Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          vuBJlnZ+yYlOjmeND7ocpPbP9bKx9DLtsEyp/mZIK0Q=
Subject key identifier:   B0:88:D8:3D:08:43:1C:6F:4B:6B:02:61:E5:79:D8:ED:FB:78:BD:27
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       01A0FDC72D6AF9F92280D8C09EB3B3A5C79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          0AD7
Signing time:             Fri 02 Oct 2026 18:01:23 +0000
Manifest this update:     Fri 02 Oct 2026 18:01:23 +0000
Manifest next update:     Sat 03 Oct 2026 18:01:23 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: O+vO3rJLN8M6euI0uH79Nv0ZJQ9e6dHBqu0HQDXpC2A=)
                          2: sXWO_DWD7Ah_vMjGm35nvHivxBc.roa (hash: X3aJAsZQv/GuZjI5kdAfg34ET6Ft+aEdJbJSgzuBpEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:c7:2d:6a:f9:f9:22:80:d8:c0:9e:b3:b3:a5:c7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Oct  2 18:01:23 2026 GMT
            Not After : Oct  3 18:01:23 2026 GMT
        Subject: CN=b088d83d08431c6f4b6b0261e579d8edfb78bd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:96:3b:26:de:5f:a0:67:7c:79:53:3c:4a:a4:
                    f6:ca:ba:f9:6d:bf:02:10:65:e3:09:ef:c9:c8:76:
                    cd:87:6c:63:de:ea:74:2e:1d:49:37:97:35:91:3d:
                    96:93:1d:59:9d:79:a1:7b:98:08:70:86:20:66:1b:
                    0e:3d:49:4f:47:7b:6d:ac:c7:72:ba:2f:dd:f0:00:
                    13:4d:29:4c:7e:2c:1b:a6:34:a3:b7:0d:53:f4:8d:
                    c6:82:22:d0:32:fa:19:1c:95:b5:cc:5f:12:9b:99:
                    fd:4f:8a:6e:32:45:78:7f:f3:f6:33:4c:fd:10:1d:
                    f5:df:f2:f1:27:8c:78:8a:d8:9a:28:04:47:a5:24:
                    eb:39:a3:86:29:ab:b2:77:90:34:93:38:3e:55:38:
                    c5:66:f0:b6:2f:eb:6e:77:48:b2:7e:0e:13:43:9a:
                    75:66:6b:51:2d:b5:c9:76:39:15:41:d3:04:4c:a7:
                    5a:bf:37:44:d2:e0:cd:97:5e:2f:bb:4d:43:06:16:
                    d9:9a:de:d3:ab:7c:c7:4a:7a:65:5c:e4:43:7b:60:
                    18:1b:d9:4d:ef:52:34:a1:ef:e5:12:23:d9:9a:38:
                    39:34:b4:f6:37:08:45:4f:21:cd:4b:bd:f0:e4:03:
                    35:98:64:b7:3c:50:1a:fc:6b:ff:d7:71:1f:9c:a9:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:D8:3D:08:43:1C:6F:4B:6B:02:61:E5:79:D8:ED:FB:78:BD:27
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:b5:b5:65:52:b3:2e:c7:59:cb:54:11:4f:3e:39:91:84:33:
         61:a8:63:3f:fe:13:00:b2:1d:82:ad:da:0a:17:69:af:3b:d7:
         6b:6b:4c:39:0a:d5:76:a2:08:f1:a6:fa:64:f7:b4:9b:ff:83:
         47:dd:2f:bd:77:63:09:3b:6e:b3:4e:c1:d7:e1:15:c5:ba:67:
         b6:1b:9a:db:54:ac:3c:1a:3d:5f:36:d8:1d:1d:cd:b2:c5:e2:
         d7:a6:06:7b:ef:2d:1b:a3:64:bd:47:d9:12:83:f3:a8:c8:63:
         77:da:c1:1a:1f:55:70:88:a0:b5:28:35:29:eb:28:16:14:cb:
         4b:1b:13:9b:5d:1d:40:47:5d:10:4d:93:dc:3e:a4:8b:13:9a:
         0d:7c:58:2c:c0:cc:a8:01:2f:dd:43:3c:a3:f6:60:9f:99:98:
         a7:a9:63:d4:c9:50:a4:77:04:91:39:ff:81:cc:dd:35:33:ee:
         1b:7a:52:f2:da:33:37:9a:28:2e:05:1c:bb:38:a3:b4:f8:7c:
         92:03:01:f5:5d:25:e3:db:21:d6:21:1f:a7:c1:65:0a:8e:71:
         0a:55:1d:b0:b8:0a:4a:e7:c7:f8:d8:c5:7e:f3:33:5a:32:be:
         14:47:e9:3b:12:60:d1:a1:a0:a1:52:b5:17:9d:0e:a6:64:35:
         6a:c4:ea:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD9xy1q+fkigNjAnrOzpcecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx
OGZkMDAwHhcNMjYxMDAyMTgwMTIzWhcNMjYxMDAzMTgwMTIzWjAzMTEwLwYDVQQD
EyhiMDg4ZDgzZDA4NDMxYzZmNGI2YjAyNjFlNTc5ZDhlZGZiNzhiZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5Y7Jt5foGd8eVM8SqT2yrr5bb8C
EGXjCe/JyHbNh2xj3up0Lh1JN5c1kT2Wkx1ZnXmhe5gIcIYgZhsOPUlPR3ttrMdy
ui/d8AATTSlMfiwbpjSjtw1T9I3GgiLQMvoZHJW1zF8Sm5n9T4puMkV4f/P2M0z9
EB313/LxJ4x4itiaKARHpSTrOaOGKauyd5A0kzg+VTjFZvC2L+tud0iyfg4TQ5p1
ZmtRLbXJdjkVQdMETKdavzdE0uDNl14vu01DBhbZmt7Tq3zHSnplXORDe2AYG9lN
71I0oe/lEiPZmjg5NLT2NwhFTyHNS73w5AM1mGS3PFAa/Gv/13EfnKl9nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCI2D0IQxxvS2sCYeV52O37eL0nMB8GA1UdIwQY
MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct
Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh
LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bW1ZVKz
LsdZy1QRTz45kYQzYahjP/4TALIdgq3aChdprzvXa2tMOQrVdqII8ab6ZPe0m/+D
R90vvXdjCTtus07B1+EVxbpnthua21SsPBo9XzbYHR3NssXi16YGe+8tG6NkvUfZ
EoPzqMhjd9rBGh9VcIigtSg1KesoFhTLSxsTm10dQEddEE2T3D6kixOaDXxYLMDM
qAEv3UM8o/Zgn5mYp6lj1MlQpHcEkTn/gczdNTPuG3pS8tozN5ooLgUcuzijtPh8
kgMB9V0l49sh1iEfp8FlCo5xClUdsLgKSufH+NjFfvMzWjK+FEfpOxJg0aGgoVK1
F50OpmQ1asTqQA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 01:41:28 2026 by rpki-client