Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
File:                     a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft (raw, json)
Hash identifier:          917RQsTE1ORcsGJF4jJTiitP1CDq2rp71ll5Z0PDIJE=
Subject key identifier:   16:55:84:A9:FD:6A:94:5D:62:E2:CD:88:97:6B:E2:7B:10:41:9B:61
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Certificate issuer:       /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial:       01A168A21AE8F89B0660D3716BEC2B0EBE96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
Manifest number:          1AE2
Signing time:             Fri 23 Oct 2026 12:00:16 +0000
Manifest this update:     Fri 23 Oct 2026 12:00:16 +0000
Manifest next update:     Sat 24 Oct 2026 12:00:16 +0000
Files and hashes:         1: Ynt2xigtHLqXLUzQsAZpEPmTtO4.roa (hash: i2KqkbOF2kBrToyif2lOVM+Ne7eJ5ANDv5baiweWbnI=)
                          2: a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl (hash: gVR4H/pscJyyLba3Jh1AsoEseqZVH21VtA2m2wqyvvs=)
                          3: n1a6LkWWBYXv3xOK1kSp0WNucpU.roa (hash: obbHB0NOYZL+bKj74fglH+G2+FmY39/Gan1NwCxdrf8=)
                          4: xxw4g7IqAMokWvpsEpsZbBAYs0I.roa (hash: /LwhAx0DNt5cAADOZVhtgoYOlUHNGAj6EwLSIPsc/p0=)
                          5: ycUlDsWEhCLs0Gp5ZjxSD8d8IOI.roa (hash: 82ES0fez9oMPh0JZm/HZY9Hf8hTT6G1rgiBdn6kP6wI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:a2:1a:e8:f8:9b:06:60:d3:71:6b:ec:2b:0e:be:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
        Validity
            Not Before: Oct 23 12:00:16 2026 GMT
            Not After : Oct 24 12:00:16 2026 GMT
        Subject: CN=165584a9fd6a945d62e2cd88976be27b10419b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:6c:dc:a1:a5:25:4c:92:0b:92:6f:07:29:
                    d1:b0:75:0f:e5:f7:55:93:53:a5:2e:19:76:01:1d:
                    03:21:7f:7e:68:e0:08:c8:db:38:71:b1:43:7f:95:
                    4c:39:ea:77:2c:38:59:3e:c9:99:3c:03:20:fa:92:
                    b2:b9:a4:45:77:9a:51:07:f3:f6:96:34:f6:a1:ff:
                    bc:10:7e:d4:9e:14:56:90:ab:ac:90:70:16:59:16:
                    0c:00:e1:a5:53:fd:0a:ec:f8:82:a3:63:95:68:77:
                    df:5f:c6:0f:9b:55:26:77:a6:5c:1c:47:49:64:1b:
                    91:bd:7a:14:cd:d8:4f:cd:4c:14:d2:ab:1b:f1:2b:
                    e3:d3:d3:79:00:f9:61:2f:12:24:0a:55:9d:ee:4c:
                    6d:d5:ca:64:7b:bf:9e:cc:68:49:e3:f6:46:90:5f:
                    06:85:f4:1a:23:b4:c7:e3:da:7a:d9:67:e6:81:0a:
                    0e:09:04:0b:1a:c4:87:e0:af:6b:a1:e8:29:ef:2d:
                    99:03:74:d6:5c:95:05:12:e9:34:63:3d:ab:61:e4:
                    fa:58:c3:2d:eb:d6:0e:5b:a0:ce:b1:c8:4f:62:b3:
                    d3:2f:af:fa:95:34:77:14:5b:13:0e:ab:fa:37:a4:
                    13:1b:fa:3f:10:6c:b8:96:4a:e6:e8:a9:87:4f:01:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:84:A9:FD:6A:94:5D:62:E2:CD:88:97:6B:E2:7B:10:41:9B:61
            X509v3 Authority Key Identifier:
                keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:db:2a:e9:88:6a:d5:e4:d7:3c:96:c6:6a:92:69:b4:e9:c5:
         1b:f1:13:8d:e4:30:1f:83:3f:d3:ee:cf:10:e0:50:d1:3d:ae:
         53:9a:c0:85:95:13:c2:f0:65:f9:7b:d5:52:ba:34:01:46:93:
         81:68:c5:ca:5b:32:0c:8e:22:7d:cf:7d:90:11:ad:92:bb:fd:
         e8:d6:93:ec:09:5b:e9:62:4c:f6:80:a1:49:29:08:49:ce:c6:
         a5:c5:c0:cd:1d:1a:e5:f4:58:69:b1:89:c4:fa:30:5d:d2:cb:
         46:d0:e4:b9:99:90:af:8e:91:85:9f:82:70:95:e7:7d:91:23:
         ee:8b:3a:ae:d4:0f:82:0f:fe:bf:c3:4b:a0:f3:a8:d1:ab:4d:
         e3:d3:94:98:19:c7:c4:1b:d1:90:48:75:56:35:b3:90:eb:2e:
         43:9b:8d:d2:39:07:8e:24:22:67:ea:5b:dd:b1:1d:74:03:84:
         b1:3d:08:28:1b:cf:f9:ca:ff:bf:12:18:e4:70:9d:34:39:57:
         7a:33:a7:f4:ca:f7:6c:f3:bc:28:2c:79:52:80:f4:2c:b4:54:
         58:7a:be:99:28:16:64:87:e7:02:d6:f8:85:ce:5e:71:33:29:
         64:a6:cf:78:2d:89:de:bf:7e:61:a0:6a:0e:21:54:5b:b8:14:
         c6:6e:bb:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFoohro+JsGYNNxa+wrDr6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTMxODY1OTc3NDJhOTI2Y2QyNjUwNGUxZWQ3NmY4NTQz
ZmRiMjYwHhcNMjYxMDIzMTIwMDE2WhcNMjYxMDI0MTIwMDE2WjAzMTEwLwYDVQQD
EygxNjU1ODRhOWZkNmE5NDVkNjJlMmNkODg5NzZiZTI3YjEwNDE5YjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ts3KGlJUySC5JvBynRsHUP5fdV
k1OlLhl2AR0DIX9+aOAIyNs4cbFDf5VMOep3LDhZPsmZPAMg+pKyuaRFd5pRB/P2
ljT2of+8EH7UnhRWkKuskHAWWRYMAOGlU/0K7PiCo2OVaHffX8YPm1Umd6ZcHEdJ
ZBuRvXoUzdhPzUwU0qsb8Svj09N5APlhLxIkClWd7kxt1cpke7+ezGhJ4/ZGkF8G
hfQaI7TH49p62WfmgQoOCQQLGsSH4K9roegp7y2ZA3TWXJUFEuk0Yz2rYeT6WMMt
69YOW6DOschPYrPTL6/6lTR3FFsTDqv6N6QTG/o/EGy4lkrm6KmHTwGRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZVhKn9apRdYuLNiJdr4nsQQZthMB8GA1UdIwQY
MBaAFGujGGWXdCqSbNJlBOHtdvhUP9smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZNWVpaZDBLcEpzMG1VRTRlMTItRlFfMnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZDU5MTAtOWY1ZS00NDZjLThkM2Mt
YmMwMDdmMmRhYzI0LzEvYTZNWVpaZDBLcEpzMG1VRTRlMTItRlFfMnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZDU5MTAtOWY1ZS00NDZjLThkM2MtYmMwMDdmMmRhYzI0
LzEvYTZNWVpaZDBLcEpzMG1VRTRlMTItRlFfMnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNsq6Yhq
1eTXPJbGapJptOnFG/ETjeQwH4M/0+7PEOBQ0T2uU5rAhZUTwvBl+XvVUro0AUaT
gWjFylsyDI4ifc99kBGtkrv96NaT7Alb6WJM9oChSSkISc7GpcXAzR0a5fRYabGJ
xPowXdLLRtDkuZmQr46RhZ+CcJXnfZEj7os6rtQPgg/+v8NLoPOo0atN49OUmBnH
xBvRkEh1VjWzkOsuQ5uN0jkHjiQiZ+pb3bEddAOEsT0IKBvP+cr/vxIY5HCdNDlX
ejOn9Mr3bPO8KCx5UoD0LLRUWHq+mSgWZIfnAtb4hc5ecTMpZKbPeC2J3r9+YaBq
DiFUW7gUxm67ow==
-----END CERTIFICATE-----
Generated at Fri Oct 23 19:02:51 2026 by rpki-client