Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File:                     aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier:          5a3ag1K8WdwUNSIM6Nhy4OXEPjfVGLCBArRP6aOakl8=
Subject key identifier:   44:82:97:C3:93:FB:3D:8C:4D:CB:A4:5F:A1:53:AB:D0:F3:32:3B:F4
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer:       /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial:       01A111BB4FA6D3F6B63169D9AFC533B5B710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number:          05B6
Signing time:             Tue 06 Oct 2026 15:00:50 +0000
Manifest this update:     Tue 06 Oct 2026 15:00:50 +0000
Manifest next update:     Wed 07 Oct 2026 15:00:50 +0000
Files and hashes:         1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: wGvxoCfuXVlyuc6ZEgl9OI16TOEWO4j6VfbAyTT9bMI=)
                          2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bb:4f:a6:d3:f6:b6:31:69:d9:af:c5:33:b5:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
        Validity
            Not Before: Oct  6 15:00:50 2026 GMT
            Not After : Oct  7 15:00:50 2026 GMT
        Subject: CN=448297c393fb3d8c4dcba45fa153abd0f3323bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:0a:ef:4e:c7:1e:7d:f4:51:4e:8d:36:14:
                    c1:c3:31:6b:bc:62:ab:03:80:59:a7:54:69:74:f2:
                    d3:9c:13:d0:97:b8:41:22:ce:a1:97:ff:ec:f8:72:
                    ee:ce:01:ad:4a:00:c4:de:e2:7d:11:ff:7f:66:35:
                    07:88:4f:f9:18:36:ae:c6:c3:c0:44:08:61:1a:5e:
                    ec:bb:e7:30:03:c3:d4:52:f2:0d:60:e3:2c:c1:ac:
                    16:8f:5f:b4:63:ea:57:b2:02:21:06:c3:df:3f:6b:
                    02:16:7b:40:b2:4e:b8:e1:9f:94:0c:21:84:e5:2a:
                    68:91:df:1b:e3:a3:52:d8:5d:7b:b4:37:cf:61:61:
                    3a:8c:2e:60:b6:1a:5a:b3:d2:13:f1:47:a0:54:10:
                    7c:1d:98:85:16:55:4f:70:79:07:38:4f:3d:68:6c:
                    39:82:f4:49:17:23:f3:6e:11:81:fe:a9:5f:aa:bb:
                    6c:c8:f5:6b:3e:ee:ab:e7:b6:f3:fc:08:26:52:24:
                    7c:11:d5:68:01:8e:70:fa:e5:cd:49:b8:e1:ab:09:
                    a7:72:07:0a:2c:d0:93:c4:f1:ce:8e:ca:23:1b:8b:
                    96:36:4a:28:d6:1f:db:31:db:2b:96:2b:49:ef:9a:
                    52:15:43:b0:b2:63:85:d7:e0:db:33:42:24:f7:4d:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:82:97:C3:93:FB:3D:8C:4D:CB:A4:5F:A1:53:AB:D0:F3:32:3B:F4
            X509v3 Authority Key Identifier:
                keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:0b:e8:80:d7:bc:48:ec:4d:d1:bc:4a:66:9e:61:38:7f:d7:
         4e:c9:65:80:5d:7b:3c:5a:3a:43:da:a4:d9:1a:7d:66:28:52:
         fa:65:85:c8:e5:c6:c4:76:d8:7f:08:41:f3:e0:df:d4:6f:b7:
         c7:f0:a3:ea:4f:01:57:d1:95:83:bf:c5:3d:f4:b5:b8:a8:b7:
         7d:d7:5e:70:c6:15:30:69:29:12:72:e7:62:1e:5a:dd:a7:f3:
         75:d1:6f:0f:58:e7:ef:56:4e:b7:ba:4a:db:83:e5:58:78:b8:
         7e:39:96:30:53:b1:2f:0c:76:cb:12:55:db:e3:25:5d:65:3a:
         6e:79:ca:3f:80:78:b1:bd:48:93:3a:ef:d9:78:7a:a9:9f:20:
         16:42:a7:0c:80:7f:16:57:2f:d0:91:ab:8d:be:c7:d5:30:cc:
         72:54:93:6a:2b:2f:79:f4:ac:46:e4:3a:c2:0a:08:f9:0e:41:
         eb:66:71:f4:89:f9:ad:eb:1d:06:21:58:87:06:40:24:24:73:
         78:8d:b5:55:60:20:70:41:2a:e5:ab:45:e2:c7:72:f8:b4:66:
         fb:1c:59:38:75:c7:14:f5:71:dc:12:b8:b7:ea:ed:8a:7b:99:
         24:32:e4:76:e7:d1:4f:ef:bb:69:e3:74:81:c9:59:4b:41:8c:
         a2:2f:bc:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERu0+m0/a2MWnZr8UztbcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTU5ODIwZGQ3MTgwMDRmYjE1Yzg1YjI3MDc5NmNiNGU4
NGE0ZWEwHhcNMjYxMDA2MTUwMDUwWhcNMjYxMDA3MTUwMDUwWjAzMTEwLwYDVQQD
Eyg0NDgyOTdjMzkzZmIzZDhjNGRjYmE0NWZhMTUzYWJkMGYzMzIzYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6UK707HHn30UU6NNhTBwzFrvGKr
A4BZp1RpdPLTnBPQl7hBIs6hl//s+HLuzgGtSgDE3uJ9Ef9/ZjUHiE/5GDauxsPA
RAhhGl7su+cwA8PUUvINYOMswawWj1+0Y+pXsgIhBsPfP2sCFntAsk644Z+UDCGE
5Spokd8b46NS2F17tDfPYWE6jC5gthpas9IT8UegVBB8HZiFFlVPcHkHOE89aGw5
gvRJFyPzbhGB/qlfqrtsyPVrPu6r57bz/AgmUiR8EdVoAY5w+uXNSbjhqwmncgcK
LNCTxPHOjsojG4uWNkoo1h/bMdsrlitJ75pSFUOwsmOF1+DbM0Ik9020zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESCl8OT+z2MTcukX6FTq9DzMjv0MB8GA1UdIwQY
MBaAFGkVmCDdcYAE+xXIWycHlstOhKTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEt
Yzk0OWYwNTkxZjViLzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEtYzk0OWYwNTkxZjVi
LzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3AvogNe8
SOxN0bxKZp5hOH/XTsllgF17PFo6Q9qk2Rp9ZihS+mWFyOXGxHbYfwhB8+Df1G+3
x/Cj6k8BV9GVg7/FPfS1uKi3fddecMYVMGkpEnLnYh5a3afzddFvD1jn71ZOt7pK
24PlWHi4fjmWMFOxLwx2yxJV2+MlXWU6bnnKP4B4sb1Ikzrv2Xh6qZ8gFkKnDIB/
Flcv0JGrjb7H1TDMclSTaisvefSsRuQ6wgoI+Q5B62Zx9In5resdBiFYhwZAJCRz
eI21VWAgcEEq5atF4sdy+LRm+xxZOHXHFPVx3BK4t+rtinuZJDLkdufRT++7aeN0
gclZS0GMoi+8Og==
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:55:12 2026 by rpki-client