Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          OMHeV3alNXlNfQL8xzeZ6D1+ssXVGKZ6gpb6vI/3mjc=
Subject key identifier:   43:8C:6A:B7:DE:62:5C:87:DA:06:BB:62:BF:20:11:B4:B7:E6:E0:B7
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       01A17DAA8C5E2A83AC801BC0E1E20B6836D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          05A5
Signing time:             Tue 27 Oct 2026 14:01:31 +0000
Manifest this update:     Tue 27 Oct 2026 14:01:31 +0000
Manifest next update:     Wed 28 Oct 2026 14:01:31 +0000
Files and hashes:         1: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: BWiLtFvfpLTZv/WZ83suJLqmsJGRIR1nf3p0dddAeS8=)
                          2: Qopn3fwNwnS0ih4dejbW_OpTwxQ.roa (hash: JdPihEsZ6tT2+sczntCGGr/PDdYGd+kbINCzgVJa7xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:aa:8c:5e:2a:83:ac:80:1b:c0:e1:e2:0b:68:36:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: Oct 27 14:01:31 2026 GMT
            Not After : Oct 28 14:01:31 2026 GMT
        Subject: CN=438c6ab7de625c87da06bb62bf2011b4b7e6e0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:99:e8:52:d6:28:fa:f6:ef:17:91:8a:93:
                    4f:e4:b3:b8:13:95:2c:4c:63:e4:aa:06:0f:6a:47:
                    63:4c:7b:da:bd:0d:9f:d0:10:19:ba:41:92:14:ee:
                    10:8c:5b:13:e2:78:54:96:18:01:8d:ee:db:1b:5e:
                    76:59:76:8d:a5:e5:9b:b8:bb:5e:bf:07:d7:76:3b:
                    98:20:b1:6a:bf:f1:e9:c6:9a:87:02:c2:30:7d:7d:
                    8c:67:e5:2c:8a:04:a0:2e:77:70:aa:3e:31:8d:0b:
                    0f:c1:68:17:bc:a5:7a:21:a0:f3:76:2b:e6:ee:86:
                    eb:c3:71:06:8d:e4:9c:d4:3c:48:f8:64:95:a6:27:
                    08:64:7c:19:aa:db:d0:f4:4b:fc:6b:b5:56:98:dd:
                    10:ce:d9:4e:78:f3:de:65:8d:0f:e4:23:a7:c7:3a:
                    a2:35:3f:71:e1:c5:4f:a5:f5:bd:99:3c:ce:12:ed:
                    75:b7:6a:f1:a1:92:08:31:6e:f8:49:ff:2e:c2:1c:
                    da:64:01:3d:7c:e5:c9:15:4d:dd:4d:e4:98:aa:60:
                    2b:db:12:40:1a:4b:b0:56:d4:cc:c8:63:53:fb:53:
                    00:8c:88:be:9b:72:05:c5:83:ef:80:d2:21:f6:49:
                    8b:b9:e6:e3:9b:ad:ff:f1:ce:6f:0e:39:49:6a:8b:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8C:6A:B7:DE:62:5C:87:DA:06:BB:62:BF:20:11:B4:B7:E6:E0:B7
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:b7:f0:f5:b5:27:a9:f0:64:de:3c:64:92:59:ea:ac:d9:
         71:57:c9:be:5f:e4:27:1c:6e:bc:cf:4d:93:78:b4:79:36:56:
         c6:e4:6d:fc:f9:5b:d3:ed:f2:b1:5e:74:c0:65:b1:69:62:8e:
         50:1a:18:c5:2c:1a:cb:5c:a7:2c:29:da:05:7b:95:fd:69:c2:
         54:3d:0e:aa:55:2c:e6:ca:36:52:45:b9:77:95:4c:de:ed:55:
         9a:19:f3:69:c4:82:2c:0a:e4:92:b5:b0:96:5d:78:57:6b:27:
         72:d6:8f:f1:49:36:92:c2:eb:ca:c0:65:2d:9c:31:94:a4:d4:
         04:04:4c:b2:38:f9:22:f7:72:45:81:54:f1:e8:24:fe:5c:b3:
         fc:09:a6:68:10:14:73:4a:ec:1d:57:2a:04:6c:ab:4d:6b:45:
         d2:4a:fd:dc:ed:b4:01:5a:7b:b8:52:63:8a:20:0b:8a:1f:f3:
         a2:5e:12:47:8b:c9:40:ff:db:97:36:c6:4a:5a:89:41:9a:8d:
         15:5e:50:be:88:0e:6b:6b:34:a9:c2:04:c9:61:9e:91:69:33:
         a9:e4:7b:47:8a:6c:c0:b0:6e:9e:b6:6a:39:1e:14:13:4a:62:
         34:ff:80:d7:46:87:2d:87:a6:92:56:85:1d:9e:09:c2:c6:b5:
         c2:51:7e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9qoxeKoOsgBvA4eILaDbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGJlZjk2NjE2YjY1MmRjMzY0MTg0NzA1NTVmZThkNTky
MjE4ODgwHhcNMjYxMDI3MTQwMTMxWhcNMjYxMDI4MTQwMTMxWjAzMTEwLwYDVQQD
Eyg0MzhjNmFiN2RlNjI1Yzg3ZGEwNmJiNjJiZjIwMTFiNGI3ZTZlMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlByZ6FLWKPr27xeRipNP5LO4E5Us
TGPkqgYPakdjTHvavQ2f0BAZukGSFO4QjFsT4nhUlhgBje7bG152WXaNpeWbuLte
vwfXdjuYILFqv/HpxpqHAsIwfX2MZ+UsigSgLndwqj4xjQsPwWgXvKV6IaDzdivm
7obrw3EGjeSc1DxI+GSVpicIZHwZqtvQ9Ev8a7VWmN0QztlOePPeZY0P5COnxzqi
NT9x4cVPpfW9mTzOEu11t2rxoZIIMW74Sf8uwhzaZAE9fOXJFU3dTeSYqmAr2xJA
GkuwVtTMyGNT+1MAjIi+m3IFxYPvgNIh9kmLuebjm63/8c5vDjlJaovD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOMarfeYlyH2ga7Yr8gEbS35uC3MB8GA1UdIwQY
MBaAFOhL75Zha2Utw2QYRwVV/o1ZIhiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYzRkMDYtY2IxYy00M2UxLWFiNjgt
MDQ2ZjY4ZDcyMzI5LzEvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYzRkMDYtY2IxYy00M2UxLWFiNjgtMDQ2ZjY4ZDcyMzI5
LzEvNkV2dmxtRnJaUzNEWkJoSEJWWC1qVmtpR0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxO38PW1
J6nwZN48ZJJZ6qzZcVfJvl/kJxxuvM9Nk3i0eTZWxuRt/Plb0+3ysV50wGWxaWKO
UBoYxSway1ynLCnaBXuV/WnCVD0OqlUs5so2UkW5d5VM3u1VmhnzacSCLArkkrWw
ll14V2snctaP8Uk2ksLrysBlLZwxlKTUBARMsjj5IvdyRYFU8egk/lyz/AmmaBAU
c0rsHVcqBGyrTWtF0kr93O20AVp7uFJjiiALih/zol4SR4vJQP/blzbGSlqJQZqN
FV5QvogOa2s0qcIEyWGekWkzqeR7R4pswLBunrZqOR4UE0piNP+A10aHLYemklaF
HZ4Jwsa1wlF+1g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:50 2026 by rpki-client