Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
File:                     6XEkdSyEAGfdN-JC6Undo03LS04.mft (raw, json)
Hash identifier:          /hUIiNGzeUAth28nbHCZ9A4vijePyulL3XpzpMj/mVY=
Subject key identifier:   10:45:37:21:D3:32:53:5C:BD:5F:26:58:6F:E6:AF:C8:3E:AD:0B:88
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Certificate issuer:       /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial:       01A15440D73B9B5544848ADC244EFD484D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
Manifest number:          1AB0
Signing time:             Mon 19 Oct 2026 13:01:37 +0000
Manifest this update:     Mon 19 Oct 2026 13:01:37 +0000
Manifest next update:     Tue 20 Oct 2026 13:01:37 +0000
Files and hashes:         1: 6XEkdSyEAGfdN-JC6Undo03LS04.crl (hash: chJ3hZmPuIh/JBdUwBlcz0uFytgOIQGc0A9uN6reT1M=)
                          2: E7EPHRS2n8zUbGI8ks5uEiC9Nko.roa (hash: N80eNVaLMbcNwKhaF5bXs2cowcGND/P7WCKPbfCbeo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:40:d7:3b:9b:55:44:84:8a:dc:24:4e:fd:48:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
        Validity
            Not Before: Oct 19 13:01:37 2026 GMT
            Not After : Oct 20 13:01:37 2026 GMT
        Subject: CN=10453721d332535cbd5f26586fe6afc83ead0b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:bb:e0:a7:56:41:59:62:7b:2f:b5:09:78:
                    5b:6d:ee:60:c5:31:61:e4:9c:4f:4d:94:fb:02:53:
                    48:80:5c:c0:94:88:22:7d:95:da:dd:d1:75:5e:d3:
                    c1:f4:7c:5e:83:06:ab:67:c5:67:3a:91:b0:ca:a6:
                    13:f4:3c:83:40:b6:b8:ed:7a:7a:05:65:f3:7d:bd:
                    de:37:f3:c9:3e:d2:62:81:38:27:37:1a:ca:c6:85:
                    76:c7:2d:aa:cf:63:49:47:b2:ad:6a:12:45:0d:fd:
                    8c:bb:37:f4:7c:bf:73:e3:de:aa:1b:5d:26:00:8b:
                    04:de:8c:dd:2b:33:a1:8c:44:67:e9:76:02:ec:d7:
                    e5:18:ab:df:c4:35:76:ae:2c:69:68:e2:79:2b:13:
                    5c:ed:48:b8:96:dc:3b:c7:e4:0c:e3:a7:9b:96:50:
                    38:7a:69:fc:19:9d:34:65:d0:ca:20:ef:ab:4e:78:
                    5a:e4:a4:37:15:79:d5:ca:29:f5:41:2b:f0:9a:a6:
                    6c:b8:d8:69:a9:1b:57:79:45:8f:01:bc:9c:cc:fd:
                    57:9e:85:54:64:2f:21:09:8f:c5:b3:cc:fd:0f:ec:
                    ec:cb:67:1b:50:c9:6e:61:60:54:ed:a7:15:c9:ce:
                    bb:06:77:80:70:90:6b:c0:34:a6:84:ed:02:ff:d1:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:45:37:21:D3:32:53:5C:BD:5F:26:58:6F:E6:AF:C8:3E:AD:0B:88
            X509v3 Authority Key Identifier:
                keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ec:bf:8b:e6:b4:22:d1:3b:5f:17:e6:90:16:f5:a2:87:59:
         18:87:a3:ad:2c:f9:59:ad:d4:4c:a3:ed:44:d5:9f:c6:a4:3d:
         a9:9c:a5:c6:0f:c6:2d:47:2a:6b:c4:46:3e:9d:34:d7:23:db:
         08:10:9d:db:e6:95:45:5f:99:19:3e:01:d0:d7:e1:81:c6:31:
         2b:a5:3d:96:b8:58:10:be:d5:8d:7f:be:3c:b7:5c:53:f1:ee:
         2c:28:c3:8c:99:00:a9:3b:3e:96:50:65:35:6e:30:c5:54:8e:
         41:4f:57:ae:ee:f1:e2:d0:ef:08:11:2b:f5:42:25:cb:15:52:
         8e:9e:b5:83:87:71:ce:eb:f1:09:f8:cf:f2:f6:59:88:a9:fd:
         fd:87:80:b1:ce:e7:34:ab:16:79:67:05:21:15:ec:ec:2f:4b:
         36:91:6f:55:b3:c8:2c:df:3c:b7:b0:8c:fc:fb:2b:01:cc:8c:
         9d:2c:ff:ec:1f:17:48:74:8d:6f:36:b5:de:88:5c:7d:60:09:
         af:4c:f3:fb:fd:f8:09:ea:15:1b:86:6a:e6:72:d5:4e:6a:dc:
         30:5d:c7:95:fd:98:98:ac:1a:06:68:f5:02:4e:9d:5d:a0:e1:
         f4:d6:64:ee:3c:2b:af:ab:92:40:a7:66:d5:50:cf:02:46:65:
         14:26:81:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUQNc7m1VEhIrcJE79SE1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEyNDc1MmM4NDAwNjdkZDM3ZTI0MmU5NDlkZGEzNGRj
YjRiNGUwHhcNMjYxMDE5MTMwMTM3WhcNMjYxMDIwMTMwMTM3WjAzMTEwLwYDVQQD
EygxMDQ1MzcyMWQzMzI1MzVjYmQ1ZjI2NTg2ZmU2YWZjODNlYWQwYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQW74KdWQVliey+1CXhbbe5gxTFh
5JxPTZT7AlNIgFzAlIgifZXa3dF1XtPB9HxegwarZ8VnOpGwyqYT9DyDQLa47Xp6
BWXzfb3eN/PJPtJigTgnNxrKxoV2xy2qz2NJR7KtahJFDf2Muzf0fL9z496qG10m
AIsE3ozdKzOhjERn6XYC7NflGKvfxDV2rixpaOJ5KxNc7Ui4ltw7x+QM46ebllA4
emn8GZ00ZdDKIO+rTnha5KQ3FXnVyin1QSvwmqZsuNhpqRtXeUWPAbyczP1XnoVU
ZC8hCY/Fs8z9D+zsy2cbUMluYWBU7acVyc67BneAcJBrwDSmhO0C/9HyWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBFNyHTMlNcvV8mWG/mr8g+rQuIMB8GA1UdIwQY
MBaAFOlxJHUshABn3TfiQulJ3aNNy0tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NWE5YzktMTY1MC00YjBiLWI3OGMt
NWNiMzliNTRhN2VkLzEvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83NWE5YzktMTY1MC00YjBiLWI3OGMtNWNiMzliNTRhN2Vk
LzEvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApey/i+a0
ItE7XxfmkBb1oodZGIejrSz5Wa3UTKPtRNWfxqQ9qZylxg/GLUcqa8RGPp001yPb
CBCd2+aVRV+ZGT4B0NfhgcYxK6U9lrhYEL7VjX++PLdcU/HuLCjDjJkAqTs+llBl
NW4wxVSOQU9Xru7x4tDvCBEr9UIlyxVSjp61g4dxzuvxCfjP8vZZiKn9/YeAsc7n
NKsWeWcFIRXs7C9LNpFvVbPILN88t7CM/PsrAcyMnSz/7B8XSHSNbza13ohcfWAJ
r0zz+/34CeoVG4Zq5nLVTmrcMF3Hlf2YmKwaBmj1Ak6dXaDh9NZk7jwrr6uSQKdm
1VDPAkZlFCaBaA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:27 2026 by rpki-client