb:8e:02:b3:8a:ee:5a:d6:0e:71:13:
         9e:8e:b1:44:96:89:0a:18:fe:c0:af:0c:06:b2:68:e8:b6:de:
         02:7c:f5:d8:5d:09:8a:9a:50:6f:4e:10:09:31:8a:45:2a:0a:
         b4:5b:9b:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIBTSFvnXM+iMp/yJIVNOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODI3Yjk1NTZkNTQwZGE1MzZiODA0NmM2NWZmOTViMDZl
ZTQ5NjMwHhcNMjYxMDE3MDQwMTAyWhcNMjYxMDE4MDQwMTAyWjAzMTEwLwYDVQQD
EygyOTBlMTQ4ZTYxNzg4Mzc2NmFmOTMzZGZhZDQ1OTYyZDllOWUzY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk94n9XQMBnw4Szo2s0GkbjnD1qh
5RRUWDr6VDgiHCm2HrdCJge4EBce+efY6jTn/FIlBsryxp70q+9ekBNizfDmj9q+
eNs+t8C5j83zpVlgICvFGCUbhe66IXrOhBXYqgnynhElvDCkgVRMybas6SJpsUWX
PprTLv/1UQY4UvbY3bRla7RlbKSz6edxc1L7wXwL2nhQdG64Khqz+yu1gOB+kf86
OL2vn+AEUH0kcYKWW/1pNpUkkEz6e1yvbzFc8MA8Zg6tRuqP/1tsvRqH1+NWR7EM
9qivqOH7MN81DD0IKLapzCPzlh2YwjGhwSrxY0YWZEup7qLTII21PU1vFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkOFI5heIN2avkz361Fli2enjzKMB8GA1UdIwQY
MBaAFOqCe5VW1UDaU2uARsZf+VsG7kljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9KN2xWYlZRTnBUYTRCR3hsXzVXd2J1U1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MDEyYTQtM2Q1OC00ZGQwLTgwYjQt
YmUzMTdiNTMxYzJlLzEvNm9KN2xWYlZRTnBUYTRCR3hsXzVXd2J1U1dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80MDEyYTQtM2Q1OC00ZGQwLTgwYjQtYmUzMTdiNTMxYzJl
LzEvNm9KN2xWYlZRTnBUYTRCR3hsXzVXd2J1U1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVFuM9Lv
dOluuNIzg9PvHmvJWo+LlvTDb97kel0VpoaGNJM0lWSjz4vO9InVJiCfMP/dHfxM
X+eHX5Y/xZfP6TXIgb6jwBS4Hn97h2ww2zmSo6bz3HVrKX91xZnY6tzSgSg0rIco
pPo9Gu6jIaO6Yp7hqDC9LMDFUpnVd5bsvCDz+QGkJXmO1j7IuPPgND5sUy6IL5OT
7dbwbCzoEI1R9IU1mcgzesULYb6tBRIB+ORAgH/Hm0nzZyda7+tAeu6nGc2G6MoI
7zhlj0u4G8uOArOK7lrWDnETno6xRJaJChj+wK8MBrJo6LbeAnz12F0JippQb04Q
CTGKRSoKtFubOw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:21:47 2026 by rpki-client