Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
File:                     I35O6WWAXHT-K615pepShu9ofZk.mft (raw, json)
Hash identifier:          jZuxTOWjJ72sJQuwIl1kcSSrS49T1Cz4s3MkczY45RM=
Subject key identifier:   9C:1B:61:A4:A6:A1:59:15:10:3F:85:36:37:2B:0F:2F:CB:3C:DA:C4
Authority key identifier: 23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99
Certificate issuer:       /CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
Certificate serial:       01A18307A1B1657CD99AAB74304215A5527A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
Manifest number:          6B
Signing time:             Wed 28 Oct 2026 15:01:17 +0000
Manifest this update:     Wed 28 Oct 2026 15:01:17 +0000
Manifest next update:     Thu 29 Oct 2026 15:01:17 +0000
Files and hashes:         1: Dw86BQwD7CpxNVB1IfdiHj_0660.asa (hash: oEarT5CVUXeCjVcHP6Lq9WuNhCM+VyZb6nwKwT5caDM=)
                          2: I35O6WWAXHT-K615pepShu9ofZk.crl (hash: HYRY1+hwZ/+7Nio6qS0Vgc+4ohXh+dsEX9t4a5sRTd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:07:a1:b1:65:7c:d9:9a:ab:74:30:42:15:a5:52:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237e4ee965805c74fe2bad79a5ea5286ef687d99
        Validity
            Not Before: Oct 28 15:01:17 2026 GMT
            Not After : Oct 29 15:01:17 2026 GMT
        Subject: CN=9c1b61a4a6a15915103f8536372b0f2fcb3cdac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:79:42:b9:37:93:44:77:7f:e3:a9:bb:48:
                    02:4e:e4:05:3d:df:18:f6:4d:f0:85:83:19:cb:d6:
                    8a:99:98:7d:79:57:c7:c1:0a:20:a7:f9:e4:5c:81:
                    1e:83:da:d7:ad:e5:e8:57:d0:c4:e0:15:9a:d0:3b:
                    da:b6:d8:7d:4f:7b:c7:f3:ca:c6:57:8a:8d:4c:99:
                    7a:98:95:3c:43:9b:24:1f:f8:4d:97:85:78:f0:aa:
                    9d:3f:ef:a6:72:8b:f8:ad:d8:fa:bf:02:25:eb:6e:
                    01:fc:1d:db:b0:05:bb:ac:aa:7e:17:c0:48:5d:95:
                    0d:8f:e4:7b:f2:63:26:a2:c0:27:4c:10:da:7a:0c:
                    43:5e:bd:7b:9e:49:42:18:67:87:84:01:b2:b3:7b:
                    a4:a3:77:a5:b8:3a:fe:15:f2:59:8e:a7:de:ae:dd:
                    98:21:98:58:d3:30:36:6d:84:57:27:f3:3f:1b:71:
                    63:3c:6b:f0:a4:eb:8c:67:82:b2:b7:be:84:e7:30:
                    b1:d0:7f:14:6b:14:7b:b6:f4:c6:e0:5e:aa:b0:35:
                    7b:6b:59:67:fe:89:37:cb:0e:9b:ff:79:37:29:f2:
                    2e:e0:c8:48:e4:30:7c:80:ba:19:91:57:35:21:e9:
                    b3:10:90:47:8b:cb:26:76:e3:b2:bc:29:2f:cc:56:
                    90:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1B:61:A4:A6:A1:59:15:10:3F:85:36:37:2B:0F:2F:CB:3C:DA:C4
            X509v3 Authority Key Identifier:
                keyid:23:7E:4E:E9:65:80:5C:74:FE:2B:AD:79:A5:EA:52:86:EF:68:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I35O6WWAXHT-K615pepShu9ofZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/78fe6a-e770-4292-b080-1f9b339ebded/1/I35O6WWAXHT-K615pepShu9ofZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:16:d0:db:0c:bf:f8:12:2c:49:62:ce:de:80:35:dd:49:f8:
         d3:bc:b6:38:79:0b:ff:59:3b:e6:c4:0f:d9:e1:ba:82:d7:64:
         7a:94:cd:68:d6:52:70:13:7e:93:fe:96:57:d3:59:e6:96:d3:
         a6:9a:1e:32:82:28:1b:84:7c:60:59:15:2e:13:83:4a:5c:66:
         70:70:6e:e7:2c:cd:a6:99:27:ac:47:e1:9c:1b:b3:c8:2b:a3:
         8d:0b:61:3b:1c:6f:cc:25:62:9d:2c:b2:df:03:40:9f:b6:d1:
         eb:4b:d1:3d:df:e2:db:e4:93:28:89:ea:d4:51:bb:0a:92:df:
         1f:e4:ad:31:20:71:ff:29:c1:e4:9d:4d:22:be:47:9d:07:78:
         65:f2:f1:95:d8:08:18:2f:4d:91:a9:f7:10:09:a5:e5:2f:87:
         ad:b2:af:f4:79:68:4d:a7:73:17:05:61:b7:04:7d:bb:b4:f4:
         bc:fe:cf:d9:74:6d:cb:13:25:f9:8f:26:00:52:5b:e5:68:fc:
         69:4c:e6:11:fd:11:d3:99:3e:c3:07:1f:2a:69:fe:a4:e8:2a:
         6b:bc:56:c0:25:26:35:71:f8:57:13:5b:7f:11:3f:dd:18:f3:
         04:93:58:c4:6e:43:a9:fa:b7:d3:ce:2f:71:7c:a4:c2:dc:f1:
         f2:a4:57:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDB6GxZXzZmqt0MEIVpVJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2U0ZWU5NjU4MDVjNzRmZTJiYWQ3OWE1ZWE1Mjg2ZWY2
ODdkOTkwHhcNMjYxMDI4MTUwMTE3WhcNMjYxMDI5MTUwMTE3WjAzMTEwLwYDVQQD
Eyg5YzFiNjFhNGE2YTE1OTE1MTAzZjg1MzYzNzJiMGYyZmNiM2NkYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFp5Qrk3k0R3f+Opu0gCTuQFPd8Y
9k3whYMZy9aKmZh9eVfHwQogp/nkXIEeg9rXreXoV9DE4BWa0Dvatth9T3vH88rG
V4qNTJl6mJU8Q5skH/hNl4V48KqdP++mcov4rdj6vwIl624B/B3bsAW7rKp+F8BI
XZUNj+R78mMmosAnTBDaegxDXr17nklCGGeHhAGys3uko3eluDr+FfJZjqfert2Y
IZhY0zA2bYRXJ/M/G3FjPGvwpOuMZ4Kyt76E5zCx0H8UaxR7tvTG4F6qsDV7a1ln
/ok3yw6b/3k3KfIu4MhI5DB8gLoZkVc1IemzEJBHi8smduOyvCkvzFaQKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwbYaSmoVkVED+FNjcrDy/LPNrEMB8GA1UdIwQY
MBaAFCN+TullgFx0/iuteaXqUobvaH2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM1TzZXV0FYSFQtSzYxNXBlcFNodTlvZlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83OGZlNmEtZTc3MC00MjkyLWIwODAt
MWY5YjMzOWViZGVkLzEvSTM1TzZXV0FYSFQtSzYxNXBlcFNodTlvZlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83OGZlNmEtZTc3MC00MjkyLWIwODAtMWY5YjMzOWViZGVk
LzEvSTM1TzZXV0FYSFQtSzYxNXBlcFNodTlvZlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhbQ2wy/
+BIsSWLO3oA13Un407y2OHkL/1k75sQP2eG6gtdkepTNaNZScBN+k/6WV9NZ5pbT
ppoeMoIoG4R8YFkVLhODSlxmcHBu5yzNppknrEfhnBuzyCujjQthOxxvzCVinSyy
3wNAn7bR60vRPd/i2+STKInq1FG7CpLfH+StMSBx/ynB5J1NIr5HnQd4ZfLxldgI
GC9Nkan3EAml5S+HrbKv9HloTadzFwVhtwR9u7T0vP7P2XRtyxMl+Y8mAFJb5Wj8
aUzmEf0R05k+wwcfKmn+pOgqa7xWwCUmNXH4VxNbfxE/3RjzBJNYxG5Dqfq3084v
cXykwtzx8qRXQw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:32 2026 by rpki-client