Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          OlOyzbwW+2ItZq6re8lP/Z8x8VETqh98IffABPywn1A=
Subject key identifier:   F7:30:FA:5D:50:48:60:9B:07:2E:B3:FC:93:00:0D:A9:45:2A:3C:EA
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       01A13DB8CFB890B260C4B8222573347B2779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 04:01:24 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:24 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:24 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: v5uIWgPscpQvkqf/IV0T5LXbbn5Yq2mf19ew85wY70A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:cf:b8:90:b2:60:c4:b8:22:25:73:34:7b:27:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Oct 15 04:01:24 2026 GMT
            Not After : Oct 16 04:01:24 2026 GMT
        Subject: CN=f730fa5d5048609b072eb3fc93000da9452a3cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:cf:f8:c4:69:eb:c0:82:e5:fd:33:f3:2f:
                    3a:69:e9:ba:cb:c4:de:c0:f4:63:8c:c2:7f:e9:20:
                    40:ae:b6:51:7b:db:d4:1b:56:30:8f:d9:a6:30:f5:
                    f5:07:95:b7:1c:32:f3:9f:ec:3b:3a:67:85:05:6e:
                    cb:56:4c:18:80:b1:ae:98:45:b8:84:11:96:3a:52:
                    16:43:92:ea:08:50:f0:ef:46:cc:f7:42:18:50:6e:
                    5d:c0:e8:4b:83:4d:55:38:47:65:61:d0:a6:a9:a1:
                    ef:53:c4:ba:15:20:ef:d2:5f:87:54:21:bb:61:86:
                    62:2b:24:dc:17:56:cf:18:bb:ac:9d:0c:ac:85:40:
                    b6:a2:07:ec:b9:2a:6f:db:93:d1:6d:f7:0d:aa:82:
                    4e:b5:7a:97:2f:01:66:db:95:a8:e1:f2:b4:9a:a0:
                    f0:53:0f:cc:7c:d9:fc:06:7d:2e:6a:e0:9f:3d:8c:
                    4d:83:82:28:44:c9:46:a0:aa:86:41:ce:93:91:11:
                    60:45:33:a9:37:c6:1a:56:43:66:b5:de:6f:f4:3b:
                    10:1f:f3:7f:71:51:4b:81:9c:31:71:e6:79:c9:cb:
                    7b:3f:d5:b8:4f:8b:65:02:cf:73:21:fb:56:57:2c:
                    d1:50:cc:1a:4c:2f:96:9c:72:39:8a:fa:f3:65:75:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:30:FA:5D:50:48:60:9B:07:2E:B3:FC:93:00:0D:A9:45:2A:3C:EA
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:73:38:eb:a9:ae:ff:d4:2c:bc:c0:1b:fe:a8:6a:f6:07:
         b2:c0:55:59:4b:ba:bf:e2:5c:93:fe:d2:b1:45:8e:e5:4d:f5:
         60:1c:08:b9:8b:8d:61:a8:f2:14:03:44:48:75:b0:26:c1:8b:
         7a:3c:3a:7f:76:53:e2:5b:10:6a:e0:d4:3d:1a:82:6f:6e:fa:
         7f:c3:84:ca:1a:9b:91:46:cf:65:ad:22:6a:2b:84:0e:50:df:
         58:c9:8f:d0:39:38:b4:bd:9f:74:79:92:e3:0e:e3:9a:37:bb:
         04:bf:3c:80:ee:62:bf:e9:e4:14:b4:f1:79:f0:d0:3f:5d:87:
         52:e1:ae:33:82:d7:c3:ab:20:37:8f:f0:72:33:b0:9c:24:a0:
         67:a0:7c:81:02:77:0f:d8:44:de:5f:1d:86:ff:52:5c:ca:ab:
         6d:d6:92:a7:fc:94:88:db:67:3b:00:f1:7c:d9:f8:25:49:d1:
         04:10:b0:7a:f6:ee:19:ec:70:ce:b0:65:68:8c:31:f3:74:ec:
         11:4f:c6:0d:79:ec:9b:56:86:08:5e:6f:7c:de:a7:ef:3e:ce:
         ba:23:5a:84:77:5c:fc:4f:3d:78:77:d5:88:fe:c4:b6:b1:3f:
         04:c3:0a:50:51:54:d2:5d:da:15:21:f0:ef:75:0b:8a:f2:a8:
         22:aa:7d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uM+4kLJgxLgiJXM0eyd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWJjMmVhNjI1MjM4YmI0ZTI4MjFhMThiZDVlZWVhM2E2
OGE3ZjkwHhcNMjYxMDE1MDQwMTI0WhcNMjYxMDE2MDQwMTI0WjAzMTEwLwYDVQQD
EyhmNzMwZmE1ZDUwNDg2MDliMDcyZWIzZmM5MzAwMGRhOTQ1MmEzY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRHP+MRp68CC5f0z8y86aem6y8Te
wPRjjMJ/6SBArrZRe9vUG1Ywj9mmMPX1B5W3HDLzn+w7OmeFBW7LVkwYgLGumEW4
hBGWOlIWQ5LqCFDw70bM90IYUG5dwOhLg01VOEdlYdCmqaHvU8S6FSDv0l+HVCG7
YYZiKyTcF1bPGLusnQyshUC2ogfsuSpv25PRbfcNqoJOtXqXLwFm25Wo4fK0mqDw
Uw/MfNn8Bn0uauCfPYxNg4IoRMlGoKqGQc6TkRFgRTOpN8YaVkNmtd5v9DsQH/N/
cVFLgZwxceZ5yct7P9W4T4tlAs9zIftWVyzRUMwaTC+WnHI5ivrzZXWZxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcw+l1QSGCbBy6z/JMADalFKjzqMB8GA1UdIwQY
MBaAFOsbwupiUji7TighoYvV7uo6aKf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2Et
NTg5MjIyNzJiYjE3LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8xM2Y1M2MtMmFhMi00N2M2LTg4Y2EtNTg5MjIyNzJiYjE3
LzEvNnh2QzZtSlNPTHRPS0NHaGk5WHU2anBvcF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1hzOOup
rv/ULLzAG/6oavYHssBVWUu6v+Jck/7SsUWO5U31YBwIuYuNYajyFANESHWwJsGL
ejw6f3ZT4lsQauDUPRqCb276f8OEyhqbkUbPZa0iaiuEDlDfWMmP0Dk4tL2fdHmS
4w7jmje7BL88gO5iv+nkFLTxefDQP12HUuGuM4LXw6sgN4/wcjOwnCSgZ6B8gQJ3
D9hE3l8dhv9SXMqrbdaSp/yUiNtnOwDxfNn4JUnRBBCwevbuGexwzrBlaIwx83Ts
EU/GDXnsm1aGCF5vfN6n7z7OuiNahHdc/E89eHfViP7EtrE/BMMKUFFU0l3aFSHw
73ULivKoIqp9eA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:03 2026 by rpki-client