Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          Mi/sthyErSGeik1uB87bDCNdWN/qU/ZqbPLS7n+1Fmw=
Subject key identifier:   C2:F2:F7:05:50:F5:6F:97:81:66:46:BB:91:B7:73:4F:CC:91:B5:F6
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       01A0875492E0FBCD545CA546D1380D442F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          1061
Signing time:             Wed 09 Sep 2026 18:01:01 +0000
Manifest this update:     Wed 09 Sep 2026 18:01:01 +0000
Manifest next update:     Thu 10 Sep 2026 18:01:01 +0000
Files and hashes:         1: 4xfelhMyKjiAcpwxhZeIvv3Qing.roa (hash: M45T3Ux9RH0dWd2jQVba7oO9zhwgfDQ6pVLKhbaYTkM=)
                          2: LgD5htJGPPhQqKRT3OXosm95CvA.roa (hash: oCLNTeRXkZO9pSz62dS9ZHRdid9Os6l7QArra7xL/Dg=)
                          3: WM9dDCzCe6gGu2ODAykACZrFrbA.roa (hash: 4IvyYiGqHBx7zs5uBUW79nDrwRTJcNSRaHg9JrlQ3jo=)
                          4: kPRn4IPVWWUv814bPYd5aulY4vs.roa (hash: pu7rhb9GulQsSqKDEhgigUvr3uxyKt/XFbT+d2vYueU=)
                          5: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (hash: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo=)
                          6: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: nAssWdiqSDsMu3HxbXU3d44tV2rmNN425yHY+5dml2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:87:54:92:e0:fb:cd:54:5c:a5:46:d1:38:0d:44:2f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: Sep  9 18:01:01 2026 GMT
            Not After : Sep 10 18:01:01 2026 GMT
        Subject: CN=c2f2f70550f56f97816646bb91b7734fcc91b5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:03:b2:47:b2:3b:55:47:b4:93:7b:4c:d2:
                    73:b8:15:58:66:5b:bc:3f:52:d5:d2:c7:b3:c6:78:
                    9d:93:be:dc:ca:40:e1:c8:4e:89:98:87:9e:30:a1:
                    40:cb:85:e0:95:a5:97:d8:9b:d7:e6:07:83:70:54:
                    d9:c0:3b:4c:7c:01:cc:ea:bb:09:11:c2:6a:e9:27:
                    9f:a7:a2:e7:62:25:e0:2a:87:8d:23:15:ba:49:49:
                    59:16:1b:9f:c8:5a:7d:aa:03:9e:66:9c:43:53:e2:
                    53:34:86:7f:c1:98:f5:81:cd:d4:b5:4c:f8:94:25:
                    b0:04:5d:92:f7:f1:25:38:3a:09:3f:f2:33:db:4f:
                    84:35:7c:7b:9d:f9:d2:8d:bd:8d:86:3b:3a:78:02:
                    08:94:04:71:11:6b:2a:45:84:6c:5f:51:96:75:b9:
                    0c:fb:a8:82:41:e9:f6:f6:f0:4a:2c:74:82:b4:da:
                    f7:63:fb:d1:bd:ac:25:7e:b7:85:fe:40:6f:13:3e:
                    e2:1d:8b:99:dd:5f:34:5f:78:66:a3:4e:98:39:46:
                    7b:0a:38:00:2b:a9:7b:c8:70:ac:dd:0e:88:a6:8e:
                    c9:a1:ab:96:2b:41:aa:ec:94:78:24:e5:75:26:b7:
                    2a:ce:a7:79:f1:17:6f:b5:9a:71:34:e0:50:05:ac:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F2:F7:05:50:F5:6F:97:81:66:46:BB:91:B7:73:4F:CC:91:B5:F6
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:a0:f1:57:35:03:75:21:7e:5c:15:33:e6:e4:d6:b9:05:
         63:5d:ae:cc:a5:e0:31:4a:f7:bb:e9:b6:14:bd:1d:76:dd:ca:
         63:ec:05:50:28:cf:79:6f:63:5c:5c:52:ee:b4:bb:71:50:80:
         4d:20:53:85:69:f7:bf:89:60:ad:15:64:e6:d0:ad:00:73:0c:
         08:3f:db:45:35:72:95:13:60:5f:3f:71:f5:27:5f:06:59:6e:
         0a:78:31:8c:9a:b2:1a:f8:d8:b0:2b:cc:bc:e5:8b:8f:e0:df:
         4f:72:a7:6e:1d:e2:63:9d:e6:40:b3:f7:e4:56:88:f7:28:17:
         9d:ec:02:c9:b8:2d:f8:4b:6e:c1:e5:0d:cc:27:c1:8e:a4:a9:
         b3:f6:36:b1:f8:c5:e2:c5:98:03:f2:8c:c1:0f:e2:ba:50:f8:
         70:ae:e5:7a:ad:84:6a:56:56:70:98:a9:e0:58:59:bd:df:08:
         bb:a6:2c:c3:cd:55:68:1a:16:74:4e:8b:a0:29:c0:39:93:32:
         01:43:25:ee:5c:7b:af:bd:14:2c:a5:e0:93:4e:2b:79:84:30:
         27:85:26:41:dc:3c:c2:81:8b:a8:16:61:e5:db:f1:05:c7:5f:
         04:d7:9e:b9:26:d6:57:87:3e:94:a3:07:99:ee:55:34:8a:49:
         42:6b:28:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCHVJLg+81UXKVG0TgNRC9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1
NzcyMTMwHhcNMjYwOTA5MTgwMTAxWhcNMjYwOTEwMTgwMTAxWjAzMTEwLwYDVQQD
EyhjMmYyZjcwNTUwZjU2Zjk3ODE2NjQ2YmI5MWI3NzM0ZmNjOTFiNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYgDskeyO1VHtJN7TNJzuBVYZlu8
P1LV0sezxnidk77cykDhyE6JmIeeMKFAy4XglaWX2JvX5geDcFTZwDtMfAHM6rsJ
EcJq6Sefp6LnYiXgKoeNIxW6SUlZFhufyFp9qgOeZpxDU+JTNIZ/wZj1gc3UtUz4
lCWwBF2S9/ElODoJP/Iz20+ENXx7nfnSjb2Nhjs6eAIIlARxEWsqRYRsX1GWdbkM
+6iCQen29vBKLHSCtNr3Y/vRvawlfreF/kBvEz7iHYuZ3V80X3hmo06YOUZ7CjgA
K6l7yHCs3Q6Ipo7JoauWK0Gq7JR4JOV1Jrcqzqd58RdvtZpxNOBQBaxDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLy9wVQ9W+XgWZGu5G3c0/MkbX2MB8GA1UdIwQY
MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt
YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0
LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDKg8Vc1
A3UhflwVM+bk1rkFY12uzKXgMUr3u+m2FL0ddt3KY+wFUCjPeW9jXFxS7rS7cVCA
TSBThWn3v4lgrRVk5tCtAHMMCD/bRTVylRNgXz9x9SdfBlluCngxjJqyGvjYsCvM
vOWLj+DfT3Knbh3iY53mQLP35FaI9ygXnewCybgt+EtuweUNzCfBjqSps/Y2sfjF
4sWYA/KMwQ/iulD4cK7leq2EalZWcJip4FhZvd8Iu6Ysw81VaBoWdE6LoCnAOZMy
AUMl7lx7r70ULKXgk04reYQwJ4UmQdw8woGLqBZh5dvxBcdfBNeeuSbWV4c+lKMH
me5VNIpJQmso1Q==
-----END CERTIFICATE-----
Generated at Wed Sep 9 22:24:53 2026 by rpki-client