Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
File:                     6z1v54fFBVOwcxcRLhnmW09nWTE.mft (raw, json)
Hash identifier:          iNTiaTptrCpTFBzK+rdGbDKOZDS8nK8y5jJ8I1WJ4sI=
Subject key identifier:   BE:59:4C:EA:BD:8D:33:91:30:50:AD:99:9B:CD:C1:01:A2:97:5E:0E
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Certificate issuer:       /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial:       01A0F7C46833D3AD79F9BAEB2EBC7044155B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
Manifest number:          1A43
Signing time:             Thu 01 Oct 2026 14:00:38 +0000
Manifest this update:     Thu 01 Oct 2026 14:00:38 +0000
Manifest next update:     Fri 02 Oct 2026 14:00:38 +0000
Files and hashes:         1: 6z1v54fFBVOwcxcRLhnmW09nWTE.crl (hash: 2ksuKXevfFZh7lE7DlFKh4vcgUsvXqnCRq+LJGTuGQI=)
                          2: AFOIxUpYh_Q-uzbnSGlrV0_PNRg.roa (hash: 9TWTjByJcZOyWpXeC0+/dCxoa8gWYVHVu+bJhn9WUwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:c4:68:33:d3:ad:79:f9:ba:eb:2e:bc:70:44:15:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
        Validity
            Not Before: Oct  1 14:00:38 2026 GMT
            Not After : Oct  2 14:00:38 2026 GMT
        Subject: CN=be594ceabd8d33913050ad999bcdc101a2975e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:03:e7:c0:07:3f:52:84:1f:f9:8e:04:b9:
                    d5:44:fb:7d:64:df:f9:ea:f2:fc:b5:84:5d:bf:ab:
                    d3:33:2c:bd:97:90:23:ec:dd:27:23:17:e2:0e:c0:
                    c1:49:0d:16:fa:1e:00:fb:fd:19:73:28:52:f6:6b:
                    69:78:2f:95:09:44:ba:2e:46:71:80:16:9c:0e:c0:
                    9e:8b:b9:a4:25:a9:fd:1d:a4:ae:bc:54:a7:70:20:
                    e0:d1:91:6d:e3:52:76:83:a5:f6:2b:13:b0:55:9a:
                    f1:dc:0c:74:4c:62:c8:7a:f9:c5:e3:ca:12:ea:d2:
                    09:4c:1e:9d:b6:9d:0a:df:41:ef:32:25:4d:e6:1d:
                    bb:7b:37:c5:0f:95:87:60:83:eb:4f:af:bf:3d:33:
                    63:bc:3e:a2:30:d0:c6:6e:8a:c2:05:0e:c0:28:ff:
                    c5:11:9c:b4:43:e6:2f:15:eb:db:63:d1:2f:25:1d:
                    7d:73:f9:f2:51:5b:8f:23:ce:0a:06:9a:0a:fc:f3:
                    0e:58:89:7a:c6:78:47:59:0c:ed:b0:91:00:73:34:
                    83:50:01:88:eb:ff:9d:f6:b1:15:2f:46:38:8b:24:
                    f4:88:1a:94:3f:51:16:7a:2c:fa:7a:3b:0f:dc:d3:
                    ca:a4:20:d8:4a:cd:d0:6f:dd:a2:32:ef:3d:d5:db:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:59:4C:EA:BD:8D:33:91:30:50:AD:99:9B:CD:C1:01:A2:97:5E:0E
            X509v3 Authority Key Identifier:
                keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:8a:69:67:6a:ed:05:87:10:5a:2d:be:9b:19:99:5e:c8:
         3f:98:be:6e:6f:5b:a7:e6:dd:a6:04:fd:b2:68:e7:76:ba:bf:
         0c:57:d8:0f:2e:24:38:44:b6:51:d0:2b:38:2d:27:17:e7:2f:
         ab:e8:4c:27:de:fe:e7:44:7b:91:34:d1:81:24:45:6c:8e:f8:
         95:3a:25:59:b1:33:94:68:ba:8a:80:ea:58:c5:27:f5:41:f3:
         58:42:02:d4:6f:ec:c8:a3:bb:d2:d9:0c:15:65:83:35:28:c8:
         be:78:ce:ed:30:33:1b:1b:de:97:50:b6:fd:ea:5a:92:9d:59:
         6f:ad:fe:f1:ed:c5:cc:d1:08:0c:ab:9a:73:ce:84:43:ef:1c:
         94:0a:3c:92:88:e6:4c:53:93:fa:43:59:d3:2f:07:50:38:10:
         02:3f:87:dd:9e:b7:71:3e:84:ba:52:fd:d4:30:55:c6:78:2a:
         76:02:7e:a2:15:58:3c:ef:57:73:b7:57:38:28:dd:de:bb:f1:
         12:aa:ec:d8:97:7b:6f:af:4f:26:ad:9c:43:f0:c9:e5:e7:50:
         df:8e:fb:ec:11:3d:d3:a2:41:5b:e2:b9:7d:c6:73:ca:df:40:
         26:3d:cc:24:d2:7f:06:6d:df:be:0a:45:79:6e:a2:89:64:27:
         fd:28:d7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD3xGgz0615+brrLrxwRBVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViM2Q2ZmU3ODdjNTA1NTNiMDczMTcxMTJlMTllNjViNGY2
NzU5MzEwHhcNMjYxMDAxMTQwMDM4WhcNMjYxMDAyMTQwMDM4WjAzMTEwLwYDVQQD
EyhiZTU5NGNlYWJkOGQzMzkxMzA1MGFkOTk5YmNkYzEwMWEyOTc1ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozMD58AHP1KEH/mOBLnVRPt9ZN/5
6vL8tYRdv6vTMyy9l5Aj7N0nIxfiDsDBSQ0W+h4A+/0ZcyhS9mtpeC+VCUS6LkZx
gBacDsCei7mkJan9HaSuvFSncCDg0ZFt41J2g6X2KxOwVZrx3Ax0TGLIevnF48oS
6tIJTB6dtp0K30HvMiVN5h27ezfFD5WHYIPrT6+/PTNjvD6iMNDGborCBQ7AKP/F
EZy0Q+YvFevbY9EvJR19c/nyUVuPI84KBpoK/PMOWIl6xnhHWQztsJEAczSDUAGI
6/+d9rEVL0Y4iyT0iBqUP1EWeiz6ejsP3NPKpCDYSs3Qb92iMu891dtAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5ZTOq9jTORMFCtmZvNwQGil14OMB8GA1UdIwQY
MBaAFOs9b+eHxQVTsHMXES4Z5ltPZ1kxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUt
MWEwMDcxNTdkNTlhLzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wN2NlN2UtNDY0MS00OTg1LTk4NDUtMWEwMDcxNTdkNTlh
LzEvNnoxdjU0ZkZCVk93Y3hjUkxobm1XMDluV1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeOKaWdq
7QWHEFotvpsZmV7IP5i+bm9bp+bdpgT9smjndrq/DFfYDy4kOES2UdArOC0nF+cv
q+hMJ97+50R7kTTRgSRFbI74lTolWbEzlGi6ioDqWMUn9UHzWEIC1G/syKO70tkM
FWWDNSjIvnjO7TAzGxvel1C2/epakp1Zb63+8e3FzNEIDKuac86EQ+8clAo8kojm
TFOT+kNZ0y8HUDgQAj+H3Z63cT6EulL91DBVxngqdgJ+ohVYPO9Xc7dXOCjd3rvx
Eqrs2Jd7b69PJq2cQ/DJ5edQ34777BE906JBW+K5fcZzyt9AJj3MJNJ/Bm3fvgpF
eW6iiWQn/SjX+Q==
-----END CERTIFICATE-----
Generated at Fri Oct 2 02:50:24 2026 by rpki-client