Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File:                     E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier:          1Bfu+1cvTgYr+9XlA7s5zpI9x4Amk+HwDbl39YzQObA=
Subject key identifier:   6F:37:BF:66:4B:85:65:73:E3:C0:AB:E7:7A:FA:A4:32:90:B7:7B:D2
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer:       /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial:       01A0016ECE04DDA0DC390B68A300C15380D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number:          0939
Signing time:             Fri 14 Aug 2026 18:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:33 +0000
Files and hashes:         1: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: t4HkRd4g5sS2VYmQDlRv/4FYUSa3fIYOuGkeE1IkfK4=)
                          2: G790ctvfB8H7olkvHbj2C62gXak.roa (hash: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:ce:04:dd:a0:dc:39:0b:68:a3:00:c1:53:80:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
        Validity
            Not Before: Aug 14 18:00:33 2026 GMT
            Not After : Aug 15 18:00:33 2026 GMT
        Subject: CN=6f37bf664b856573e3c0abe77afaa43290b77bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:b9:e6:57:27:b0:ad:d2:4b:b7:6e:49:d0:
                    45:9b:8c:85:5a:15:36:04:6b:65:b0:46:d8:c9:7e:
                    e8:37:aa:a9:2b:da:cf:54:4f:b5:b4:48:8a:24:6d:
                    e4:b7:25:77:da:fe:2d:55:89:be:36:9a:f1:a6:4b:
                    7a:b0:23:42:f0:47:38:83:a6:00:f4:14:64:c7:52:
                    b0:61:50:7f:7c:74:8c:d9:0b:01:3f:be:4a:e3:53:
                    c9:4f:b2:12:0f:f1:bb:47:bc:db:3f:09:84:a7:1b:
                    02:a2:71:5d:4f:b2:6e:ba:c8:cb:36:d9:94:1f:95:
                    d5:bd:30:65:4e:f4:d1:35:45:bb:90:49:c7:bf:56:
                    9f:3a:8d:1c:dd:1f:e0:60:49:33:32:2a:3f:96:4c:
                    32:a8:fa:b2:67:40:93:16:b8:7a:04:74:f7:c0:d2:
                    c5:02:54:13:bd:34:33:a1:86:e8:92:97:18:34:1a:
                    ad:48:46:01:99:ba:e1:ed:2a:e7:fa:55:72:25:ec:
                    58:03:8a:36:95:40:7e:2d:6c:0f:ff:b6:a0:0e:71:
                    4b:81:fa:e5:cf:29:22:e2:18:e3:3a:ec:72:26:5f:
                    12:4f:1e:70:49:83:97:4a:c1:56:7b:23:0d:97:bb:
                    e7:19:95:b3:65:8a:72:80:4d:d6:fc:7d:f6:07:b2:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:37:BF:66:4B:85:65:73:E3:C0:AB:E7:7A:FA:A4:32:90:B7:7B:D2
            X509v3 Authority Key Identifier:
                keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:6c:07:b8:56:9a:f8:23:b2:e2:35:f5:84:b3:2f:db:0e:
         e3:08:f9:b5:da:fb:fe:79:19:13:59:4e:ff:ef:ac:8f:3e:bb:
         ef:aa:66:ae:47:fa:61:32:54:b9:5d:a9:6b:65:36:8f:d2:da:
         fa:9b:af:15:3b:16:50:b2:90:45:b4:23:9c:7f:55:2e:13:fc:
         ad:15:9f:df:1c:8b:4e:de:a7:e1:69:6c:75:1e:37:2a:7c:42:
         77:9d:6d:c6:e5:fc:79:18:32:e0:79:e2:29:7f:68:71:5a:97:
         d8:bf:e0:17:07:ea:2d:45:37:eb:87:7a:38:65:f9:6c:53:38:
         31:7d:00:e8:1c:87:b9:7d:e2:d0:9b:25:f9:a9:a6:5a:31:da:
         61:38:b1:33:20:12:ac:4d:2f:37:c3:f4:65:7b:20:95:e1:66:
         5a:31:ff:8f:3e:7f:cd:5f:3b:8e:e8:66:16:84:e6:41:04:41:
         18:76:fc:91:5f:6f:ac:18:a8:55:d0:11:3e:aa:ba:f9:20:03:
         50:bf:05:27:a8:db:bd:f1:e5:a8:95:b0:34:ce:2e:b5:08:c6:
         93:6c:c1:54:87:f1:df:0f:c5:0d:cc:c1:e4:d8:4c:97:c4:4f:
         96:3d:b9:8b:d7:fb:15:73:4a:9a:47:2b:2a:e7:8a:65:fa:e8:
         df:26:71:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABbs4E3aDcOQtoowDBU4DXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNWQ0NGY5MDI5ZTFiNWQ3NDNjZmNlNTgxMWVmZTVlMjZm
OGM4NjIwHhcNMjYwODE0MTgwMDMzWhcNMjYwODE1MTgwMDMzWjAzMTEwLwYDVQQD
Eyg2ZjM3YmY2NjRiODU2NTczZTNjMGFiZTc3YWZhYTQzMjkwYjc3YmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y+55lcnsK3SS7duSdBFm4yFWhU2
BGtlsEbYyX7oN6qpK9rPVE+1tEiKJG3ktyV32v4tVYm+Nprxpkt6sCNC8Ec4g6YA
9BRkx1KwYVB/fHSM2QsBP75K41PJT7ISD/G7R7zbPwmEpxsConFdT7JuusjLNtmU
H5XVvTBlTvTRNUW7kEnHv1afOo0c3R/gYEkzMio/lkwyqPqyZ0CTFrh6BHT3wNLF
AlQTvTQzoYbokpcYNBqtSEYBmbrh7Srn+lVyJexYA4o2lUB+LWwP/7agDnFLgfrl
zyki4hjjOuxyJl8STx5wSYOXSsFWeyMNl7vnGZWzZYpygE3W/H32B7L9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG83v2ZLhWVz48Cr53r6pDKQt3vSMB8GA1UdIwQY
MBaAFBNdRPkCnhtddDz85YEe/l4m+MhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUt
ZDBkMzNiMTY2OGE1LzEvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82N2E5ZmItYTg1Yi00MzFkLWFmYjUtZDBkMzNiMTY2OGE1
LzEvRTExRS1RS2VHMTEwUFB6bGdSNy1YaWI0eUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilVsB7hW
mvgjsuI19YSzL9sO4wj5tdr7/nkZE1lO/++sjz6776pmrkf6YTJUuV2pa2U2j9La
+puvFTsWULKQRbQjnH9VLhP8rRWf3xyLTt6n4WlsdR43KnxCd51txuX8eRgy4Hni
KX9ocVqX2L/gFwfqLUU364d6OGX5bFM4MX0A6ByHuX3i0Jsl+ammWjHaYTixMyAS
rE0vN8P0ZXsgleFmWjH/jz5/zV87juhmFoTmQQRBGHb8kV9vrBioVdARPqq6+SAD
UL8FJ6jbvfHlqJWwNM4utQjGk2zBVIfx3w/FDczB5NhMl8RPlj25i9f7FXNKmkcr
KueKZfro3yZxqg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:58 2026 by rpki-client